{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "version": 1,
  "serialNumber": "urn:uuid:cbb5c9b4-9865-4424-8a27-f612c8b962d9",
  "metadata": {
    "timestamp": "2026-03-31T19:57:56.926Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "npm",
          "version": "11.11.0"
        },
        {
          "type": "application",
          "name": "cyclonedx-npm",
          "group": "@cyclonedx",
          "version": "4.2.1",
          "author": "Jan Kowalleck",
          "description": "Create CycloneDX Software Bill of Materials (SBOM) from NPM projects.",
          "licenses": [
            {
              "license": {
                "id": "Apache-2.0"
              }
            }
          ],
          "externalReferences": [
            {
              "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ]
        },
        {
          "type": "library",
          "name": "cyclonedx-library",
          "group": "@cyclonedx",
          "version": "10.0.0",
          "author": "Jan Kowalleck",
          "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).",
          "licenses": [
            {
              "license": {
                "id": "Apache-2.0"
              }
            }
          ],
          "externalReferences": [
            {
              "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ]
        }
      ]
    },
    "component": {
      "type": "application",
      "name": "pug",
      "version": "2.0.4-tuxcare.2",
      "bom-ref": "pug@2.0.4-tuxcare.2",
      "author": "TJ Holowaychuk",
      "description": "A clean, whitespace-sensitive template language for writing HTML",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pug@2.0.4-tuxcare.2?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Fpugjs%2Fpug.git%23master",
      "externalReferences": [
        {
          "url": "git+https://github.com/pugjs/pug.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://pugjs.org",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pugjs/pug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": ""
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "name": "coveralls",
      "version": "3.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|coveralls@3.0.2",
      "author": "Gregg Caines",
      "description": "takes json-cov output into stdin and POSTs to coveralls.io",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/coveralls@3.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/nickmerwin/node-coveralls.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nickmerwin/node-coveralls#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nickmerwin/node-coveralls/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/coveralls/-/coveralls-3.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4efd0b29efcc9013a2947dafed60624c176e760d8285f19b75769f73fb37df4763a45df328e9ae7a14de4708d759cee9cdf8fd16b0d44c0eed131e838aff0d17"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/coveralls"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest",
      "version": "24.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest@24.0.0",
      "description": "Delightful JavaScript Testing.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest@24.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://jestjs.io/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest/-/jest-24.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d59d846e53f80671116d6646b62a466fdce31c3abb9c21e0098ed5e7b1794986854495780c4d472a83b3f82442e4eac04e137d395851954853cec4c502b83689"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest"
        }
      ]
    },
    {
      "type": "library",
      "name": "jstransformer-cdata",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jstransformer-cdata@1.0.0",
      "author": "JSTransformers Team",
      "description": "A transformer that transforms a string into XML CDATA.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jstransformer-cdata@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jstransformers/jstransformer-cdata.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jstransformers/jstransformer-cdata#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jstransformers/jstransformer-cdata/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jstransformer-cdata/-/jstransformer-cdata-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7917f16ed12a09fb1b7a735a2d0946ea19ef715a16adc3a0a0c9621d934a21ef362a030058c55c175ef26bdfbe1a450e2fb91aac3e0ad290fa58efa0bc6216e3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jstransformer-cdata"
        }
      ]
    },
    {
      "type": "library",
      "name": "jstransformer-coffee-script",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|jstransformer-coffee-script@1.1.1",
      "author": "JSTransformers Team",
      "description": "Coffee-Script support for JSTransformers.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jstransformer-coffee-script@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jstransformers/jstransformer-coffee-script.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jstransformers/jstransformer-coffee-script#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jstransformers/jstransformer-coffee-script/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jstransformer-coffee-script/-/jstransformer-coffee-script-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8ee550f9294de9895e32a3cf6fda68dc00cbbe65ec2837cd74d964c85d2b4a8a26b93798efd0a42f7cdd20443d77982c6b55740462ca29a1aac260b43cff9a2a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jstransformer-coffee-script"
        }
      ]
    },
    {
      "type": "library",
      "name": "jstransformer-less",
      "version": "2.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jstransformer-less@2.3.0",
      "author": "JSTransformers Team",
      "description": "LESS support for JSTransformers.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jstransformer-less@2.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jstransformers/jstransformer-less.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jstransformers/jstransformer-less#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jstransformers/jstransformer-less/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jstransformer-less/-/jstransformer-less-2.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a0bc6e13808251b2340a818be90d277942e9b1935d82d33aa15320ba42419262a302ae6887166dbcbd8cabbf2f126ce7340fa6593a20c9d22d8c4d9515440a79"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jstransformer-less"
        }
      ]
    },
    {
      "type": "library",
      "name": "jstransformer-markdown-it",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jstransformer-markdown-it@1.0.0",
      "author": "JSTransformers Team",
      "description": "markdown-it support for JSTransformers.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jstransformer-markdown-it@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jstransformers/jstransformer-markdown-it.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jstransformers/jstransformer-markdown-it#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jstransformers/jstransformer-markdown-it/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jstransformer-markdown-it/-/jstransformer-markdown-it-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "389f6a75c61161929d4ad531b5f1d1b2ad4c9b36009c0af86632eda20809f1f4a7ebbb761558f7e12f831fa6271512bcfb97470dc1d9fe8ad19452faa7b6cadf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jstransformer-markdown-it"
        }
      ]
    },
    {
      "type": "library",
      "name": "jstransformer-stylus",
      "version": "1.5.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jstransformer-stylus@1.5.0",
      "author": "JSTransformers Team",
      "description": "Stylus support for JSTransformers.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jstransformer-stylus@1.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jstransformers/jstransformer-stylus.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jstransformers/jstransformer-stylus#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jstransformers/jstransformer-stylus/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jstransformer-stylus/-/jstransformer-stylus-1.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8f703976bc868c5102ccd1ced05e219a8b0ec17a1b2e911bfa6a36faada6cb072dce6d549c8212cef054beaf733e9bf1f6f0c487d967f12ada130ac59e47beb4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jstransformer-stylus"
        }
      ]
    },
    {
      "type": "library",
      "name": "jstransformer-uglify-js",
      "version": "1.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0",
      "author": "JSTransformers Team",
      "description": "UglifyJS support for JSTransformers.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jstransformer-uglify-js@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jstransformers/jstransformer-uglify-js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jstransformers/jstransformer-uglify-js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jstransformers/jstransformer-uglify-js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jstransformer-uglify-js/-/jstransformer-uglify-js-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c001674babdbac880605de3abc33454f86d4dd4e8a953fe8b1d4764160b4aefdc4684e362a66987009abd912e42262aa9c7d1930fda2ce60ca1e3a17285ff067"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jstransformer-uglify-js"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "uglify-js",
          "version": "2.8.29",
          "bom-ref": "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|uglify-js@2.8.29",
          "author": "Mihai Bazon",
          "description": "JavaScript parser, mangler/compressor and beautifier toolkit",
          "licenses": [
            {
              "license": {
                "id": "BSD-2-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/uglify-js@2.8.29",
          "externalReferences": [
            {
              "url": "git+https://github.com/mishoo/UglifyJS2.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "http://lisperator.net/uglifyjs",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mishoo/UglifyJS2/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.8.29.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "a8babfe32da98dc537be1961b1e5c6189ed56c53b8a4100dbb493097c5426bd28423457c55f648c76172df0d358924c0fe91b02994a6bbff88e1eb4b34376de7"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/jstransformer-uglify-js/node_modules/uglify-js"
            }
          ]
        },
        {
          "type": "library",
          "name": "source-map",
          "version": "0.5.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|source-map@0.5.7",
          "author": "Nick Fitzgerald",
          "description": "Generates and consumes source maps",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/source-map@0.5.7",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/mozilla/source-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mozilla/source-map",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mozilla/source-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "2dbae624e31449d115c482af75c273402fa74217bc1546504d7432ebe23be6c90d827dcea10d03640f189c56bb829f2daad2f728f7f5926a344790e802979219"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/jstransformer-uglify-js/node_modules/source-map"
            }
          ]
        },
        {
          "type": "library",
          "name": "yargs",
          "version": "3.10.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|yargs@3.10.0",
          "author": "Alex Ford",
          "description": "Light-weight option parsing with an argv hash. No optstrings attached.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/yargs@3.10.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/bcoe/yargs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/bcoe/yargs#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/bcoe/yargs/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "405cd46a1f3c1801b2f65c8328606a65d918029b7adeb0976011989c43f8c4324f5cda975e70430029dbad79d5895ea3452a8078fc2b0138b68bc99f626e0bd4"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/jstransformer-uglify-js/node_modules/yargs"
            }
          ]
        },
        {
          "type": "library",
          "name": "camelcase",
          "version": "1.2.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|camelcase@1.2.1",
          "author": "Sindre Sorhus",
          "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase@1.2.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "c332e40dae0afe6cc8d4e4884c2f835328e0225fc44cd1c4f50bd8832e89e89beacb2cf80b45df77e95085bd7db17da3329655e08b2c527d150d59a0955face2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/jstransformer-uglify-js/node_modules/camelcase"
            }
          ]
        },
        {
          "type": "library",
          "name": "cliui",
          "version": "2.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|cliui@2.1.0",
          "author": "Ben Coe",
          "description": "easily create complex multi-column command-line-interfaces",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cliui@2.1.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/bcoe/cliui.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/bcoe/cliui#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/bcoe/cliui/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "188398462cc6f931a873b5a07352e23932daadef794779b32a0a259fe43f944e1c7a2607d7d814a65d25d057eae2524311fdc5c6e8cc7ba2017ce0acee97ea34"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/jstransformer-uglify-js/node_modules/cliui"
            }
          ]
        },
        {
          "type": "library",
          "name": "wordwrap",
          "version": "0.0.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|wordwrap@0.0.2",
          "author": "James Halliday",
          "description": "Wrap those words. Show them at what columns to start and stop.",
          "licenses": [
            {
              "license": {
                "name": "MIT/X11",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/wordwrap@0.0.2",
          "externalReferences": [
            {
              "url": "git://github.com/substack/node-wordwrap.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/node-wordwrap#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/node-wordwrap/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "c5206c09e87e83e7629e806fdc600e58ce0b71554eebcc0b5d16a789bb4149d52f906590446784f4fec8c14f449830e2e2303a2f8e25cf5e4218cc1dc3d379f9"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/jstransformer-uglify-js/node_modules/wordwrap"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "jstransformer-verbatim",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|jstransformer-verbatim@1.1.1",
      "author": "JSTransformers Team",
      "description": "A transformer that acts as a pass-through.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jstransformer-verbatim@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jstransformers/jstransformer-verbatim.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jstransformers/jstransformer-verbatim#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jstransformers/jstransformer-verbatim/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jstransformer-verbatim/-/jstransformer-verbatim-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "51bbcad06611426c37514d4a67cdd7a5a7e5c22c8cecca3e031996548769fd9362e405f758a92413fff53572eaf131498e3219464b3cad458baae81f555abc20"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jstransformer-verbatim"
        }
      ]
    },
    {
      "type": "library",
      "name": "lerna",
      "version": "3.10.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|lerna@3.10.8",
      "author": "Sebastian McKenzie",
      "description": "A tool for managing JavaScript projects with multiple packages.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lerna@3.10.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lernajs.io/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lerna/-/lerna-3.10.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "51ae529199d593e82da656b0fc889739c924f5312f3703724d72647b98247f4bf192ef34f6246623b46523498a1548dec1e06cec0243801a03fc0faf1ecb7f51"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lerna"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "import-local",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|lerna@3.10.8|import-local@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Let a globally installed package use a locally installed version of itself if available",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/import-local@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/import-local.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/import-local#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/import-local/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/import-local/-/import-local-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "bc06991e278af6a8c6a39f1a811060f9b8475f78684d953f39adc611258bcfbb7553ad9f93adda1ee0c9244b5e5e80de4c270f9944fecf7f209073d99249a999"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/lerna/node_modules/import-local"
            }
          ]
        },
        {
          "type": "library",
          "name": "pkg-dir",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|lerna@3.10.8|pkg-dir@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Find the root directory of a Node.js project or npm package",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/pkg-dir@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/pkg-dir.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/pkg-dir#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/pkg-dir/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "a236a47675202f9a732585b0d8020312ea5a4025f938f6ccebcf197afb9b2028dd217d353d14982aa9b7ddf26808e24146c7980935254119c1357f8f72169e8f"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/lerna/node_modules/pkg-dir"
            }
          ]
        },
        {
          "type": "library",
          "name": "find-up",
          "version": "2.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|lerna@3.10.8|find-up@2.1.0",
          "author": "Sindre Sorhus",
          "description": "Find a file by walking up parent directories",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/find-up@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/find-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/find-up/-/find-up-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "356ce49348d226d4edd3cf8504532f5e87999ce243fa34edb1198161b008cc9757ea5edd2e047b093b9b08ce7f78374f501bcb09e55ab0fd5badf551ffdfc465"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/lerna/node_modules/find-up"
            }
          ]
        },
        {
          "type": "library",
          "name": "locate-path",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|lerna@3.10.8|locate-path@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Get the first path that exists on disk of multiple paths",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/locate-path@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/locate-path.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/locate-path#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/locate-path/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/locate-path/-/locate-path-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "3422369220e4c91ed57842a6dbb29d6bf8901f22897b506ed059536d8a770aa26efbd2057bd6cbc808ccc5fe590c36c483e88c3f3079cd8c944d29bcc154ca98"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/lerna/node_modules/locate-path"
            }
          ]
        },
        {
          "type": "library",
          "name": "p-locate",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|lerna@3.10.8|p-locate@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Get the first fulfilled promise that satisfies the provided testing function",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-locate@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-locate.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-locate#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-locate/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/p-locate/-/p-locate-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "9d08daee6ee048ab9ec285517a7e390ad55f38347772b377828550d030d9f4ddf21f182992e06166ab1a8a8b52411ac00d4ae77b7e3aa5e63b913dd34800b292"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/lerna/node_modules/p-locate"
            }
          ]
        },
        {
          "type": "library",
          "name": "p-limit",
          "version": "1.3.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|lerna@3.10.8|p-limit@1.3.0",
          "author": "Sindre Sorhus",
          "description": "Run multiple promise-returning & async functions with limited concurrency",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-limit@1.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-limit.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-limit#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-limit/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/p-limit/-/p-limit-1.3.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "bef717b0b009f43af9ad038f93bb68650649029065d8ae09e9d00d4ac12e87a408e3525872c4bfaa14c66bd12b2145202b758d428258bf2971be3aa68aa100f5"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/lerna/node_modules/p-limit"
            }
          ]
        },
        {
          "type": "library",
          "name": "p-try",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|lerna@3.10.8|p-try@1.0.0",
          "author": "Sindre Sorhus",
          "description": "`Promise#try()` ponyfill - Starts a promise chain",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-try@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-try.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-try#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-try/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/p-try/-/p-try-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "5357ad358b8c268233dd95d2aebc92163b1741358ec76fe3762f3a2feda946fa61fea30a2fab1b70261d1f6ddfaac6e6f131f61a7d0ec9ba53e1e485942547c3"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/lerna/node_modules/p-try"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "mkdirp",
      "version": "0.5.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
      "author": "James Halliday",
      "description": "Recursively mkdir, like `mkdir -p`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/substack/node-mkdirp.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-mkdirp#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-mkdirp/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "14ffa9f1107c396a45dd86410ab3f982d0039ad5c0a41e4030b9febddc80f8fcb10a3ac2b34d268f2528cecb0edf77300de4f7c0d19d2f127933ffd8aad1c027"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mkdirp"
        }
      ]
    },
    {
      "type": "library",
      "name": "prettier",
      "version": "1.19.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|prettier@1.19.1",
      "author": "James Long",
      "description": "Prettier is an opinionated code formatter",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/prettier@1.19.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/prettier/prettier.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://prettier.io",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/prettier/prettier/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/prettier/-/prettier-1.19.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b3b3e8c83bff208d4e6e042e9c26c1f4f74b99470165c9d639cc4387b3b437f5300c4b07caa916f90876f235be995b82771ee02c1d01a2d608d58eae23d8b27b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/prettier"
        }
      ]
    },
    {
      "type": "library",
      "name": "pug-code-gen",
      "version": "2.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|pug-code-gen@2.0.2",
      "author": "Forbes Lindesay",
      "description": "Default code-generator for pug.  It generates HTML via a JavaScript template function.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pug-code-gen@2.0.2?download_url=https%3A%2F%2Fels-java-dev.nexus.svcs.io%2Frepository%2Fnpmjs-registry%2Fpug-code-gen%2F-%2Fpug-code-gen-2.0.2.tgz",
      "externalReferences": [
        {
          "url": "git+https://github.com/pugjs/pug.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pugjs/pug/tree/master#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pugjs/pug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/pug-code-gen/-/pug-code-gen-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9113855affc01f1ffd0918281897914a6fb898b59c85b8294734c49fc5c28b0c0ecba561d20002952f158794c427d0c18da3fcc028d2dc9e872ac12c61dbda0b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pug-code-gen"
        }
      ]
    },
    {
      "type": "library",
      "name": "pug-filters",
      "version": "3.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|pug-filters@3.1.1",
      "author": "Forbes Lindesay",
      "description": "Code for processing filters in pug templates",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pug-filters@3.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/pugjs/pug.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pugjs/pug/tree/master#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pugjs/pug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pug-filters/-/pug-filters-3.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9457e3372184c95582e01c17d16caf92858b6a9239c4748cdf1649154871e093385f2c9174ef00b9c73aa42ca09ea576b9280915a2565b716dd700964a842442"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pug-filters"
        }
      ]
    },
    {
      "type": "library",
      "name": "pug-lexer",
      "version": "4.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|pug-lexer@4.1.0",
      "author": "ForbesLindesay",
      "description": "The pug lexer (takes a string and converts it to an array of tokens)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pug-lexer@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/pugjs/pug.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pugjs/pug/tree/master#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pugjs/pug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pug-lexer/-/pug-lexer-4.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8b9e72cc406d8e6d26969956e0ba0036aee4dd2f200dd7c2ebe2d384612fb0ae05ba86dc29f0c0c2de95e2328f1fd46d884ddad8091f83952969f6753a4b1a3c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pug-lexer"
        }
      ]
    },
    {
      "type": "library",
      "name": "pug-linker",
      "version": "3.0.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|pug-linker@3.0.6",
      "author": "Forbes Lindesay",
      "description": "Link multiple pug ASTs together using include/extends",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pug-linker@3.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/pugjs/pug.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pugjs/pug/tree/master#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pugjs/pug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pug-linker/-/pug-linker-3.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6da81fb87b6d7d03a900d1b2d58e8d27ed2635bedd0f632cc051b664a8f6dacf20d3056ca23a5196abde1101e68175dc7d1381d914faa2a6cf62bf44376656ce"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pug-linker"
        }
      ]
    },
    {
      "type": "library",
      "name": "pug-load",
      "version": "2.0.12",
      "bom-ref": "pug@2.0.4-tuxcare.2|pug-load@2.0.12",
      "author": "ForbesLindesay",
      "description": "The Pug loader is responsible for loading the depenendencies of a given Pug file.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pug-load@2.0.12",
      "externalReferences": [
        {
          "url": "git+https://github.com/pugjs/pug.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pugjs/pug/tree/master#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pugjs/pug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pug-load/-/pug-load-2.0.12.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "52aa601a9cb25d162026cfd7eb4b04e9221ff1406c99c1d828d68e71cc952c4b93e8e3c120ca3ac4c3e1a099eab41dd0dc16cee19dc18f3e6a0ec516878ad7b2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pug-load"
        }
      ]
    },
    {
      "type": "library",
      "name": "pug-parser",
      "version": "5.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|pug-parser@5.0.1",
      "author": "ForbesLindesay",
      "description": "The pug parser (takes an array of tokens and converts it to an abstract syntax tree)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pug-parser@5.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/pugjs/pug.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pugjs/pug/tree/master#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pugjs/pug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pug-parser/-/pug-parser-5.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9c61ea2bec34ee9e7f3ec3c8cb391341fce561fbaaa221a36a8a87bf52e33afd992d79865f53bee1572fa6cf8fe0b87167776b6129638eae1bf8d6a2775dbac0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pug-parser"
        }
      ]
    },
    {
      "type": "library",
      "name": "pug-runtime",
      "version": "2.0.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|pug-runtime@2.0.5",
      "author": "ForbesLindesay",
      "description": "The runtime components for the pug templating language",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pug-runtime@2.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/pugjs/pug.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pugjs/pug/tree/master#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pugjs/pug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pug-runtime/-/pug-runtime-2.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3fead72a7f6e9f87d063bef0b6972e172bc5681c30efff757f78c76b5e78a94dbaa8502739ee925b509b203731886e652caf476b362b3020ae0ef3600d0369b7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pug-runtime"
        }
      ]
    },
    {
      "type": "library",
      "name": "pug-strip-comments",
      "version": "1.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|pug-strip-comments@1.0.4",
      "author": "Timothy Gu",
      "description": "Strip comments from a Pug token stream (from the lexer)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pug-strip-comments@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/pugjs/pug.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pugjs/pug/tree/master#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pugjs/pug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pug-strip-comments/-/pug-strip-comments-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8b98fff424b8c85852c47a7988a3c7c2281a8a0fd557d83e16045e2c95961c41dbbcab1ba8bd283ff2b9b9bb8b728e96bb729a9f9a7bbbbaa4f00e282cb87abf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pug-strip-comments"
        }
      ]
    },
    {
      "type": "library",
      "name": "rimraf",
      "version": "2.7.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
      "author": "Isaac Z. Schlueter",
      "description": "A deep deletion module for node (like `rm -rf`)",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/rimraf@2.7.1",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/rimraf.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/rimraf#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/rimraf/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.7.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b968db68a20add3d4e495a6dcd7ecd97a3ef437a801ad284b5546346e6b38df2f7071e5e238d3d5594aa80d0fee143679b32d574f8fd16a14934fa81645bdee3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/rimraf"
        }
      ]
    },
    {
      "type": "library",
      "name": "uglify-js",
      "version": "2.7.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|uglify-js@2.7.3",
      "author": "Mihai Bazon",
      "description": "JavaScript parser, mangler/compressor and beautifier toolkit",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/uglify-js@2.7.3?vcs_url=git%2Bssh%3A%2F%2Fgit%40github.com%2Fmishoo%2FUglifyJS2.git%231c15d0db456ce32f1b9b507aad97e5ee5c8285f7",
      "externalReferences": [
        {
          "url": "git+https://github.com/mishoo/UglifyJS2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://lisperator.net/uglifyjs",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mishoo/UglifyJS2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "git+ssh://git@github.com/mishoo/UglifyJS2.git#1c15d0db456ce32f1b9b507aad97e5ee5c8285f7",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5a0d2cb095736dc1aaf1aa91f4a71d7a84846c2eb4e40ee99a464c5e8221be4198248aed7ce4f7736cf6420e193239797390b1c17e2ea6736f09f9a3a54e8a0c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/uglify-js"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "source-map",
          "version": "0.5.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|uglify-js@2.7.3|source-map@0.5.7",
          "author": "Nick Fitzgerald",
          "description": "Generates and consumes source maps",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/source-map@0.5.7",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/mozilla/source-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mozilla/source-map",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mozilla/source-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "2dbae624e31449d115c482af75c273402fa74217bc1546504d7432ebe23be6c90d827dcea10d03640f189c56bb829f2daad2f728f7f5926a344790e802979219"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/uglify-js/node_modules/source-map"
            }
          ]
        },
        {
          "type": "library",
          "name": "yargs",
          "version": "3.10.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|uglify-js@2.7.3|yargs@3.10.0",
          "author": "Alex Ford",
          "description": "Light-weight option parsing with an argv hash. No optstrings attached.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/yargs@3.10.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/bcoe/yargs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/bcoe/yargs#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/bcoe/yargs/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "405cd46a1f3c1801b2f65c8328606a65d918029b7adeb0976011989c43f8c4324f5cda975e70430029dbad79d5895ea3452a8078fc2b0138b68bc99f626e0bd4"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/uglify-js/node_modules/yargs"
            }
          ]
        },
        {
          "type": "library",
          "name": "camelcase",
          "version": "1.2.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|uglify-js@2.7.3|camelcase@1.2.1",
          "author": "Sindre Sorhus",
          "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase@1.2.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "c332e40dae0afe6cc8d4e4884c2f835328e0225fc44cd1c4f50bd8832e89e89beacb2cf80b45df77e95085bd7db17da3329655e08b2c527d150d59a0955face2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/uglify-js/node_modules/camelcase"
            }
          ]
        },
        {
          "type": "library",
          "name": "cliui",
          "version": "2.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|uglify-js@2.7.3|cliui@2.1.0",
          "author": "Ben Coe",
          "description": "easily create complex multi-column command-line-interfaces",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cliui@2.1.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/bcoe/cliui.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/bcoe/cliui#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/bcoe/cliui/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "188398462cc6f931a873b5a07352e23932daadef794779b32a0a259fe43f944e1c7a2607d7d814a65d25d057eae2524311fdc5c6e8cc7ba2017ce0acee97ea34"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/uglify-js/node_modules/cliui"
            }
          ]
        },
        {
          "type": "library",
          "name": "wordwrap",
          "version": "0.0.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|uglify-js@2.7.3|wordwrap@0.0.2",
          "author": "James Halliday",
          "description": "Wrap those words. Show them at what columns to start and stop.",
          "licenses": [
            {
              "license": {
                "name": "MIT/X11",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/wordwrap@0.0.2",
          "externalReferences": [
            {
              "url": "git://github.com/substack/node-wordwrap.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/node-wordwrap#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/node-wordwrap/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "c5206c09e87e83e7629e806fdc600e58ce0b71554eebcc0b5d16a789bb4149d52f906590446784f4fec8c14f449830e2e2303a2f8e25cf5e4218cc1dc3d379f9"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/uglify-js/node_modules/wordwrap"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "growl",
      "version": "1.10.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|growl@1.10.5",
      "author": "TJ Holowaychuk",
      "description": "Growl unobtrusive notifications",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/growl@1.10.5",
      "externalReferences": [
        {
          "url": "git://github.com/tj/node-growl.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tj/node-growl#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tj/node-growl/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/growl/-/growl-1.10.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a81af83ae10b9213de9d6ea0a0a5578afe3b512ddc95bdff21bb9617d28d2848a3032f68787c54f488338ef2611e453385a8fbace503efe6065aa5232e9e6848"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/growl"
        }
      ]
    },
    {
      "type": "library",
      "name": "js-yaml",
      "version": "3.14.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|js-yaml@3.14.1",
      "author": "Vladimir Zapparov",
      "description": "YAML 1.2 parser and serializer",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/js-yaml@3.14.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/nodeca/js-yaml.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodeca/js-yaml",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodeca/js-yaml/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a24307ece5d727b62b37d3a4dff497ae7bb8897f723a4fb6e67a97e22992da7a6ebd36039a8fd0119a2ac199186880e4de356f04e4ce20480485a2ceca7052f6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/js-yaml"
        }
      ]
    },
    {
      "type": "library",
      "name": "lcov-parse",
      "version": "0.0.10",
      "bom-ref": "pug@2.0.4-tuxcare.2|lcov-parse@0.0.10",
      "author": "Dav Glass",
      "description": "Parse lcov results files and return JSON",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lcov-parse@0.0.10",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/davglass/lcov-parse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/davglass/lcov-parse#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/davglass/lcov-parse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lcov-parse/-/lcov-parse-0.0.10.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "62c2f40f8405fef36535c1cf5ccf37dac8bd77644eaf2150e2be09bdc7cc222518af57fa5942ee3bbe580adc4dbb83fe5cc447cf449f51ce76e3e73e5371b992"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lcov-parse"
        }
      ]
    },
    {
      "type": "library",
      "name": "log-driver",
      "version": "1.2.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|log-driver@1.2.7",
      "author": "Gregg Caines",
      "description": "log-driver is a simple logging framework for logging to stdout",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/log-driver@1.2.7",
      "externalReferences": [
        {
          "url": "git://github.com/cainus/logdriver.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/cainus/logdriver",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/cainus/logdriver/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/log-driver/-/log-driver-1.2.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "53b28298b76ab061c12de5aa625140d15d1297a3f4f0413566b980f5cc63504d1656a4fdaa7c950cfcf5933a4510fd23749b859dab1621f49dedfb1a3579296e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/log-driver"
        }
      ]
    },
    {
      "type": "library",
      "name": "minimist",
      "version": "1.2.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|minimist@1.2.8",
      "author": "James Halliday",
      "description": "parse argument options",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minimist@1.2.8",
      "externalReferences": [
        {
          "url": "git://github.com/minimistjs/minimist.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/minimistjs/minimist",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/minimistjs/minimist/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "db2c8047ca8190ddd8ba17896a7529582e54ddb6f9a2c0f2c0d07c4730d5943c031dba1c009bdeaaa8f5bbcf92543ee39164f8cafb070a95aaa96a80c5bd3308"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minimist"
        }
      ]
    },
    {
      "type": "library",
      "name": "request",
      "version": "2.88.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|request@2.88.2",
      "author": "Mikeal Rogers",
      "description": "Simplified HTTP request client.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/request@2.88.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/request/request.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/request/request#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/request/request/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/request/-/request-2.88.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "32cbed3ab7c6f5972b3b0016f908be17a1db0f40965c487da2eefbb8e6fb14cd963e1c13eec98cf37dcfcda9e124bb205e337cf48afa5763dccd7367329c0a87"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/request"
        }
      ]
    },
    {
      "type": "library",
      "name": "import-local",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|import-local@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Let a globally installed package use a locally installed version of itself if available",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/import-local@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/import-local.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/import-local#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/import-local/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/import-local/-/import-local-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6fab34e26dcefacdc21926ea0c8c8fe11e9a03001e62556af7e59459ea7a8876bc11345ff727a2d54e3c0b93267c9995f4088b61804a3ccabf5befd646942609"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/import-local"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-cli",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-cli@24.9.0",
      "description": "Delightful JavaScript Testing.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-cli@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-cli",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://jestjs.io/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-cli/-/jest-cli-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f952d12b28ad4f7056a0c7925081d1c55ff683ccbd830f75261e73d949976739192a96c2d3c0927a15718075304e9cbe1f019c9ecfeda9a7d00c95bb8a662f1a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-cli"
        }
      ]
    },
    {
      "type": "library",
      "name": "coffee-script",
      "version": "1.12.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|coffee-script@1.12.7",
      "author": "Jeremy Ashkenas",
      "description": "Unfancy JavaScript",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/coffee-script@1.12.7",
      "externalReferences": [
        {
          "url": "git://github.com/jashkenas/coffeescript.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://coffeescript.org",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jashkenas/coffeescript/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/coffee-script/-/coffee-script-1.12.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7cb78486ac329986adfcca533d48d2287558625d1e73698ec802c430b9b3af98b58acb86fba8df2368f6779a013b7548ce051780154870e4fdb87d5317105c93"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/coffee-script"
        }
      ]
    },
    {
      "type": "library",
      "name": "merge",
      "version": "1.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|merge@1.2.1",
      "author": "yeikos",
      "description": "Merge multiple objects into one, optionally creating a new cloned object. Similar to the jQuery.extend but more flexible. Works in Node.js and the browser.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/merge@1.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/yeikos/js.merge.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yeikos/js.merge",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yeikos/js.merge/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/merge/-/merge-1.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "563168e0fe5686d8f8bec2f3b1806ee5ac878681c9d14a8d9bb89bbd28666e6a33eed1a2d2f5daa096c6741f8698330b51d83c0e94171087950c07bc31a001bd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/merge"
        }
      ]
    },
    {
      "type": "library",
      "name": "less-plugin-inline-urls",
      "version": "1.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|less-plugin-inline-urls@1.2.0",
      "author": "Luke Page",
      "description": "inline images plugin",
      "licenses": [
        {
          "license": {
            "name": "Apache v2",
            "acknowledgement": "declared",
            "url": "https://github.com/less/less-plugin-inline-urls/blob/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/less-plugin-inline-urls@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/less/less-plugin-inline-urls.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://lesscss.org",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/less/less-plugin-inline-urls/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/less-plugin-inline-urls/-/less-plugin-inline-urls-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "412f4c2dc83c2e8e991d54bef649dc98778bca921d9c5806fe77aa57744f9177e28920891e7fe34d01ca9d77c310bfc5fc933ecfa310eae916affc6c3828474c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/less-plugin-inline-urls"
        }
      ]
    },
    {
      "type": "library",
      "name": "less-plugin-npm-import",
      "version": "2.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|less-plugin-npm-import@2.1.0",
      "description": "npm import plugin for less.js",
      "licenses": [
        {
          "license": {
            "name": "Apache v2",
            "acknowledgement": "declared",
            "url": "https://github.com/less/less-plugin-npm-import/blob/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/less-plugin-npm-import@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/less/less-plugin-npm-import.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://lesscss.org",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/less/less-plugin-npm-import/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/less-plugin-npm-import/-/less-plugin-npm-import-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7fba55904a2846adbf8e07bf33f63eb29a0f5e3e6b448637d2ad5ab3ede466c0c6f11b3e9683495025508f35c1f40a3ff457882542e2ab6ceb5f29aff8e3136f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/less-plugin-npm-import"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "promise",
          "version": "7.0.4",
          "bom-ref": "pug@2.0.4-tuxcare.2|less-plugin-npm-import@2.1.0|promise@7.0.4",
          "author": "ForbesLindesay",
          "description": "Bare bones Promises/A+ implementation",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/promise@7.0.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/then/promise.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/then/promise#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/then/promise/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/promise/-/promise-7.0.4.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f33d604d22fd70c82a0b1f33bcc621cd3d1e41444040d490a91f01da119f098900cedd6f8d179574a06fe18c06c3739700f6b17e6e1a47480ba015289f856698"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/less-plugin-npm-import/node_modules/promise"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "less",
      "version": "2.7.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|less@2.7.3",
      "author": "Alexis Sellier",
      "description": "Leaner CSS",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/less@2.7.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/less/less.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://lesscss.org",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/less/less.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/less/-/less-2.7.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "28f74824a59c1006f4d93b89b5a2eb86e7b492bb512e8468a3bc7a04d24805e94ed34b7f0827494149c75b9577e0e9c7316cc892d49a949c513be16fcad42509"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/less"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "request",
          "version": "2.81.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|less@2.7.3|request@2.81.0",
          "author": "Mikeal Rogers",
          "description": "Simplified HTTP request client.",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "Apache-2.0",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/request@2.81.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/request/request.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/request/request#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "http://github.com/request/request/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/request/-/request-2.81.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "2199ec47bbe81749a2192bb6f445cf4603d3b84b08ffe6a26cd4816cdd69a65adf6abb45e700d81800f3de20fdbe60557f6af4d2b7245997fc06d4b9924ecd8b"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/less/node_modules/request"
            }
          ]
        },
        {
          "type": "library",
          "name": "source-map",
          "version": "0.5.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|less@2.7.3|source-map@0.5.7",
          "author": "Nick Fitzgerald",
          "description": "Generates and consumes source maps",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/source-map@0.5.7",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/mozilla/source-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mozilla/source-map",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mozilla/source-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "2dbae624e31449d115c482af75c273402fa74217bc1546504d7432ebe23be6c90d827dcea10d03640f189c56bb829f2daad2f728f7f5926a344790e802979219"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/less/node_modules/source-map"
            }
          ]
        },
        {
          "type": "library",
          "name": "aws-sign2",
          "version": "0.6.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|less@2.7.3|aws-sign2@0.6.0",
          "author": "Mikeal Rogers",
          "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "Apache-2.0",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/aws-sign2@0.6.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/mikeal/aws-sign.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mikeal/aws-sign#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mikeal/aws-sign/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.6.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "267269012d29f519a2c643af5b65f00f1c73b356dde3f54018897a434102e583a8fa9fa1a8886d0e19ff9e616707fc543576cb92913698e8e0548051283e3163"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/less/node_modules/aws-sign2"
            }
          ]
        },
        {
          "type": "library",
          "name": "form-data",
          "version": "2.1.4",
          "bom-ref": "pug@2.0.4-tuxcare.2|less@2.7.3|form-data@2.1.4",
          "author": "Felix Geisendörfer",
          "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/form-data@2.1.4",
          "externalReferences": [
            {
              "url": "git://github.com/form-data/form-data.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/form-data/form-data#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/form-data/form-data/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/form-data/-/form-data-2.1.4.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f0758648b00fafe006d21069b2a8b939bf07acb4ad37f2d67aa869165d7877b1498072b8f139a02e800b3f3ebd5d2511eb9609cc37cb517fc133cf8c2c92e085"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/less/node_modules/form-data"
            }
          ]
        },
        {
          "type": "library",
          "name": "har-validator",
          "version": "4.2.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|less@2.7.3|har-validator@4.2.1",
          "author": "Ahmad Nassri",
          "description": "Extremely fast HTTP Archive (HAR) validator using JSON Schema",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/har-validator@4.2.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/ahmadnassri/har-validator.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/ahmadnassri/har-validator",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/ahmadnassri/har-validator/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/har-validator/-/har-validator-4.2.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "e466e9e9101fb4c61857750423873856fdfe6b8750eed695caf1edfbf2fa911b7e7f81d7d46c1e024e540d63744af7559d1073190e8e1bcf6919a0fdb9216757"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/less/node_modules/har-validator"
            }
          ]
        },
        {
          "type": "library",
          "name": "http-signature",
          "version": "1.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|less@2.7.3|http-signature@1.1.1",
          "author": "Joyent, Inc",
          "description": "Reference implementation of Joyent's HTTP Signature scheme.",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/http-signature@1.1.1",
          "externalReferences": [
            {
              "url": "git://github.com/joyent/node-http-signature.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/joyent/node-http-signature/",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/joyent/node-http-signature/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/http-signature/-/http-signature-1.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "8949f435c4542e50c6b6a34b3752719b36b293ca209bb353a257404b2641a4cdaa8206e98635f334e8b0de988df2d833f9efc346ce97e600331704c8e8109172"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/less/node_modules/http-signature"
            }
          ]
        },
        {
          "type": "library",
          "name": "oauth-sign",
          "version": "0.8.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|less@2.7.3|oauth-sign@0.8.2",
          "author": "Mikeal Rogers",
          "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "Apache-2.0",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/oauth-sign@0.8.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/mikeal/oauth-sign.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mikeal/oauth-sign#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mikeal/oauth-sign/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.8.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "565174ee2bb7555dfe0535e3e37366a7a22bb7f1bb8ff36011cb544ba230787d511a15118e309cd8d5adcd714f5d75967dcee181b5d076d890bb62c6a7a33152"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/less/node_modules/oauth-sign"
            }
          ]
        },
        {
          "type": "library",
          "name": "performance-now",
          "version": "0.2.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|less@2.7.3|performance-now@0.2.0",
          "author": "Meryn Stol",
          "description": "Implements performance.now (based on process.hrtime).",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/performance-now@0.2.0",
          "externalReferences": [
            {
              "url": "git://github.com/meryn/performance-now.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/meryn/performance-now",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/meryn/performance-now/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/performance-now/-/performance-now-0.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6079397b3d6198c4792ce91bf622642caaa80652fb583e4cf258c2ef965fcd7ae2b8121536e79c697b94edefa13b0caa7f6e16c6187b57182dec79f0f76f3c4e"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/less/node_modules/performance-now"
            }
          ]
        },
        {
          "type": "library",
          "name": "qs",
          "version": "6.4.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|less@2.7.3|qs@6.4.1",
          "description": "A querystring parser that supports nesting and arrays, with a depth limit",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/qs@6.4.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/ljharb/qs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/ljharb/qs",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/ljharb/qs/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/qs/-/qs-6.4.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "2d0cb54357dcbdafd4b273ffe8869ae2555e338f5688e8adbb64f88590b203f7a52cabb7ecbf7da9c0499385420a4fab74bbe73337caca23774994ea74064649"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/less/node_modules/qs"
            }
          ]
        },
        {
          "type": "library",
          "name": "tough-cookie",
          "version": "2.3.4",
          "bom-ref": "pug@2.0.4-tuxcare.2|less@2.7.3|tough-cookie@2.3.4",
          "author": "Jeremy Stashewsky",
          "description": "RFC6265 Cookies and Cookie Jar for node.js",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/tough-cookie@2.3.4",
          "externalReferences": [
            {
              "url": "git://github.com/salesforce/tough-cookie.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/salesforce/tough-cookie",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/salesforce/tough-cookie/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.3.4.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "4d9e934df23936d667bb2cbf29e72ff829e844e9f25e7d8337decba27b604290b0b17d97c8b6020b410d85891e8523b0029f2b4d029cfcd50817b064439aca2c"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/less/node_modules/tough-cookie"
            }
          ]
        },
        {
          "type": "library",
          "name": "ajv",
          "version": "4.11.8",
          "bom-ref": "pug@2.0.4-tuxcare.2|less@2.7.3|ajv@4.11.8",
          "author": "Evgeny Poberezkin",
          "description": "Another JSON Schema Validator",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ajv@4.11.8",
          "externalReferences": [
            {
              "url": "git+https://github.com/epoberezkin/ajv.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/epoberezkin/ajv",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/epoberezkin/ajv/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ajv/-/ajv-4.11.8.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "23f6d21d234470516a5cb7fdd67721a0d07d0f52a27b740a71675c85851aa08835fb56dd58391d7dd96f7483896e2f54f31474cbe3167390fec289fdbfde5695"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/less/node_modules/ajv"
            }
          ]
        },
        {
          "type": "library",
          "name": "har-schema",
          "version": "1.0.5",
          "bom-ref": "pug@2.0.4-tuxcare.2|less@2.7.3|har-schema@1.0.5",
          "author": "Ahmad Nassri",
          "description": "JSON Schema for HTTP Archive (HAR)",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/har-schema@1.0.5",
          "externalReferences": [
            {
              "url": "git+https://github.com/ahmadnassri/har-schema.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/ahmadnassri/har-schema",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/ahmadnassri/har-schema/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/har-schema/-/har-schema-1.0.5.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "7fcc5fd86391e9183073d14f4cb37383007e250dbfccc6ae617496997e5857969c7b1e95a264f4a1c4aec11ec17d7a393291e2fa32feb1a6aec767f0b0624329"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/less/node_modules/har-schema"
            }
          ]
        },
        {
          "type": "library",
          "name": "assert-plus",
          "version": "0.2.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|less@2.7.3|assert-plus@0.2.0",
          "author": "Mark Cavage",
          "description": "Extra assertions on top of node's assert module",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/assert-plus@0.2.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/mcavage/node-assert-plus.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mcavage/node-assert-plus#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mcavage/node-assert-plus/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "bb52f464bcb047388e563521471234420f46fb8467141f47fd1ab8d185a7d1d89e0e03bbbc061e273ea32803bab7f6abbb394314b00f9104d3f3b7be7fc2266b"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/less/node_modules/assert-plus"
            }
          ]
        },
        {
          "type": "library",
          "name": "punycode",
          "version": "1.4.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|less@2.7.3|punycode@1.4.1",
          "author": "Mathias Bynens",
          "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/punycode@1.4.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/bestiejs/punycode.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://mths.be/punycode",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/bestiejs/punycode.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "8e660d1255bbcaf3bb4d5df70a34a6bd2884db2728ddb576733bbf3b30ca74c35565059fc426e55112e17fee3bb32411067b637cb75dfc7d1e82bcc81bea1a15"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/less/node_modules/punycode"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "markdown-it",
      "version": "7.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|markdown-it@7.0.1",
      "description": "Markdown-it - modern pluggable markdown parser.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/markdown-it@7.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/markdown-it/markdown-it.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/markdown-it/markdown-it#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/markdown-it/markdown-it/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/markdown-it/-/markdown-it-7.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7ad773471fe9314b482f2b5ab07028e3ef7108f8ddb0d16fc01afec9edde76a35cd76f30866fdd278ee955ce67839f38bfb2a8df95fc98c33d45ce5389c2972a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/markdown-it"
        }
      ]
    },
    {
      "type": "library",
      "name": "clone",
      "version": "2.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|clone@2.1.2",
      "author": "Paul Vorbach",
      "description": "deep cloning of objects and arrays",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/clone@2.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/pvorb/node-clone.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pvorb/node-clone#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pvorb/node-clone/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/clone/-/clone-2.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dcf7bf085d4d9fde21ca1218a63b622e1742a04a33d03a90fbdf3c13d826784750665a23c6739bef8c1cb45caec16407ceac9ff57ec2ecc1bc8ee529a81253f3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/clone"
        }
      ]
    },
    {
      "type": "library",
      "name": "stylus",
      "version": "0.54.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|stylus@0.54.8",
      "author": "TJ Holowaychuk",
      "description": "Robust, expressive, and feature-rich CSS superset",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stylus@0.54.8",
      "externalReferences": [
        {
          "url": "git://github.com/stylus/stylus.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stylus/stylus",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stylus/stylus/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stylus/-/stylus-0.54.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bebe783abe0167ba4969fa369a97f465cc00ef8ae9b980996f1ac706c1fc91b7173b049fbc1170b117e918ee4e0f97e11b91c30855bbdfb3ca69ac08ecea8402"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stylus"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "debug",
          "version": "3.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|stylus@0.54.8|debug@3.1.0",
          "author": "TJ Holowaychuk",
          "description": "small debugging utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/debug@3.1.0",
          "externalReferences": [
            {
              "url": "git://github.com/visionmedia/debug.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/visionmedia/debug#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/visionmedia/debug/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/debug/-/debug-3.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "397f17a8feffd5af5caa4c58c36c97b2cd797f6e8d2960690d741dd3fb8afca3ea7508716cf6bdf78867ce3704d95a90a43b257f9e7bdb770a3d43864a6318de"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/stylus/node_modules/debug"
            }
          ]
        },
        {
          "type": "library",
          "name": "mkdirp",
          "version": "1.0.4",
          "bom-ref": "pug@2.0.4-tuxcare.2|stylus@0.54.8|mkdirp@1.0.4",
          "description": "Recursively mkdir, like `mkdir -p`",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/mkdirp@1.0.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/isaacs/node-mkdirp.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/node-mkdirp#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/node-mkdirp/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "bd5a95650c9fdd62f1d9285dd2a27dc6ebea800c8a3cb022a884c4b6a5b4a08523ce8dcf78f0dde9f5bd885cf7d1e7fb62ca7fa225aa6e1b33786596d93e86cf"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/stylus/node_modules/mkdirp"
            }
          ]
        },
        {
          "type": "library",
          "name": "sax",
          "version": "1.2.4",
          "bom-ref": "pug@2.0.4-tuxcare.2|stylus@0.54.8|sax@1.2.4",
          "author": "Isaac Z. Schlueter",
          "description": "An evented streaming XML parser in JavaScript",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/sax@1.2.4",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/sax-js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/sax-js#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/sax-js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "36a543bfd4e900d523166d0df2e3391b12f7e9480a8bdfdab59c3ec7b6059d0f1c9301462ab978c57e325adadecb75099b99cfd6451b9d880ba29a963524615b"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/stylus/node_modules/sax"
            }
          ]
        },
        {
          "type": "library",
          "name": "source-map",
          "version": "0.7.6",
          "bom-ref": "pug@2.0.4-tuxcare.2|stylus@0.54.8|source-map@0.7.6",
          "author": "Nick Fitzgerald",
          "description": "Generates and consumes source maps",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/source-map@0.7.6",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/mozilla/source-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mozilla/source-map",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mozilla/source-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/source-map/-/source-map-0.7.6.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "8b9bafb7c0b78a489678d65255935671f64f22d1503ac6135003a47143c677c0ea0f2d6e3948a48ede5d1beb91970caf475d3c15bf4339de06bd77d3d0ddbfb9"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/stylus/node_modules/source-map"
            }
          ]
        },
        {
          "type": "library",
          "name": "ms",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|stylus@0.54.8|ms@2.0.0",
          "description": "Tiny milisecond conversion utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ms@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/zeit/ms.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zeit/ms#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zeit/ms/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "4e9a7ad0fe885090d3b8eabfe59f1c76c93326e8dfc2a7ce4e4af02308fb211212a679099d3e92c89e0f08f9c63281630bd75d85a979295218b40b7dee2c74e4"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/stylus/node_modules/ms"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "add",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/add@3.10.6",
      "author": "Daniel Stockman",
      "description": "Add a dependency to matched packages",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/add@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/add/-/add-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "171439066c9be5f17edc142235f7cce9c4de182ae5e2e680b86bf1148585e8f833e94d78b547357b5eb180a0ef55bd42babcc9808579b0b393e719823aabf590"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/add"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/add@3.10.6|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/add/node_modules/semver"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "bootstrap",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/bootstrap@3.10.6",
      "author": "Daniel Stockman",
      "description": "Link local packages together and install remaining package dependencies",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/bootstrap@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/bootstrap/-/bootstrap-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a9b1a303146957f7a223d09ba14229b0f3c6a52a20b3c98ddbf8836805014da595155cff63253ae27ba2f381a597491b75a1cec8fa6eb7e924d92f0d09208276"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/bootstrap"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/bootstrap@3.10.6|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/bootstrap/node_modules/semver"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "changed",
      "group": "@lerna",
      "version": "3.10.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/changed@3.10.8",
      "author": "Daniel Stockman",
      "description": "List local packages that have changed since the last tagged release",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/changed@3.10.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/changed/-/changed-3.10.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2b60503e9492f77b8d26a8bc0399b0ac547d23a3dafdad23811ff6ea3ba7d166b7f434ce8dfe563fb103bd743c3dfb71e6431d1dbe61403c2f302701270db998"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/changed"
        }
      ]
    },
    {
      "type": "library",
      "name": "clean",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/clean@3.10.6",
      "author": "Daniel Stockman",
      "description": "Remove the node_modules directory from all packages",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/clean@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/clean/-/clean-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "32e2fc1cec27caf56dafa18e88037f39f8dbc7e049742aed8eb33552e87c1459db9d94cf55ffb430fc4bda35733cca343e6a08ad7ddfbe5c2fcca364fe51f452"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/clean"
        }
      ]
    },
    {
      "type": "library",
      "name": "cli",
      "group": "@lerna",
      "version": "3.10.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7",
      "author": "Daniel Stockman",
      "description": "Lerna's CLI",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/cli@3.10.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/cli/-/cli-3.10.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "caea33ff6e2621f622b779de2aaa04e4d56ce36463f40e80e9296434f0dfb32deffd587b4a0624537730886cafc011b321d86a2f8fd2598a3c1fb6092ecd02fa"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/cli"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "yargs",
          "version": "12.0.5",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|yargs@12.0.5",
          "description": "yargs the modern, pirate-themed, successor to optimist.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/yargs@12.0.5",
          "externalReferences": [
            {
              "url": "git+https://github.com/yargs/yargs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://yargs.js.org/",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/yargs/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/yargs/-/yargs-12.0.5.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "2e1cfc4cb6989f1abfd8e6ea1c3aa5f1d5fc0898bdee81f1ae351c62dcca6dbca43ed556f5607ea68c48f8d336508cec32034265321fd00430b232b9c8c02a67"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/cli/node_modules/yargs"
            }
          ]
        },
        {
          "type": "library",
          "name": "cliui",
          "version": "4.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|cliui@4.1.0",
          "author": "Ben Coe",
          "description": "easily create complex multi-column command-line-interfaces",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cliui@4.1.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/yargs/cliui.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/yargs/cliui#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/cliui/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cliui/-/cliui-4.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "e051be4521bd0cbeee130454657667dd24b7e038833dfccfd153a2130b545a513e011d84220fa14b2beb2205147e176047f52401e5b640781e3fe856ad7b3b8d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/cli/node_modules/cliui"
            }
          ]
        },
        {
          "type": "library",
          "name": "get-caller-file",
          "version": "1.0.3",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|get-caller-file@1.0.3",
          "author": "Stefan Penner",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/get-caller-file@1.0.3",
          "externalReferences": [
            {
              "url": "git+https://github.com/stefanpenner/get-caller-file.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/stefanpenner/get-caller-file#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/stefanpenner/get-caller-file/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-1.0.3.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "dedeab553a1ea197d848677c6282c54760c992242b22252b19c8ef157da60f0ddb9fa9363adc073744cd08b6c13bec3ca93be29a10e4bfe2d2b1c6c9635bc4eb"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/cli/node_modules/get-caller-file"
            }
          ]
        },
        {
          "type": "library",
          "name": "require-main-filename",
          "version": "1.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|require-main-filename@1.0.1",
          "author": "Ben Coe",
          "description": "shim for require.main.filename() that works in as many environments as possible",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/require-main-filename@1.0.1",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/yargs/require-main-filename.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/yargs/require-main-filename#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/require-main-filename/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-1.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "22a494b4e54fe24b1dd42fde8f9cde121fc120fd9a8eaa67f1ce71faaf7d82f7081bf41fd1cb9de6b6959c4fc3c1dd2e6bd4d7603a03734444e61052773db652"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/cli/node_modules/require-main-filename"
            }
          ]
        },
        {
          "type": "library",
          "name": "yargs-parser",
          "version": "11.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|yargs-parser@11.1.1",
          "author": "Ben Coe",
          "description": "the mighty option parser used by yargs",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/yargs-parser@11.1.1",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/yargs/yargs-parser.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/yargs/yargs-parser#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/yargs-parser/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-11.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "0ba901fd624389ac4e34b2509c5f1c731f5211ea134cb7a4f1155b68e22cac0512f15ac11177e67929c2671ca073e5c2dac34c048c0e3a77dcc62ca78c7b1549"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/cli/node_modules/yargs-parser"
            }
          ]
        },
        {
          "type": "library",
          "name": "strip-ansi",
          "version": "4.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|strip-ansi@4.0.0",
          "author": "Sindre Sorhus",
          "description": "Strip ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-ansi@4.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/strip-ansi.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/strip-ansi#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/strip-ansi/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "e17689db341d0b344e6438af1152033e47109fc2cc1526bc923f06c5bfcb9f0ceff40f1572d359fa57e2bc2fec5778af5bc1252531115d9a0f051ad92a434aa3"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/cli/node_modules/strip-ansi"
            }
          ]
        },
        {
          "type": "library",
          "name": "wrap-ansi",
          "version": "2.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|wrap-ansi@2.1.0",
          "author": "Sindre Sorhus",
          "description": "Wordwrap a string with ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/wrap-ansi@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/wrap-ansi.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/wrap-ansi#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/wrap-ansi/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "bc068468333de3a81b3691f9a4b54d47ebd7da1b7a9f406ddc65f0541d40b80a99a2c3af1cd1773fbc039e1f0a2e44aa814874ba1efb95eecec20a33f99f5707"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/cli/node_modules/wrap-ansi"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "string-width",
              "version": "1.0.2",
              "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|wrap-ansi@2.1.0|string-width@1.0.2",
              "author": "Sindre Sorhus",
              "description": "Get the visual width of a string - the number of columns required to display it",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/string-width@1.0.2",
              "externalReferences": [
                {
                  "url": "git+https://github.com/sindresorhus/string-width.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/sindresorhus/string-width#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/sindresorhus/string-width/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz",
                  "type": "distribution",
                  "hashes": [
                    {
                      "alg": "SHA-512",
                      "content": "d17b15a502e75425c725fc84b3cb42d33a53548af93ca2ac42d913dbd230ba99cf4e3b4f990df14ffe32091105f6162457fdccde4cdc513480653e9aea1f35b7"
                    }
                  ],
                  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/@lerna/cli/node_modules/wrap-ansi/node_modules/string-width"
                }
              ]
            },
            {
              "type": "library",
              "name": "strip-ansi",
              "version": "3.0.1",
              "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|wrap-ansi@2.1.0|strip-ansi@3.0.1",
              "author": "Sindre Sorhus",
              "description": "Strip ANSI escape codes",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/strip-ansi@3.0.1",
              "externalReferences": [
                {
                  "url": "git+https://github.com/chalk/strip-ansi.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/chalk/strip-ansi#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/chalk/strip-ansi/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz",
                  "type": "distribution",
                  "hashes": [
                    {
                      "alg": "SHA-512",
                      "content": "561ba64926c1a834cff29d992ca8f8d148c1095e3ebfc6d4484a546f82a34605a4f696ea185e111058fa2846a089d6f67ff33a0330b41261720cd19ac3d382ce"
                    }
                  ],
                  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/@lerna/cli/node_modules/wrap-ansi/node_modules/strip-ansi"
                }
              ]
            },
            {
              "type": "library",
              "name": "ansi-regex",
              "version": "2.1.1",
              "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|wrap-ansi@2.1.0|ansi-regex@2.1.1",
              "author": "Sindre Sorhus",
              "description": "Regular expression for matching ANSI escape codes",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/ansi-regex@2.1.1",
              "externalReferences": [
                {
                  "url": "git+https://github.com/chalk/ansi-regex.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/chalk/ansi-regex#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/chalk/ansi-regex/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz",
                  "type": "distribution",
                  "hashes": [
                    {
                      "alg": "SHA-512",
                      "content": "4c81a74e9768f84dfea42c8096e66fb440f9a79c02a8b75ecc2ca13d9cca3dcc6f169944b788be5bb38e3422a0799153dfecb935965f38e4bf05d71a9e6d4c60"
                    }
                  ],
                  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/@lerna/cli/node_modules/wrap-ansi/node_modules/ansi-regex"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "ansi-regex",
          "version": "3.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|ansi-regex@3.0.1",
          "author": "Sindre Sorhus",
          "description": "Regular expression for matching ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ansi-regex@3.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/ansi-regex.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f8ef4972df307fefa55f1c4573885cf0bb23692ab41c5cf32fb715b30f2944320f763283da64f8cad0d994bb92059e1c2ca6455c8acc18eec36d00ad30924c2b"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/cli/node_modules/ansi-regex"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-fullwidth-code-point",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|is-fullwidth-code-point@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Check if the character represented by a given Unicode code point is fullwidth",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "d69a94a918e484f27d9a236af52c0c7ddbe2ea504971de9e171bdf6a2bd085a1f74a08ac7e2bae76f167b5d28e9b1b9e7bfefb97e14f8caad08d6be63e35ab47"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/cli/node_modules/is-fullwidth-code-point"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "create",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/create@3.10.6",
      "author": "Daniel Stockman",
      "description": "Create a new lerna-managed package",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/create@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/create/-/create-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "39d750b46047336fde24e36080b5a84c4eb6ef95c66e727a748545f9f2ec292f77a38182ea0faa71ce98ee55161e6e5b7e978ec0d3952b08f4b6fa8167a320a0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/create"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "camelcase",
          "version": "4.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/create@3.10.6|camelcase@4.1.0",
          "author": "Sindre Sorhus",
          "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase@4.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/camelcase/-/camelcase-4.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "17102fec7a47ad76e1dda3e8e28daac476b2da590b637c79330dca784e0a404f32b157f3896791643c1c8dabafc01486102fe75d43f3672f337a1e07a24a8e9f"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/create/node_modules/camelcase"
            }
          ]
        },
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/create@3.10.6|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/create/node_modules/semver"
            }
          ]
        },
        {
          "type": "library",
          "name": "slash",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/create@3.10.6|slash@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Convert Windows backslash paths to slash paths",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/slash@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/slash.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/slash#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/slash/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/slash/-/slash-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "dd360347bc56b78748a95d896ae26bf8425e5b7e7a4578a31de5253bef1d8c9fae0573e7f3fd9da7305cf32421879f37b15bdcf42bc501e4158228ec1fe3cd36"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/create/node_modules/slash"
            }
          ]
        },
        {
          "type": "library",
          "name": "whatwg-url",
          "version": "7.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/create@3.10.6|whatwg-url@7.1.0",
          "author": "Sebastian Mayr",
          "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/whatwg-url@7.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/jsdom/whatwg-url.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jsdom/whatwg-url#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jsdom/whatwg-url/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-7.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "594bbb460d43ae833ba10bc659f3a200adb59fbe0683e4f87a55c441890e86dc8b7968891683862d73ca23ff60cc889ef42b7054b9bcc2dc3a60974acb14a37a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/create/node_modules/whatwg-url"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "diff",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/diff@3.10.6",
      "author": "Daniel Stockman",
      "description": "Diff all packages or a single package since the last release",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/diff@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/diff/-/diff-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d0ca85868b23aeab0875788a22eeeddc288910baa253d9a48c506160f07b26bb80ce93f08cc5c99c2ebf52be7fecb5c9618569a86430648f5969994e609861af"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/diff"
        }
      ]
    },
    {
      "type": "library",
      "name": "exec",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/exec@3.10.6",
      "author": "Daniel Stockman",
      "description": "Execute an arbitrary command in each package",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/exec@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/exec/-/exec-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "71d1ea69104c61c789bbcad92cef1be19791dbb3bec4a3c78338b5dce38e7c12508eb4ee69c8cc5b21e09a9cbc8d673fd1fed09d397856c1e4b3b549dd42bebf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/exec"
        }
      ]
    },
    {
      "type": "library",
      "name": "import",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/import@3.10.6",
      "author": "Daniel Stockman",
      "description": "Import a package into the monorepo with commit history",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/import@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/import/-/import-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2e51b185f0e1a2fa0da0124b1773d87778ff1b61854e77cb874577f3e84143a96898c3496e390009f88b568990c4f596a582e4d064e5a56611f181afe8bec87f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/import"
        }
      ]
    },
    {
      "type": "library",
      "name": "init",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/init@3.10.6",
      "author": "Daniel Stockman",
      "description": "Create a new Lerna repo or upgrade an existing repo to the current version of Lerna",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/init@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/init/-/init-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "448944c7ea1f58b611363c429245771b45d03ccfbf280e515d10dbe702902d83b57feb5901a1e8521f1f1c322fc467ffa2163f3888d86064ac53ecac8a67f089"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/init"
        }
      ]
    },
    {
      "type": "library",
      "name": "link",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/link@3.10.6",
      "author": "Daniel Stockman",
      "description": "Symlink together all packages that are dependencies of each other",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/link@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/link/-/link-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7700faa9fb515a2b602c361baad0eb80eedcf2e1790b47c755ec3933a814e66f6d04989da9dedc0f01effdb5dba0b108eb753bb6de72e8b63ec04a58505b0147"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/link"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "slash",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/link@3.10.6|slash@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Convert Windows backslash paths to slash paths",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/slash@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/slash.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/slash#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/slash/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/slash/-/slash-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "dd360347bc56b78748a95d896ae26bf8425e5b7e7a4578a31de5253bef1d8c9fae0573e7f3fd9da7305cf32421879f37b15bdcf42bc501e4158228ec1fe3cd36"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/link/node_modules/slash"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "list",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/list@3.10.6",
      "author": "Daniel Stockman",
      "description": "List local packages",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/list@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/list/-/list-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dc4950063d9d381e2e524a6c8c2d5bc5d799c04cd106e575a4106ce44d4b9dcc2c65fec3f43f7d677d9fb99b036821e910c807003e3f8fc8ee237ffb9b976469"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/list"
        }
      ]
    },
    {
      "type": "library",
      "name": "publish",
      "group": "@lerna",
      "version": "3.10.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/publish@3.10.8",
      "author": "Daniel Stockman",
      "description": "Publish packages in the current project",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/publish@3.10.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/publish/-/publish-3.10.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "912df389aea49eca0df2777eea286ec1186270133a1d199b0e0a1ae2e8a2e3e66a2d5cf876788761f1c231c6731d848df0a8f7e4cb13db9031d62ab97828f199"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/publish"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/publish@3.10.8|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/publish/node_modules/semver"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "run",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/run@3.10.6",
      "author": "Daniel Stockman",
      "description": "Run an npm script in each package that contains that script",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/run@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/run/-/run-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "292da559bbbff16514b1c40f8bd53cb0f3bac98a737ffd0698e0e3a6bb91d67462d6efedba771d8d3886fa18c601e142d410fb624b53f596ba8a622913c45798"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/run"
        }
      ]
    },
    {
      "type": "library",
      "name": "version",
      "group": "@lerna",
      "version": "3.10.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/version@3.10.8",
      "author": "Daniel Stockman",
      "description": "Bump version of packages changed since the last release",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/version@3.10.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/version/-/version-3.10.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "224a363a4c30923c8afad2249671ffef633f7f9e26b9289126eac2b02dc9a9d33c69969e0d7794ac7980ca5ee740b7c1952b077c7c916b1fc42e444498ee539e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/version"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/version@3.10.8|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/version/node_modules/semver"
            }
          ]
        },
        {
          "type": "library",
          "name": "slash",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/version@3.10.8|slash@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Convert Windows backslash paths to slash paths",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/slash@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/slash.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/slash#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/slash/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/slash/-/slash-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "dd360347bc56b78748a95d896ae26bf8425e5b7e7a4578a31de5253bef1d8c9fae0573e7f3fd9da7305cf32421879f37b15bdcf42bc501e4158228ec1fe3cd36"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/version/node_modules/slash"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "libnpm",
      "version": "2.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
      "author": "Kat Marchán",
      "description": "Collection of programmatic APIs for the npm CLI",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/libnpm@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/libnpm.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/libnpm#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/libnpm/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/libnpm/-/libnpm-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a932a8c7226fa41c4765007a93402148b6a3c97abd644fe552c673b8702996bd81a6ff46fa4e18b98944c5875409e551446a9c26df21be43e1e2d0702a857df3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/libnpm"
        }
      ]
    },
    {
      "type": "library",
      "name": "constantinople",
      "version": "3.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|constantinople@3.1.2",
      "author": "ForbesLindesay",
      "description": "Determine whether a JavaScript expression evaluates to a constant (using acorn)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/constantinople@3.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ForbesLindesay/constantinople.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ForbesLindesay/constantinople#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ForbesLindesay/constantinople/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/constantinople/-/constantinople-3.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c9e3dc06a10584b3aa481b7060e1864b57b11e8fecd718de9178a29e1e22b69350182bb8280d5eb8f8757e0d3b376c0c213657424073ef936d76dd5cb46668bb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/constantinople"
        }
      ]
    },
    {
      "type": "library",
      "name": "doctypes",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|doctypes@1.1.0",
      "author": "ForbesLindesay",
      "description": "Shorthands for commonly used doctypes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/doctypes@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/pugjs/doctypes.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pugjs/doctypes#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pugjs/doctypes/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/doctypes/-/doctypes-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2cb062ea912a4ba0e8dc4290dc9d0da87595e6185befc3e2f2fbc4498c323b2d9cdf564465576d8ad773b10b0a6fbf3bf0f104461cd49347eda86846e8ccfea5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/doctypes"
        }
      ]
    },
    {
      "type": "library",
      "name": "js-stringify",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|js-stringify@1.0.2",
      "author": "ForbesLindesay",
      "description": "Stringify an object so it can be safely inlined in JavaScript code",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/js-stringify@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jadejs/js-stringify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jadejs/js-stringify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jadejs/js-stringify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/js-stringify/-/js-stringify-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "aed4b90133a8d90e64d46f830032128a50c0ea5bfbf73222c0577a09c8ee23118a2c59b90be44b22646c7156a9f64e798be30e6708258b0f8d7a3be42ee183e6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/js-stringify"
        }
      ]
    },
    {
      "type": "library",
      "name": "pug-attrs",
      "version": "2.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|pug-attrs@2.0.4",
      "author": "Forbes Lindesay",
      "description": "Generate code for Pug attributes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pug-attrs@2.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/pugjs/pug.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pugjs/pug/tree/master#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pugjs/pug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pug-attrs/-/pug-attrs-2.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4da6786764d650f0c9715df08d4dd1b545ccaddde43385b38db7b71169d2b193ec2772c3234177c829dfdbf5bb3cf145f9e754150d078032f5228c52cf92bc11"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pug-attrs"
        }
      ]
    },
    {
      "type": "library",
      "name": "pug-error",
      "version": "1.3.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|pug-error@1.3.3",
      "author": "Forbes Lindesay",
      "description": "Standard error objects for pug",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pug-error@1.3.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/pugjs/pug.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pugjs/pug/tree/master#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pugjs/pug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pug-error/-/pug-error-1.3.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a84dd884448fda644058c14980a76d4f90fb7244e145271747091fa3e12baa06bb77225d63766abaca69acc0a3ffdb09da28e6e615c559013f037978a6831689"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pug-error"
        }
      ]
    },
    {
      "type": "library",
      "name": "void-elements",
      "version": "2.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|void-elements@2.0.1",
      "author": "hemanth.hm",
      "description": "Array of \"void elements\" defined by the HTML specification.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/void-elements@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/hemanth/void-elements.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hemanth/void-elements",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hemanth/void-elements/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/void-elements/-/void-elements-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a99297e119c1cc7dae82bf0bc5aef1fb457a5c3f526ffa2e011b626ac110087075115538357b661ec0c3af1d5d3b89dee5f73727a116d3904fd43974cf48ae9e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/void-elements"
        }
      ]
    },
    {
      "type": "library",
      "name": "with",
      "version": "5.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|with@5.1.1",
      "author": "ForbesLindesay",
      "description": "Compile time `with` for strict mode JavaScript",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/with@5.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/pugjs/with.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pugjs/with#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pugjs/with/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/with/-/with-5.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b809d2b0519f4a917a0cd8415d2b6f95920b7c725f26ee1e5247db44693de2418ed536bb6e0e85c1fbe83a18721c026e15b0b0fb4c64e2e277bb9ee32ef94226"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/with"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "acorn-globals",
          "version": "3.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|with@5.1.1|acorn-globals@3.1.0",
          "author": "ForbesLindesay",
          "description": "Detect global variables in JavaScript using acorn",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/acorn-globals@3.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/ForbesLindesay/acorn-globals.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/ForbesLindesay/acorn-globals#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/ForbesLindesay/acorn-globals/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/acorn-globals/-/acorn-globals-3.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b96b6d64293debeee2b4fc4af310b363ce8f9f129332b45e283aab1f3bf8d95418d0adf43d43bc598d7758c3ae23e70e757e0421dcddbd0f24ea392e19114c63"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/with/node_modules/acorn-globals"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "acorn",
              "version": "4.0.13",
              "bom-ref": "pug@2.0.4-tuxcare.2|with@5.1.1|acorn-globals@3.1.0|acorn@4.0.13",
              "description": "ECMAScript parser",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/acorn@4.0.13",
              "externalReferences": [
                {
                  "url": "git+https://github.com/ternjs/acorn.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/ternjs/acorn",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/ternjs/acorn/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/acorn/-/acorn-4.0.13.tgz",
                  "type": "distribution",
                  "hashes": [
                    {
                      "alg": "SHA-512",
                      "content": "7eedb28151ae3269731bc65e449d1bbd1e359ec024c7185bca4f1b675492e76d59eef9a02454d04257f3fcca7f9c97b1181cfebfcb02f5b33afa5360b24b7852"
                    }
                  ],
                  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/with/node_modules/acorn-globals/node_modules/acorn"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "acorn",
          "version": "3.3.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|with@5.1.1|acorn@3.3.0",
          "description": "ECMAScript parser",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/acorn@3.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/ternjs/acorn.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/ternjs/acorn",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/ternjs/acorn/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/acorn/-/acorn-3.3.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "38b53220867b985e68680513d70d1316a412f35ab7b1a4f8eb1f2deee9293e330d93e9dbb3864786ced3a15f045a72d82dea631135dde17682138bb190c7aa53"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/with/node_modules/acorn"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "clean-css",
      "version": "4.2.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|clean-css@4.2.4",
      "author": "Jakub Pawlowicz",
      "description": "A well-tested CSS minifier",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/clean-css@4.2.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/jakubpawlowicz/clean-css.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jakubpawlowicz/clean-css",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jakubpawlowicz/clean-css/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/clean-css/-/clean-css-4.2.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1095034fb9c35450ef690800a361bf3c9bf19a9d68fdcea25cb6ecc2c05b5055e2d4dafe02303670a99f6ca0cc8ccbf311eef98373fa2646830c02a4f7a03ce4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/clean-css"
        }
      ]
    },
    {
      "type": "library",
      "name": "jstransformer",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jstransformer@1.0.0",
      "author": "ForbesLindesay",
      "description": "Normalize the API of any jstransformer",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jstransformer@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jstransformers/jstransformer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jstransformers/jstransformer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jstransformers/jstransformer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jstransformer/-/jstransformer-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0bd60add17fcaba5403c308253d7e7aa8de601f387eaf5069cc70fe004006081295ad7c62e9c0e4e667e8a0b5d2b9cbe56f2369f70b2612cf2e10877e1eab6e0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jstransformer"
        }
      ]
    },
    {
      "type": "library",
      "name": "pug-walk",
      "version": "1.1.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|pug-walk@1.1.8",
      "author": "ForbesLindesay",
      "description": "Walk and transform a pug AST",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pug-walk@1.1.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/pugjs/pug.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pugjs/pug/tree/master#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pugjs/pug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pug-walk/-/pug-walk-1.1.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "18cbb73399d42f77e3bb8fde817c193b45cb8ba7d6fcadd3dd54e0150d781b1362f1bb65c604f9a992fffc9c19166ff615aeb827f3cd4bc0197b2b37c2232454"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pug-walk"
        }
      ]
    },
    {
      "type": "library",
      "name": "resolve",
      "version": "1.1.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|resolve@1.1.7",
      "author": "James Halliday",
      "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/resolve@1.1.7",
      "externalReferences": [
        {
          "url": "git://github.com/substack/node-resolve.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-resolve#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-resolve/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.1.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f739c1174bc171a48ddd6da3ef02af74444fc2a4f14a90aafa27f90b45a84c2c95f67db8aee6b6f237ae436a4bfc739ffb251efcc79ff87ff9a7ad0ad087776e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/resolve"
        }
      ]
    },
    {
      "type": "library",
      "name": "character-parser",
      "version": "2.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|character-parser@2.2.0",
      "author": "ForbesLindesay",
      "description": "Parse JavaScript one character at a time to look for snippets in Templates.  This is not a validator, it's just designed to allow you to have sections of JavaScript delimited by brackets robustly.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/character-parser@2.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ForbesLindesay/character-parser.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ForbesLindesay/character-parser#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ForbesLindesay/character-parser/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/character-parser/-/character-parser-2.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f94a8942314415a4c0b376cdb05da3da410dd5b686ff382165b76aa18103c4666d268f4b07397503e9b40f89f7a8ac7c37614dbfcfd7a7ac95f6642606ea6d6b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/character-parser"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-expression",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-expression@3.0.0",
      "author": "Timothy Gu",
      "description": "Check if a string is a valid JavaScript expression",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-expression@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/pugjs/is-expression.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pugjs/is-expression#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pugjs/is-expression/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-expression/-/is-expression-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bf231e40cabe0221f9b949e805f313c1fd7cb4eddb33a935417044f43eae78002ab847c265edc024fb6e77d83aa92d3ee17f3103b9dda59883c9e6f6976a8e07"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-expression"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "acorn",
          "version": "4.0.13",
          "bom-ref": "pug@2.0.4-tuxcare.2|is-expression@3.0.0|acorn@4.0.13",
          "description": "ECMAScript parser",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/acorn@4.0.13",
          "externalReferences": [
            {
              "url": "git+https://github.com/ternjs/acorn.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/ternjs/acorn",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/ternjs/acorn/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/acorn/-/acorn-4.0.13.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "7eedb28151ae3269731bc65e449d1bbd1e359ec024c7185bca4f1b675492e76d59eef9a02454d04257f3fcca7f9c97b1181cfebfcb02f5b33afa5360b24b7852"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/is-expression/node_modules/acorn"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "object-assign",
      "version": "4.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|object-assign@4.1.1",
      "author": "Sindre Sorhus",
      "description": "ES2015 `Object.assign()` ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/object-assign.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/object-assign#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/object-assign/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/object-assign"
        }
      ]
    },
    {
      "type": "library",
      "name": "token-stream",
      "version": "0.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|token-stream@0.0.1",
      "author": "ForbesLindesay",
      "description": "Take an array of token and produce a more useful API to give to a parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/token-stream@0.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jadejs/token-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jadejs/token-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jadejs/token-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/token-stream/-/token-stream-0.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9df8ce02eff3016997f6d8308b9351a7b3bbcd30d40f59a21e2078d249549c087daa72f5897760cdccff8b974c68be636a170101a49f98d38104904b256f1312"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/token-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "glob",
      "version": "7.2.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|glob@7.2.3",
      "author": "Isaac Z. Schlueter",
      "description": "a little globber",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/glob@7.2.3",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-glob.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/node-glob#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/node-glob/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9c5474ccba54d9809a471c28089bcbe94bc21f6245c85548bf04cbb087f6d40b8794cb240358614dd93e2e5609b4e958b7dbfa76fb330f604646a04bfa240af5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/glob"
        }
      ]
    },
    {
      "type": "library",
      "name": "async",
      "version": "0.2.10",
      "bom-ref": "pug@2.0.4-tuxcare.2|async@0.2.10",
      "author": "Caolan McMahon",
      "description": "Higher-order functions and common patterns for asynchronous code",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/caolan/async/raw/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/async@0.2.10",
      "externalReferences": [
        {
          "url": "git+https://github.com/caolan/async.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/caolan/async#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/caolan/async/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/async/-/async-0.2.10.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "78091da0ac54ebf2e42830732e94feb7a15fe44b5f485e30c7559f2623c4115ed634b9c36915e4d28572b2210f9b6eb6ae869a72119ec7052ff785a14a03794d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/async"
        }
      ]
    },
    {
      "type": "library",
      "name": "uglify-to-browserify",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|uglify-to-browserify@1.0.2",
      "author": "ForbesLindesay",
      "description": "A transform to make UglifyJS work in browserify.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/uglify-to-browserify@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ForbesLindesay/uglify-to-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ForbesLindesay/uglify-to-browserify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ForbesLindesay/uglify-to-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bdbdacd65631db106d520cbeb5af9bd89fc62d5511fb09a920dc0778f98f4613ac215086db00f3289d27d781ac947d4189fb2a57348ec1085168202c67f9c8e1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/uglify-to-browserify"
        }
      ]
    },
    {
      "type": "library",
      "name": "argparse",
      "version": "1.0.10",
      "bom-ref": "pug@2.0.4-tuxcare.2|argparse@1.0.10",
      "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/argparse@1.0.10",
      "externalReferences": [
        {
          "url": "git+https://github.com/nodeca/argparse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodeca/argparse#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodeca/argparse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a39468cbab4d1b848bfc53a408037a4738e26a4652db944b605adc32db49a9b75df015ab9c0f9f1b3e7b88de4f6f4ea9bc11af979810d01e3c74996c957be84e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/argparse"
        }
      ]
    },
    {
      "type": "library",
      "name": "esprima",
      "version": "4.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|esprima@4.0.1",
      "author": "Ariya Hidayat",
      "description": "ECMAScript parsing infrastructure for multipurpose analysis",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/esprima@4.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jquery/esprima.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://esprima.org",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jquery/esprima/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "786b85170ed4a5d6be838a7e407be75b44724d7fd255e2410ccfe00ad30044ed1c2ee4f61dc10a9d33ef86357a6867aaac207fb1b368a742acce6d23b1a594e0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/esprima"
        }
      ]
    },
    {
      "type": "library",
      "name": "aws-sign2",
      "version": "0.7.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|aws-sign2@0.7.0",
      "author": "Mikeal Rogers",
      "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.7.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mikeal/aws-sign.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mikeal/aws-sign#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mikeal/aws-sign/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.7.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d3c91c1aa9d87ff6268e84617f1caef822f106352d1cb5cb5d7fef51fc7d9762d8cc6ddcd66eb59eba72154648eb3792f8b8bfc1630c89d0fd2a0aeab46ab798"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/aws-sign2"
        }
      ]
    },
    {
      "type": "library",
      "name": "aws4",
      "version": "1.13.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|aws4@1.13.2",
      "author": "Michael Hart",
      "description": "Signs and prepares requests using AWS Signature Version 4",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/aws4@1.13.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/mhart/aws4.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mhart/aws4#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mhart/aws4/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/aws4/-/aws4-1.13.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9477badb3bdb4c1e5e100054562fc0c1587464a63dacc3038669be79ecaeb9441b437f89f9f38d550399ca3f8376bbc3e01637dee6278b2449e142486922807f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/aws4"
        }
      ]
    },
    {
      "type": "library",
      "name": "caseless",
      "version": "0.12.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|caseless@0.12.0",
      "author": "Mikeal Rogers",
      "description": "Caseless object set/get/has, very useful when working with HTTP headers.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/caseless@0.12.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mikeal/caseless.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mikeal/caseless#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mikeal/caseless/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e2d605ca27da15f19a72888e6e325e828964c12538c503466d581488d6155316d0db1da552c16f638855815cc68887ba58b38fab27165c0e3497e3d6b31b6153"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/caseless"
        }
      ]
    },
    {
      "type": "library",
      "name": "combined-stream",
      "version": "1.0.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|combined-stream@1.0.8",
      "author": "Felix Geisendörfer",
      "description": "A stream that emits multiple other streams one after another.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.8",
      "externalReferences": [
        {
          "url": "git://github.com/felixge/node-combined-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/felixge/node-combined-stream",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/felixge/node-combined-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1503783117ee25e1dfedc05b04c2455e12920eafb690002b06599106f72f144e410751d9297b5214048385d973f73398c3187c943767be630e7bffb971da0476"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/combined-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "extend",
      "version": "3.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|extend@3.0.2",
      "author": "Stefan Thomas",
      "description": "Port of jQuery.extend for node.js and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/extend@3.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/justmoon/node-extend.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/justmoon/node-extend#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/justmoon/node-extend/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7e3aae0b9f5c0fb0b25babab3572b4141b9f9197288861bcd304ee3ee8d7e7dd1c0794ed967db4136501e12fd601156a8577df665d8b3604be81074f2088a6fe"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/extend"
        }
      ]
    },
    {
      "type": "library",
      "name": "forever-agent",
      "version": "0.6.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|forever-agent@0.6.1",
      "author": "Mikeal Rogers",
      "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/forever-agent@0.6.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/mikeal/forever-agent.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mikeal/forever-agent#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mikeal/forever-agent/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8f428b60f866eb379a738973de8277a3ae6abe040270fb9b8b2a2d66b5ea11a1b884d6a03583bca9d954ad7e6fc2abfda21a9e4ff6778fafb25b4ebbc9659d53"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/forever-agent"
        }
      ]
    },
    {
      "type": "library",
      "name": "form-data",
      "version": "2.3.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|form-data@2.3.3",
      "author": "Felix Geisendörfer",
      "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/form-data@2.3.3",
      "externalReferences": [
        {
          "url": "git://github.com/form-data/form-data.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/form-data/form-data#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/form-data/form-data/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/form-data/-/form-data-2.3.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d652ca07632edda18fd50ff67823b1d1f35b44c7bb5ddc24b703abba17eaa9dd2b2095b03780e1f84de1acf4a50c25e7491ed4b59d4ddfcad55e6fbaf8c12125"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/form-data"
        }
      ]
    },
    {
      "type": "library",
      "name": "har-validator",
      "version": "5.1.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|har-validator@5.1.5",
      "author": "Ahmad Nassri",
      "description": "Extremely fast HTTP Archive (HAR) validator using JSON Schema",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/har-validator@5.1.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/ahmadnassri/node-har-validator.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ahmadnassri/node-har-validator",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ahmadnassri/node-har-validator/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/har-validator/-/har-validator-5.1.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9e64f64f49658dbc5d4197eca6c9e8f6182b1b7522afa2ace5a7e2b26eb6a68c6a04ceac0e7304b8f9b34eaf17374384c2a28b2dd8758d0237ab213ae8dcdbdf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/har-validator"
        }
      ]
    },
    {
      "type": "library",
      "name": "http-signature",
      "version": "1.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|http-signature@1.2.0",
      "author": "Joyent, Inc",
      "description": "Reference implementation of Joyent's HTTP Signature scheme.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/http-signature@1.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/joyent/node-http-signature.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/joyent/node-http-signature/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/joyent/node-http-signature/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/http-signature/-/http-signature-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0806e7afa473e0261090b614b52357c503d41f680af1fde259ec5596c9cc783f868e5b10d17b32d5c397fa637776dc58a26472db50a23b353c521c3a3b09dc11"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/http-signature"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-typedarray",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-typedarray@1.0.0",
      "author": "Hugh Kennedy",
      "description": "Detect whether or not an object is a Typed Array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-typedarray@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/hughsk/is-typedarray.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hughsk/is-typedarray",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hughsk/is-typedarray/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "732039ea208c1c087909dce32486b86a8849c9e3b561bc0b8b725cdf9326454ea9a2ba058c8199cd4ceea468913ce8e01e0f532eee37c5ba705e4e76ddf33128"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-typedarray"
        }
      ]
    },
    {
      "type": "library",
      "name": "isstream",
      "version": "0.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|isstream@0.1.2",
      "author": "Rod Vagg",
      "description": "Determine if an object is a Stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/isstream@0.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/rvagg/isstream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/rvagg/isstream",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/rvagg/isstream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6258f3edf7f23dbacba4b9e0accb59ecd76e52056f8bac06f5127d21473209de7d610f75d4f049a6138351c6ce55ba987f17b5c2e61ffcb27c3dab8c470b0cfe"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/isstream"
        }
      ]
    },
    {
      "type": "library",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|json-stringify-safe@5.0.1",
      "author": "Isaac Z. Schlueter",
      "description": "Like JSON.stringify, but doesn't blow up on circular refs.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/json-stringify-safe.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/json-stringify-safe",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/json-stringify-safe/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "642960e80698bda9af60413cd9ddc8c9ddef49222343ea1d823693cd1b8edeceeda0274529cce86f68b4cc287b244f245a7d7bcaf016854571bea1b051a96c44"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/json-stringify-safe"
        }
      ]
    },
    {
      "type": "library",
      "name": "mime-types",
      "version": "2.1.35",
      "bom-ref": "pug@2.0.4-tuxcare.2|mime-types@2.1.35",
      "description": "The ultimate javascript content-type utility.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.35",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/mime-types.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/mime-types#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/mime-types/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "64363e6cf9b9cd34c5f98a42ac053d9cad148080983d3d10b53d4d65616fe2cfbe4cd91c815693d20ebee11dae238323423cf2b07075cf1b962f9d21cda7978b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mime-types"
        }
      ]
    },
    {
      "type": "library",
      "name": "oauth-sign",
      "version": "0.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|oauth-sign@0.9.0",
      "author": "Mikeal Rogers",
      "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mikeal/oauth-sign.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mikeal/oauth-sign#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mikeal/oauth-sign/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7dec6150514f4c657cc9b02d48819b57a80e912bfc52d45b0c19c0c8b430e103ca920365b07d81c8f1ad314a9d5a4a2ce98091980a958b0819ac973f9910f365"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/oauth-sign"
        }
      ]
    },
    {
      "type": "library",
      "name": "performance-now",
      "version": "2.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|performance-now@2.1.0",
      "author": "Braveg1rl",
      "description": "Implements performance.now (based on process.hrtime).",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/performance-now@2.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/braveg1rl/performance-now.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/braveg1rl/performance-now",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/braveg1rl/performance-now/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ec40079722c7239e9510874ae7bbb01dd1ca21a0066e75cf8b0d3259b6ab41938a68aa6f508816d2359154b89ab6733e5d7952c2c6a72011ff87318c26e94ca3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/performance-now"
        }
      ]
    },
    {
      "type": "library",
      "name": "qs",
      "version": "6.5.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|qs@6.5.3",
      "description": "A querystring parser that supports nesting and arrays, with a depth limit",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/qs@6.5.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/qs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/qs",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/qs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/qs/-/qs-6.5.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ab15c8121e290867c72028f5980250dbfd975599230834dc1207e8490c5cfdf622bd46714e493b2f76c30494a836b1335c8d7ba143b90e9d3b92da84e4acdccc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/qs"
        }
      ]
    },
    {
      "type": "library",
      "name": "safe-buffer",
      "version": "5.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1",
      "author": "Feross Aboukhadijeh",
      "description": "Safer Node.js Buffer API",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "url": "git://github.com/feross/safe-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/safe-buffer",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/safe-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/safe-buffer"
        }
      ]
    },
    {
      "type": "library",
      "name": "tough-cookie",
      "version": "2.5.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|tough-cookie@2.5.0",
      "author": "Jeremy Stashewsky",
      "description": "RFC6265 Cookies and Cookie Jar for node.js",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tough-cookie@2.5.0",
      "externalReferences": [
        {
          "url": "git://github.com/salesforce/tough-cookie.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/salesforce/tough-cookie",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/salesforce/tough-cookie/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9e52ec533826d647cb5d25df45931cd4a2c0ba077886a2470d3bdcda10c8c12de66407cc12e31b734dd2ba3305f8611ca5a5ffa9ba1ec9cc3a88ef09c15bf6fa"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tough-cookie"
        }
      ]
    },
    {
      "type": "library",
      "name": "tunnel-agent",
      "version": "0.6.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|tunnel-agent@0.6.0",
      "author": "Mikeal Rogers",
      "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mikeal/tunnel-agent.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mikeal/tunnel-agent#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mikeal/tunnel-agent/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "31c9cd895d65f1161e63cb41804a6ea1d082d662d475b48df826012fb909b093489ce3fc5230c3130764e8cc3ad2f74b2ebaf934729984c00e4ab476359b90fb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tunnel-agent"
        }
      ]
    },
    {
      "type": "library",
      "name": "uuid",
      "version": "3.4.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|uuid@3.4.0",
      "description": "RFC4122 (v1, v4, and v5) UUIDs",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/uuid@3.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/uuidjs/uuid.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/uuidjs/uuid#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/uuidjs/uuid/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/uuid/-/uuid-3.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1e3483470ea0644e4932081cb4705c8d56a4d3cf8a1158522220f31674fd4bd69e826a7ce52fdb45e0554dbe104c5691369b49f64b9868d8676cd10e91b29bfc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/uuid"
        }
      ]
    },
    {
      "type": "library",
      "name": "pkg-dir",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|pkg-dir@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Find the root directory of a Node.js project or npm package",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pkg-dir@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/pkg-dir.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/pkg-dir#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/pkg-dir/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fc4e7b018928790db9aa4c4c8f93c1395805f0a8aefe1edc612df4679f91ed66a208205f2eae7c648fdd49e68429bf565495799ffd37430acddc8796205965bf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pkg-dir"
        }
      ]
    },
    {
      "type": "library",
      "name": "resolve-cwd",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|resolve-cwd@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Resolve the path of a module like `require.resolve()` but from the current working directory",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/resolve-cwd@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/resolve-cwd.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/resolve-cwd#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/resolve-cwd/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/resolve-cwd/-/resolve-cwd-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "71cbbccd04ebcd5afde78e3bd9a5153cb11c077629292611ddc83fde5a35a24ce86cf04cfb520d5c16c16650db9c8fe16c4a1c9dff23d10568e378502ab6dc86"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/resolve-cwd"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "resolve-from",
          "version": "3.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|resolve-cwd@2.0.0|resolve-from@3.0.0",
          "author": "Sindre Sorhus",
          "description": "Resolve the path of a module like `require.resolve()` but from a given path",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/resolve-from@3.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/resolve-from.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/resolve-from#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/resolve-from/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/resolve-from/-/resolve-from-3.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "1a7947eafc4bca65c934c068ed73f57c92330456dd62de3d0ae4f0981ffa379dedfa430f44c14acfbf372e5438b6fdbc5e841f3168a70095fa58219fd8895a23"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/resolve-cwd/node_modules/resolve-from"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "core",
      "group": "@jest",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@jest/core@24.9.0",
      "description": "Delightful JavaScript Testing.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jest/core@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-core",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://jestjs.io/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jest/core/-/core-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "168820dece30940af5557eeafab855f5156752fe6d0fb56e59f632d7ec21322594aef97b537409489c967038a8f4bab6a6ba98b1969e4efd91cf6e29586909d8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jest/core"
        }
      ]
    },
    {
      "type": "library",
      "name": "test-result",
      "group": "@jest",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@jest/test-result@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jest/test-result@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-test-result",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jest/test-result/-/test-result-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5c416b1db0689c127c746a7626617c90ffe7408fc898fa7280a1f043f498f9eb39f59dcbe4f23841bf5341030011e62c4e11b5c45d24ead986d2d20a01336288"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jest/test-result"
        }
      ]
    },
    {
      "type": "library",
      "name": "types",
      "group": "@jest",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jest/types@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-types",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jest/types/-/types-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5ca2bbcded5aa6ee49590e5e6631c84cfeba017f90b0b95b689441198afca4dcf07001362559309dfd32aa31d3b0345c8d1d26ba3cbf36664c5f0e6497e90607"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jest/types"
        }
      ]
    },
    {
      "type": "library",
      "name": "chalk",
      "version": "2.4.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|chalk@2.4.2",
      "description": "Terminal string styling done right",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/chalk@2.4.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/chalk.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/chalk#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/chalk/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "32d8be7fd96924d730178b5657cfcead34ed1758198be7fc16a97201da2eada95c156150585dbe3600874a18e409bf881412eaf5bb99c04d71724414e29792b9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/chalk"
        }
      ]
    },
    {
      "type": "library",
      "name": "exit",
      "version": "0.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|exit@0.1.2",
      "author": "\"Cowboy\" Ben Alman",
      "description": "A replacement for process.exit that ensures stdio are fully drained before exiting.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/cowboy/node-exit/blob/master/LICENSE-MIT"
          }
        }
      ],
      "purl": "pkg:npm/exit@0.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/cowboy/node-exit.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/cowboy/node-exit",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/cowboy/node-exit/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "664fde34a576cdb8e92b3aec43e9f51baa6855b12b4312742c13895da299d445622f31fe86b2eef5c757238cf0f5d05026c970044a5b4363f5a12ee70f1b3a8d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/exit"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-ci",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-ci@2.0.0",
      "author": "Thomas Watson Steen",
      "description": "Detect if the current environment is a CI server",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-ci@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/watson/is-ci.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/watson/is-ci",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/watson/is-ci/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-ci/-/is-ci-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "61f253eeb929401d2ea5db1d1cb196aef84125f71fccd35ac180cd232417273d0856219fef93bc1013ca49dbf0dab17e2c60ac5f8159f2d72bddbd7d2dc66ae3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-ci"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-config",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-config@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-config@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-config",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-config/-/jest-config-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4404ed409b55610ae9edfbd683a7f9cb7a44163f48f87f2c5b0e1a2b19c367dea6a1be62e520fa64419680c2d74382c4f14babae36dd94b59d51ea3edbc4297d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-config"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-util",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-util@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-util@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-util",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-util/-/jest-util-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c7e71953c55198e2716c0d4ae680c177142676ad0e21d0036ab2f193432afb75d2e2382f846fe828659c2030ad3c6d07823c4e62f17e8a53c942c0325df6cd3a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-util"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-validate",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-validate@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-validate@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-validate",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-validate/-/jest-validate-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1cf22de82e400b08aa4a2c22f8e7d24876caf2c1bb6a41bc7804e5f883ca69e223b4f39e05477f83727b0e086e833c6b1a323ddea4bff913ca7b51fa3eabe145"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-validate"
        }
      ]
    },
    {
      "type": "library",
      "name": "prompts",
      "version": "2.4.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|prompts@2.4.2",
      "author": "Terkel Gjervig",
      "description": "Lightweight, beautiful and user-friendly prompts",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/prompts@2.4.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/terkelg/prompts.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/terkelg/prompts#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/terkelg/prompts/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/prompts/-/prompts-2.4.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "37136ffe42e0b8203ba778c4f282f668406cac95a001a901a609a02ba9693d657e5ae3a663aaf6ff36c05673fe4fc6d0940d27cc75d2252256d07abbca5683d9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/prompts"
        }
      ]
    },
    {
      "type": "library",
      "name": "realpath-native",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|realpath-native@1.1.0",
      "author": "Simen Bekkhus",
      "description": "Use the system's native `realpath`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/realpath-native@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/SimenB/realpath-native.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/SimenB/realpath-native#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/SimenB/realpath-native/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/realpath-native/-/realpath-native-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c2580f03a70220883d80acf47e000f8e7ce1e3247f2e75e8bf0ba8f61bf21afc7787c9d7e3efe22d9a657d459ab17a6a0fc05d9c69cfe678ce163914c0fcef8c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/realpath-native"
        }
      ]
    },
    {
      "type": "library",
      "name": "yargs",
      "version": "13.3.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|yargs@13.3.2",
      "description": "yargs the modern, pirate-themed, successor to optimist.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/yargs@13.3.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/yargs/yargs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://yargs.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/yargs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/yargs/-/yargs-13.3.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "017dd9c3988faee37989eeb119120382a913f9986746564c2cc1c0b3cb60ee746bbb2d8d6fe8b9a3d6f082102882d334f2ad5da6bd8b5684bc2924cc62959753"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/yargs"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "string-width",
          "version": "3.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|yargs@13.3.2|string-width@3.1.0",
          "author": "Sindre Sorhus",
          "description": "Get the visual width of a string - the number of columns required to display it",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string-width@3.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/string-width.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/string-width#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/string-width/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string-width/-/string-width-3.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "bda7dcbfa2a3559292833d3aa0cfc7e860c1ac0b73f2f76141a9068c522f36b1c0eb2dc7085d422272f2f902eaf1d4c93d0d5bf8a0d4a8315cb647515b8e1ed7"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/yargs/node_modules/string-width"
            }
          ]
        },
        {
          "type": "library",
          "name": "yargs-parser",
          "version": "13.1.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|yargs@13.3.2|yargs-parser@13.1.2",
          "author": "Ben Coe",
          "description": "the mighty option parser used by yargs",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/yargs-parser@13.1.2",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/yargs/yargs-parser.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/yargs/yargs-parser#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/yargs-parser/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-13.1.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "de56ec3517ff8fe03842e4997c3440ec74527d6af33b4623a9325de648c0ab7ed97a9d421206989ab1fd4371b03e207d707c9dd58d54c208068491a8c62a5bce"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/yargs/node_modules/yargs-parser"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "errno",
      "version": "0.1.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|errno@0.1.8",
      "description": "libuv errno details exposed",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/errno@0.1.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/rvagg/node-errno.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/rvagg/node-errno#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/rvagg/node-errno/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/errno/-/errno-0.1.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "749ea806be5243555277daa493b0724606ffd521f82598c21d25bf9abeb7fd07173bdccb571bc9e8ecb5de78a8d37af1a529d50c38c5a2bef94a355e6563d6fc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/errno"
        }
      ]
    },
    {
      "type": "library",
      "name": "graceful-fs",
      "version": "4.2.11",
      "bom-ref": "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
      "description": "A drop-in replacement for fs, making various improvements.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.11",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/node-graceful-fs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/node-graceful-fs#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/node-graceful-fs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "45b279fe398570d342703579a3d7939c12c9fc7b33595d0fef76dcf857f89d2feb263f98692e881b288e2f45680585fe9755ab97793ade1fcaac7fa7849d17bd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/graceful-fs"
        }
      ]
    },
    {
      "type": "library",
      "name": "image-size",
      "version": "0.5.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|image-size@0.5.5",
      "author": "netroy",
      "description": "get dimensions of any image file",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/image-size@0.5.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/image-size/image-size.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/image-size/image-size#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/image-size/image-size/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/image-size/-/image-size-0.5.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e930c09433d9c54142bfe7ee3a42285d3fd5fdfdd06eaf1edfba7e60e898ad4bf7bfd71cdffeb1efc55d7cf80555a07d75961e2d47ca80745e6e9926fe83f655"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/image-size"
        }
      ]
    },
    {
      "type": "library",
      "name": "mime",
      "version": "1.6.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|mime@1.6.0",
      "author": "Robert Kieffer",
      "description": "A comprehensive library for mime-type mapping",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mime@1.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/broofa/node-mime.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/broofa/node-mime#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/broofa/node-mime/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c74567f2ca48fb0b89d4ee92ee09db69083c3f187834d1dbeca4883661162a23c4e1128ea65be28e7f8d92662699180febc99cef48f611b793151b2bb306907a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mime"
        }
      ]
    },
    {
      "type": "library",
      "name": "promise",
      "version": "7.3.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|promise@7.3.1",
      "author": "ForbesLindesay",
      "description": "Bare bones Promises/A+ implementation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/promise@7.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/then/promise.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/then/promise#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/then/promise/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/promise/-/promise-7.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9e89505d9ff82fe6cffd41a591f688ba35fd04ac46c2643d393e263ade72bf2f222b5877c2a4c42428a3cc600d4c20a5f675a3638d63bb2027d8add0d612cb4e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/promise"
        }
      ]
    },
    {
      "type": "library",
      "name": "entities",
      "version": "1.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|entities@1.1.2",
      "author": "Felix Boehm",
      "description": "Encode & decode XML/HTML entities with ease",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/entities@1.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/fb55/entities.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/fb55/entities#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/fb55/entities/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/entities/-/entities-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7f62d9318975173bbb61204a83e46844e7a5a4e68dadc1a613d019b9b7837eb08489ae3cde85b8308e15c8577954d1c8810ffbaa6d48d305072b57899e7db2db"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/entities"
        }
      ]
    },
    {
      "type": "library",
      "name": "linkify-it",
      "version": "2.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|linkify-it@2.2.0",
      "description": "Links recognition library with FULL unicode support",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/linkify-it@2.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/markdown-it/linkify-it.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/markdown-it/linkify-it#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/markdown-it/linkify-it/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/linkify-it/-/linkify-it-2.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1a7025fe49c69fe8b553fc23073dda933dacb73f87ac72ecc4cc07406a1f0837cfbe57fe80328de7c52d7e652ab93638fcc5de136c7b935f4a4267a8662f7823"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/linkify-it"
        }
      ]
    },
    {
      "type": "library",
      "name": "mdurl",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|mdurl@1.0.1",
      "description": "URL utilities for markdown-it",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mdurl@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/markdown-it/mdurl.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/markdown-it/mdurl#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/markdown-it/mdurl/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mdurl/-/mdurl-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fec2a540908161563d12bb3d86accaa2ee07e95e5459cfcce7d4c7d9dbe4b7ef388ad7e7abbb8538c2e93a2392e2e8ef1cfe1eb659f5f1f988c40e51e5f965d2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mdurl"
        }
      ]
    },
    {
      "type": "library",
      "name": "uc.micro",
      "version": "1.0.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|uc.micro@1.0.6",
      "description": "Micro subset of unicode data files for markdown-it projects.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/uc.micro@1.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/markdown-it/uc.micro.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/markdown-it/uc.micro#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/markdown-it/uc.micro/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/uc.micro/-/uc.micro-1.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f18ef9a6f4d890b256da15901d7c68a91815eea6fd07ef6f144b6274c2feee4a075056a99d524067a70ab3e423cf9030dda6561cc0babb4c0913702dfa7486c0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/uc.micro"
        }
      ]
    },
    {
      "type": "library",
      "name": "css-parse",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|css-parse@2.0.0",
      "author": "TJ Holowaychuk",
      "description": "CSS parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/css-parse@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/reworkcss/css-parse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/reworkcss/css-parse#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/reworkcss/css-parse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/css-parse/-/css-parse-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "50d2058a4d918126e24f0216d48b05c175a7eafb3e6d876af372ca4d23acc7b34947b58823d7717b09072e5b5f4cb569a68500a47574d75f1ae1165123d14bc0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/css-parse"
        }
      ]
    },
    {
      "type": "library",
      "name": "safer-buffer",
      "version": "2.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|safer-buffer@2.1.2",
      "author": "Nikita Skovoroda",
      "description": "Modern Buffer API polyfill without footguns",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ChALkeR/safer-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ChALkeR/safer-buffer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ChALkeR/safer-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "619a372bcd920fb462ca2d04d4440fa232f3ee4a5ea6749023d2323db1c78355d75debdbe5d248eeda72376003c467106c71bbbdcc911e4d1c6f0a9c42b894b6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/safer-buffer"
        }
      ]
    },
    {
      "type": "library",
      "name": "semver",
      "version": "6.3.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|semver@6.3.1",
      "author": "GitHub Inc.",
      "description": "The semantic version parser used by npm.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/semver@6.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/node-semver.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/node-semver#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/node-semver/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/semver/-/semver-6.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "051ed5bc30951cefaadb10445ac9314ba0c9135a919dbec3c7352ba206fbd425a849f89c07162c88019df8a9749a6abf329ac6f7202b464cab4314cee978cccc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/semver"
        }
      ]
    },
    {
      "type": "library",
      "name": "command",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6",
      "author": "Daniel Stockman",
      "description": "Lerna's internal base class for commands",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/command@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/command/-/command-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8cf66cc0c6573a901a22e485e61af3f9e6964336c3aefc1bae40a844929f8801f1ed4440904e8c41ef437809eaad328cab07e0d117224ab64b73c91661faf309"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/command"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "is-ci",
          "version": "1.2.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6|is-ci@1.2.1",
          "author": "Thomas Watson Steen",
          "description": "Detect if the current environment is a CI server",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-ci@1.2.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/watson/is-ci.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/watson/is-ci",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/watson/is-ci/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-ci/-/is-ci-1.2.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b3ab5fb1a41a422dc935c8811fab2156a103be11aeb744945ebdf56a0f0f77c0416d55657067d68693e610ea0ce912794c585bca9bdfe72c91c3f5575b52225a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/command/node_modules/is-ci"
            }
          ]
        },
        {
          "type": "library",
          "name": "ci-info",
          "version": "1.6.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6|ci-info@1.6.0",
          "author": "Thomas Watson Steen",
          "description": "Get details about the current Continuous Integration environment",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ci-info@1.6.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/watson/ci-info.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/watson/ci-info",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/watson/ci-info/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ci-info/-/ci-info-1.6.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "bec19d9304820e95a63fcd277004d7ee279ae435907a6835520096e49f2daa3537958c3814162e8fcf49d024d5a2603b0447ef49977ce06987928f8cc45414d8"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/command/node_modules/ci-info"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "filter-options",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/filter-options@3.10.6",
      "author": "Daniel Stockman",
      "description": "Options for lerna sub-commands that need filtering",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/filter-options@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/filter-options/-/filter-options-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "aff7506ea37e44614a64d9fe0f259e86cc05980927cbf7e474c076b113366157bbcd14ed4a5f796310fd0ed7589e92531bf8db3952024bf2f94096a4ac8e924b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/filter-options"
        }
      ]
    },
    {
      "type": "library",
      "name": "npm-conf",
      "group": "@lerna",
      "version": "3.7.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/npm-conf@3.7.0",
      "author": "Daniel Stockman",
      "description": "Vendored npm-conf with updates",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/npm-conf@3.7.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/npm-conf/-/npm-conf-3.7.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f9648c0df3ca70accc7eaab6f37c9dcfd451a4e53aa7dc1fc74c32e21552518ffa614a6ccae93c492863711b58f334cce403abc6f141bae57dd07e18a59e7e36"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/npm-conf"
        }
      ]
    },
    {
      "type": "library",
      "name": "validation-error",
      "group": "@lerna",
      "version": "3.6.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/validation-error@3.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/validation-error/-/validation-error-3.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "31696d9dc18ee5580c4b441e7539590a3154305fdebd18c330c1ebb55a2b9080760a9e71cb4ae429af220c11b8deaa5459e1b5822c22e7cc949444c17167c82f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/validation-error"
        }
      ]
    },
    {
      "type": "library",
      "name": "dedent",
      "version": "0.7.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|dedent@0.7.0",
      "author": "Desmond Brand",
      "description": "An ES6 string tag that strips indentation from multi-line strings",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/dedent@0.7.0",
      "externalReferences": [
        {
          "url": "git://github.com/dmnd/dedent.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/dmnd/dedent",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dmnd/dedent/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/dedent/-/dedent-0.7.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "43a7ca50faa7007032862520154ec15332e2bf491df2c687f5a97bb67bb943fa248fa767ba9c724e01480635732404dd7c8026f4d02cbd73738da29af9bc55c8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/dedent"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-map",
      "version": "1.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|p-map@1.2.0",
      "author": "Sindre Sorhus",
      "description": "Map over promises concurrently",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-map@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-map#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-map/-/p-map-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "afacca00230d8633c931397c29c147e258bffe092b5d67db0fa7de57c97a768447973963156189d803fa88a682257c9998050c38fb6f6d6ec45e46d63bfa4b10"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "batch-packages",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/batch-packages@3.10.6",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/batch-packages@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/batch-packages/-/batch-packages-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b089ebdd940914c87d66af995285635fc47aee3f55891915cb4b8432c39f1be8d99578f59513d130f4624605348d749813009dc2e001e694ddf6d4f1d1508953"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/batch-packages"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-npm-version",
      "group": "@lerna",
      "version": "3.10.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/has-npm-version@3.10.0",
      "author": "Daniel Stockman",
      "description": "Test if the current version of npm satisfies a given semver range",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/has-npm-version@3.10.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna/tree/master/utils/has-npm-version#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/has-npm-version/-/has-npm-version-3.10.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "37845163119e8afb9a2a03c3ceb86440e42cd52838b4e9f19c47b76a47eabb5c03038360e55e98dae5b70db9008c52f768d261585e556dfeec06c1ad7e00d0f3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/has-npm-version"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/has-npm-version@3.10.0|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/has-npm-version/node_modules/semver"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "npm-install",
      "group": "@lerna",
      "version": "3.10.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/npm-install@3.10.0",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/npm-install@3.10.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/npm-install/-/npm-install-3.10.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ffafd7c8b63dff88da30f04e55852be306714144487f0a042d8d2a090f20679cefe1c3a21628825316748b87f1a85b43ee7274f38cead43b195b4687d0221663"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/npm-install"
        }
      ]
    },
    {
      "type": "library",
      "name": "package-graph",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/package-graph@3.10.6",
      "author": "Daniel Stockman",
      "description": "Lerna's internal representation of a package graph",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/package-graph@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/package-graph/-/package-graph-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9a920e25b862fb12ea4fd05c52b2d50f859ef1651da2eb107ff42775b11697c0d6016d5eb61b511d5b029bdb9f74107717d9e3e0f1ff86a9c3596c2a13ead2e3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/package-graph"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/package-graph@3.10.6|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/package-graph/node_modules/semver"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "pulse-till-done",
      "group": "@lerna",
      "version": "3.7.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/pulse-till-done@3.7.1",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/pulse-till-done@3.7.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/pulse-till-done/-/pulse-till-done-3.7.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "333a5eb19796dcc73e0a202ae3352df6a4d723db840412abb9b607137eafa104d2907beefd1a31e983af7d4afe53b3fa93c7eb14f782806a5f3034cb862a9eeb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/pulse-till-done"
        }
      ]
    },
    {
      "type": "library",
      "name": "rimraf-dir",
      "group": "@lerna",
      "version": "3.10.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/rimraf-dir@3.10.0",
      "author": "Daniel Stockman",
      "description": "Run rimraf on a directory in a subprocess to hack around slowness",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/rimraf-dir@3.10.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/rimraf-dir/-/rimraf-dir-3.10.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4522927f13d445ce7c111083fcfbb3a2b47cea5584bc858d7255d81af21833beb2346ad6883178e2918742f07827e2f16b933ee7666d642fde382ec0ed8087e2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/rimraf-dir"
        }
      ]
    },
    {
      "type": "library",
      "name": "run-lifecycle",
      "group": "@lerna",
      "version": "3.10.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/run-lifecycle@3.10.5",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/run-lifecycle@3.10.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/run-lifecycle/-/run-lifecycle-3.10.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "60f997be26b156585c28ce889034c8a53ab6e26c4eb8c0a2968f8c4ebd512e869f801f594e63f600746216dfeccb5e303acab666aaf4c09ca3f0a1650d82d390"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/run-lifecycle"
        }
      ]
    },
    {
      "type": "library",
      "name": "run-parallel-batches",
      "group": "@lerna",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/run-parallel-batches@3.0.0",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/run-parallel-batches@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/run-parallel-batches/-/run-parallel-batches-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "323d6b6af95717b02491ec0a77d605abd06d56bb12b4daef54b79d0ff6f6c0855b36a731a7c952ebcbde85754ece82ff5563440e8b6fa8242dc83062942a1d1b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/run-parallel-batches"
        }
      ]
    },
    {
      "type": "library",
      "name": "symlink-binary",
      "group": "@lerna",
      "version": "3.10.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/symlink-binary@3.10.0",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/symlink-binary@3.10.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/symlink-binary/-/symlink-binary-3.10.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ea642c1be8958c1a3c703f2cdb83be62016bc03c9419f5106cae2bc9a9405c51c8f35ed9778c65237b638375bdf70842b7aaede83d2cd5fa5ff1eb2530de9d4b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/symlink-binary"
        }
      ]
    },
    {
      "type": "library",
      "name": "symlink-dependencies",
      "group": "@lerna",
      "version": "3.10.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/symlink-dependencies@3.10.0",
      "author": "Daniel Stockman",
      "description": "Lerna's internal symlinking tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/symlink-dependencies@3.10.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/symlink-dependencies/-/symlink-dependencies-3.10.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bc6a60e727701a0402b96357e72ec244bdfc986a6e2e17f5191abdc0c9bb206c2772d12c75236abef13e2c382ab70119012bb9faf7df61490bd159455e5f2e58"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/symlink-dependencies"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-port",
      "version": "3.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|get-port@3.2.0",
      "author": "Sindre Sorhus",
      "description": "Get an available port",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-port@3.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/get-port.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/get-port#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/get-port/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-port/-/get-port-3.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c795092a581e522353f27ca8fc0727c0b9d9b9935c4a34b0d24a20441f9685dd5f8e316ae01d61c921714855964a7e26201ce0dec44d5031587388398233e82e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-port"
        }
      ]
    },
    {
      "type": "library",
      "name": "multimatch",
      "version": "2.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|multimatch@2.1.0",
      "author": "Sindre Sorhus",
      "description": "Extends minimatch.match() with support for multiple patterns",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/multimatch@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/multimatch.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/multimatch#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/multimatch/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/multimatch/-/multimatch-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d26ccaf329a259d7a14c1889874bc2940cc6c906ddb725aacd2571fff10ae0dfc3fb9f7d4459467d302c2b0db3312001b431bd0ba525dbeb7c7f62db7637f998"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/multimatch"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-finally",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|p-finally@1.0.0",
      "author": "Sindre Sorhus",
      "description": "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-finally@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-finally.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-finally#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-finally/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2c809bda9f4207b152fb4791d68a969c7869d0596318b64258113d6a2c745327bd5bc2d340fc0c4d8546590588c3d45d4220e0e3e7a95d0383c08609b5225aa3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-finally"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-map-series",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|p-map-series@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Map over promises serially",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-map-series@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-map-series.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-map-series#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-map-series/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-map-series/-/p-map-series-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e24f4b96f63a068ff515c21d577df0a994044b43f2fa2288494f5473ca7c0235a864f9c528ca552150f7b341189f88f32e1d48f967946642746286b841fc372a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-map-series"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-waterfall",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|p-waterfall@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Run promise-returning & async functions in series, each passing its result to the next",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-waterfall@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-waterfall.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-waterfall#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-waterfall/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-waterfall/-/p-waterfall-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "29e5dd748a7a8c14fcab3cb17d018e1b335873fedfb712ad45ce54820aded36caf6d9ad20471363360bce36fd68b3301143e2cd0d830cf74053a2b7603e133ae"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-waterfall"
        }
      ]
    },
    {
      "type": "library",
      "name": "read-package-tree",
      "version": "5.3.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|read-package-tree@5.3.1",
      "author": "Isaac Z. Schlueter",
      "description": "Read the contents of node_modules.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/read-package-tree@5.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/read-package-tree.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/read-package-tree",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/read-package-tree/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/read-package-tree/-/read-package-tree-5.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "98b503b03e4956d959c634a53cfc754444e43638ef418bb078ac0d56dd529fc90fe49878e29bd8b941c2a7ac525436566cdc55c46e65c9927ddb56891fad6c4f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/read-package-tree"
        }
      ]
    },
    {
      "type": "library",
      "name": "collect-updates",
      "group": "@lerna",
      "version": "3.10.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/collect-updates@3.10.1",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/collect-updates@3.10.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/collect-updates/-/collect-updates-3.10.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bdbd30109f24eb71bed8247fb9dd567951cd276d45b3a130ea56dd1995e717866f6855b1589669a07796c338e131d27be50753cd46888531b58671fd7da40d33"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/collect-updates"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "slash",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/collect-updates@3.10.1|slash@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Convert Windows backslash paths to slash paths",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/slash@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/slash.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/slash#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/slash/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/slash/-/slash-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "dd360347bc56b78748a95d896ae26bf8425e5b7e7a4578a31de5253bef1d8c9fae0573e7f3fd9da7305cf32421879f37b15bdcf42bc501e4158228ec1fe3cd36"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/collect-updates/node_modules/slash"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "listable",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/listable@3.10.6",
      "author": "Daniel Stockman",
      "description": "Shared logic for listing package information",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/listable@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna/tree/master/utils/listable#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/listable/-/listable-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "17b66ebdeb1281eb8c8897fdf5e3ae9b9a753101904adca47261c7d5e93e2d044c886185d68dcf901c4fbc74d90400c63856ab7a4f1b140e53566440317ecd23"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/listable"
        }
      ]
    },
    {
      "type": "library",
      "name": "output",
      "group": "@lerna",
      "version": "3.6.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/output@3.6.0",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/output@3.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/output/-/output-3.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f6c8d0a2e7faa7b550b550919f3a131a5672511778f22de16b75811c2fd40499c7645b9732a5953ca36ebe731fda44570f2a100feda6372c29984260e633a746"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/output"
        }
      ]
    },
    {
      "type": "library",
      "name": "prompt",
      "group": "@lerna",
      "version": "3.6.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/prompt@3.6.0",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/prompt@3.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/prompt/-/prompt-3.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9f20233cca2527f65100055c5eb507f3d0b89f54a25af2e1e3158dbd660a2dc7f73c8e7281eb37e6c0c53ff1d8acce3e7046e4345b89091aba0b16844f83d1b2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/prompt"
        }
      ]
    },
    {
      "type": "library",
      "name": "global-options",
      "group": "@lerna",
      "version": "3.10.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/global-options@3.10.6",
      "author": "Daniel Stockman",
      "description": "Global options applicable to _every_ lerna sub-command",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/global-options@3.10.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/global-options/-/global-options-3.10.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9395e4ab533fb911050b647dbb037981cbc88238f888e5e8d18c9e11708c581896de3d862fdc4de1dd4c98021cad8940cd5621ea42e559a15697facd22778723"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/global-options"
        }
      ]
    },
    {
      "type": "library",
      "name": "child-process",
      "group": "@lerna",
      "version": "3.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/child-process@3.3.0",
      "author": "Daniel Stockman",
      "description": "Lerna's internal child_process wrapper",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/child-process@3.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/child-process/-/child-process-3.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ab677f38f94d5ff7015c1e88cf5f77d911733a6387aba6733e3a9e6e420d35a4e88c75aeb91a6f249638533dcd1a9277904b4f0ef05e9a466a5014d23b9c1bd6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/child-process"
        }
      ]
    },
    {
      "type": "library",
      "name": "fs-extra",
      "version": "7.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|fs-extra@7.0.1",
      "author": "JP Richardson",
      "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as mkdir -p, cp -r, and rm -rf.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fs-extra@7.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jprichardson/node-fs-extra.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jprichardson/node-fs-extra",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jprichardson/node-fs-extra/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fs-extra/-/fs-extra-7.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6090da0896449c199c6f0d777ef74033d03034e2703b3ac4e29a8ca81ab99c5884a9752a1f094ae01fb7a54c3a24dbdf48fb57d39c451ed632ff59e2d357860b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fs-extra"
        }
      ]
    },
    {
      "type": "library",
      "name": "globby",
      "version": "8.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|globby@8.0.2",
      "author": "Sindre Sorhus",
      "description": "Extends `glob` with support for multiple patterns and exposes a Promise API",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/globby@8.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/globby.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/globby#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/globby/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/globby/-/globby-8.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c93ccc98aca02e9f115291b5626bb65573d225066334064f0f8cb081811a1bb7b8b4125e51004ef0ea57adfd5108d704b396a5b282583c03222073f4726782ef"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/globby"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "slash",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|globby@8.0.2|slash@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Convert Windows backslash paths to slash paths",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/slash@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/slash.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/slash#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/slash/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/slash/-/slash-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "dd360347bc56b78748a95d896ae26bf8425e5b7e7a4578a31de5253bef1d8c9fae0573e7f3fd9da7305cf32421879f37b15bdcf42bc501e4158228ec1fe3cd36"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/globby/node_modules/slash"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "init-package-json",
      "version": "1.10.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|init-package-json@1.10.3",
      "author": "Isaac Z. Schlueter",
      "description": "A node module to get your node module started",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/init-package-json@1.10.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/init-package-json.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/init-package-json#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/init-package-json/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/init-package-json/-/init-package-json-1.10.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cca4a25ca850bde36d7b285c8f50a838ff2daa9d50bb13c83c197c06277df4318b16a035a7ceccea53607e3247481a162499627463afe6b5a3c9828407783627"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/init-package-json"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|init-package-json@1.10.3|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/init-package-json/node_modules/semver"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "p-reduce",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|p-reduce@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Reduce a list of values using promises into a promise for a value",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-reduce@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-reduce.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-reduce#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-reduce/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-reduce/-/p-reduce-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dd3c754f7a0cd713bf63c1a3d2c5b213bf0420967eb7e68499751dbd082f1a648cae2eda3d31e8a2f6d712b7962a42f98f6d44afad170162d3cca6c02983ae8d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-reduce"
        }
      ]
    },
    {
      "type": "library",
      "name": "pify",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|pify@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Promisify a callback-style function",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pify@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/pify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/pify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/pify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pify/-/pify-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0b716c54d1f5b9d4845f8f20197d717efc1359fb185a3e54fbcfee2b5e411b3206acaa14a60857f21599c1afce1676a406289536606f7a64c947999ccbb88f72"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pify"
        }
      ]
    },
    {
      "type": "library",
      "name": "validate-npm-package-license",
      "version": "3.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|validate-npm-package-license@3.0.4",
      "author": "Kyle E. Mitchell",
      "description": "Give me a string and I'll tell you if it's a valid npm package license string",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/validate-npm-package-license@3.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/kemitchell/validate-npm-package-license.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kemitchell/validate-npm-package-license.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kemitchell/validate-npm-package-license.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0e92a6d948bfc4deff1d0282b69671a11581859f59d24aadca01bc5c280d43c6650e7c6e4265a18f9eba8fc7cde02bb7fc999b86c0e8edf70026ae2cf61dbb13"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/validate-npm-package-license"
        }
      ]
    },
    {
      "type": "library",
      "name": "validate-npm-package-name",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|validate-npm-package-name@3.0.0",
      "author": "zeke",
      "description": "Give me a string and I'll tell you if it's a valid npm package name",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/validate-npm-package-name@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/validate-npm-package-name.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/validate-npm-package-name",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/validate-npm-package-name/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/validate-npm-package-name/-/validate-npm-package-name-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "33ac37ede54230ca2e27d57fb1d3c69c2e47e2e0ebef7ffec5dab41412cedd31455f5fbbc22518e84b37dbc34dfb2e37b6663e76851d37d83d276d6fa81ee22f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/validate-npm-package-name"
        }
      ]
    },
    {
      "type": "library",
      "name": "write-json-file",
      "version": "2.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|write-json-file@2.3.0",
      "author": "Sindre Sorhus",
      "description": "Stringify and write JSON to a file atomically",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/write-json-file@2.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/write-json-file.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/write-json-file#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/write-json-file/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/write-json-file/-/write-json-file-2.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f38f85d22805a7674f0fa5290108ce517dc274a50ea94ce7ea813db0304dcd45c8351e5571e275adab9996da9007f6dc62cc771292b2b380bbfcf8af29402259"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/write-json-file"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "make-dir",
          "version": "1.3.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|write-json-file@2.3.0|make-dir@1.3.0",
          "author": "Sindre Sorhus",
          "description": "Make a directory and its parents if needed - Think `mkdir -p`",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/make-dir@1.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/make-dir.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/make-dir#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/make-dir/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/make-dir/-/make-dir-1.3.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "db0df547b489b6278926742d19ced154bd92b4cdaf19855fa943af503c47e9b0ba6894f13f14c5d069c8802caeeed8e872489458061045bc5aeef2a7df8b39b1"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/write-json-file/node_modules/make-dir"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "check-working-tree",
      "group": "@lerna",
      "version": "3.10.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/check-working-tree@3.10.0",
      "author": "Daniel Stockman",
      "description": "Check git working tree status and error appropriately",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/check-working-tree@3.10.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna/tree/master/utils/check-working-tree#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/check-working-tree/-/check-working-tree-3.10.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "35d20f843804b461df7868c1f45d280283cbcb080ca639c984b2f04cd4247a50c7a36c4d015a46f2457e036509f9c53951709903845917128d9b0f3aacef83af"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/check-working-tree"
        }
      ]
    },
    {
      "type": "library",
      "name": "describe-ref",
      "group": "@lerna",
      "version": "3.10.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/describe-ref@3.10.0",
      "author": "Daniel Stockman",
      "description": "Parse git describe output for lerna-related tags",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/describe-ref@3.10.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna/tree/master/utils/describe-ref#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/describe-ref/-/describe-ref-3.10.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7e8ba1dc5412d3b431249a7f996f0b9069c7d31311033a4195e8ed65a891c1f0e45b691de84b876a3f08ff6fe9db55aca6b72fbaee1daa6ca26b6612d7115bff"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/describe-ref"
        }
      ]
    },
    {
      "type": "library",
      "name": "log-packed",
      "group": "@lerna",
      "version": "3.6.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/log-packed@3.6.0",
      "author": "Daniel Stockman",
      "description": "Log the result of npm pack --json",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/log-packed@3.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna/tree/master/utils/log-packed#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/log-packed/-/log-packed-3.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4ff278d73324ce9581e676e24d14b93e6613167ef89895dee91400daa86474b8b452a9d3a7decfbb1d65a33de3b097f6c89b624149f230cecab8a20081ed1597"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/log-packed"
        }
      ]
    },
    {
      "type": "library",
      "name": "npm-dist-tag",
      "group": "@lerna",
      "version": "3.8.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/npm-dist-tag@3.8.5",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/npm-dist-tag@3.8.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/npm-dist-tag/-/npm-dist-tag-3.8.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "54ee7bc8a4c1e0d0b62d9b93778c342e6951a68166fe07a343582aa8b1b3489b9265a0579a2784945a2fce5db54b4edcaa2cbb14d55dcfbe71eff6ba58267a5c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/npm-dist-tag"
        }
      ]
    },
    {
      "type": "library",
      "name": "npm-publish",
      "group": "@lerna",
      "version": "3.10.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/npm-publish@3.10.7",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/npm-publish@3.10.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/npm-publish/-/npm-publish-3.10.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a14dff43e7870b57d18e1edb93a367e2d443d4e2d1e97655b37bfe51631632b178855495eb5a7170fe6da5e2359f88034234a087bb1e23813329525efd67eb68"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/npm-publish"
        }
      ]
    },
    {
      "type": "library",
      "name": "pack-directory",
      "group": "@lerna",
      "version": "3.10.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/pack-directory@3.10.5",
      "author": "Daniel Stockman",
      "description": "Pack a directory into an npm package tarball",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/pack-directory@3.10.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna/tree/master/utils/pack-directory#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/pack-directory/-/pack-directory-3.10.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5258f6e0bf577608c923106be998d1244a0150b547ddcd7496aba751d5b8d5bb305e1ce18ab46d408c6fd3ee6c86780d8c3c2032625f38172e09528f49ecf8b6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/pack-directory"
        }
      ]
    },
    {
      "type": "library",
      "name": "figgy-pudding",
      "version": "3.5.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
      "author": "Kat Marchán",
      "description": "Delicious, festive, cascading config/opts definitions",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/figgy-pudding@3.5.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/figgy-pudding.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/figgy-pudding#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/figgy-pudding/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/figgy-pudding/-/figgy-pudding-3.5.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d1bb6723f1fc7f6a5abc630df30e349a548a39f4cad925499817c1795223de4370d2cc30833c91ab47794c954ec287459adbe93de58f37f30271fb961741336f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/figgy-pudding"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-pipe",
      "version": "1.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|p-pipe@1.2.0",
      "author": "Sindre Sorhus",
      "description": "Compose promise-returning & async functions into a reusable pipeline",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-pipe@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-pipe.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-pipe#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-pipe/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-pipe/-/p-pipe-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "200f12aa320603c97da8e92c5c9becbe4790f9519bd13033342cef2afcfdc2de7058ba9f59b57a7d7cb8de0a51d8be137bcb0eab74be425f5b88068c28f75bb7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-pipe"
        }
      ]
    },
    {
      "type": "library",
      "name": "npm-run-script",
      "group": "@lerna",
      "version": "3.10.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/npm-run-script@3.10.0",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/npm-run-script@3.10.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/npm-run-script/-/npm-run-script-3.10.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "736d6d0572c5d568dee2dc7f4ddf6328832b959a3ff10422cb269d8dd2a9c32ca8ee8ad232c54d5c6c89c2f6782555437300b718f53a1d0be4b7adefeeb7326b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/npm-run-script"
        }
      ]
    },
    {
      "type": "library",
      "name": "timer",
      "group": "@lerna",
      "version": "3.5.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/timer@3.5.0",
      "author": "Kevin Verdieck",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/timer@3.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/timer/-/timer-3.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4c06fdf61a9037a1372411ad1bd8b264d3ead7f0db9aa80139e36b2ad749b06bc8797fcd18b8140d632b8f6874e15e0efa3a4116649fe8722577ab6b88a9b108"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/timer"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-commits",
      "group": "@lerna",
      "version": "3.10.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/conventional-commits@3.10.8",
      "author": "Daniel Stockman",
      "description": "Lerna's internal interface to conventional-changelog and friends",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/conventional-commits@3.10.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/conventional-commits/-/conventional-commits-3.10.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9233833797fefa7b2f353eb0f733eeccdfad7cd96aed068acf2e8a38c51bf80bc67c8e3e00ac3ccfd521afc006bf2b8583235523af7fbdd15a5eb582e224cab5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/conventional-commits"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/conventional-commits@3.10.8|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@lerna/conventional-commits/node_modules/semver"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "minimatch",
      "version": "3.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|minimatch@3.1.2",
      "author": "Isaac Z. Schlueter",
      "description": "a glob matcher in javascript",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minimatch@3.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/minimatch.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/minimatch#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/minimatch/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "27ba7ade1462023c35343130c355bb8b7efe07222b3963b95d0400cd9dd539c2f43cdc9bc297e657f374e73140cf043d512c84717eaddd43be2b96aa0503881f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minimatch"
        }
      ]
    },
    {
      "type": "library",
      "name": "temp-write",
      "version": "3.4.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|temp-write@3.4.0",
      "author": "Sindre Sorhus",
      "description": "Write string/buffer/stream to a random temp file",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/temp-write@3.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/temp-write.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/temp-write#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/temp-write/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/temp-write/-/temp-write-3.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3fc34ae5a36a7064010b7ee2ffca4bfcaf6d160c75e02176bddc25b83fc103f7465860f84f8139f5313b740c4fc9bdb0bacb6cd8584ca77e848a8a4106c189d9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/temp-write"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "make-dir",
          "version": "1.3.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|temp-write@3.4.0|make-dir@1.3.0",
          "author": "Sindre Sorhus",
          "description": "Make a directory and its parents if needed - Think `mkdir -p`",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/make-dir@1.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/make-dir.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/make-dir#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/make-dir/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/make-dir/-/make-dir-1.3.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "db0df547b489b6278926742d19ced154bd92b4cdaf19855fa943af503c47e9b0ba6894f13f14c5d069c8802caeeed8e872489458061045bc5aeef2a7df8b39b1"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/temp-write/node_modules/make-dir"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "bin-links",
      "version": "1.1.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|bin-links@1.1.8",
      "author": "Mike Sherov",
      "description": "JavaScript package binary linker",
      "licenses": [
        {
          "license": {
            "id": "Artistic-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/bin-links@1.1.8",
      "externalReferences": [
        {
          "url": "git://github.com/npm/bin-links.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/bin-links#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/bin-links/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/bin-links/-/bin-links-1.1.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2a09957f1f90aa082a3fd740de221ce690384f5a841042fe84e84e84d3da526efb393ac9a0e5c4fc2d394892cd25eea6ff6c142bb175b434a8bbb9f94df083cd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/bin-links"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "cmd-shim",
          "version": "3.0.3",
          "bom-ref": "pug@2.0.4-tuxcare.2|bin-links@1.1.8|cmd-shim@3.0.3",
          "description": "Used in npm for command line application support",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cmd-shim@3.0.3",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/cmd-shim.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/cmd-shim#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/cmd-shim/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cmd-shim/-/cmd-shim-3.0.3.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "0ed1a0fb4c621614089ed4814732f67d14019e6b405705c80e8e10ab8e873e939b62abb131a652e2c6fcd94f671fdd6a26b968b02d706bd830af44322ff1f2a4"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/bin-links/node_modules/cmd-shim"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "bluebird",
      "version": "3.7.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
      "author": "Petka Antonov",
      "description": "Full featured Promises/A+ implementation with exceptionally good performance",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/bluebird@3.7.2",
      "externalReferences": [
        {
          "url": "git://github.com/petkaantonov/bluebird.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/petkaantonov/bluebird",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/petkaantonov/bluebird/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/bluebird/-/bluebird-3.7.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5e9363e860d0cdd7d6fabd969e7ef189201ded33378f39311970464ed58ab925efd71515f9acf1026f2375664dd3a413424fb63765c1f6344392f6e6426711b6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/bluebird"
        }
      ]
    },
    {
      "type": "library",
      "name": "find-npm-prefix",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|find-npm-prefix@1.0.2",
      "author": "Rebecca Turner",
      "description": "Find the npm project directory associated with for a given directory",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/find-npm-prefix@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/find-npm-prefix.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/find-npm-prefix#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/find-npm-prefix/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/find-npm-prefix/-/find-npm-prefix-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2847edcc9f87f74c7aa5c2ad7576443ec42c7bcff2fd49efcd12ab392405a6b9eb19a16e27ad9f5643f7e08bb6218b8cbf26ae0b2a0b4cd909660aeb180db090"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/find-npm-prefix"
        }
      ]
    },
    {
      "type": "library",
      "name": "libnpmaccess",
      "version": "3.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|libnpmaccess@3.0.2",
      "author": "Kat Marchán",
      "description": "programmatic library for `npm access` commands",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/libnpmaccess@3.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/libnpmaccess.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://npmjs.com/package/libnpmaccess",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/libnpmaccess/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/libnpmaccess/-/libnpmaccess-3.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d35e75d802bb32a072ac8da67c2ee1e63f0df55e08ecc1c9ba4f5bba8f06bfee508138693a0a6307bb100430e4799a91b5e15bd5033fe9835d1df1bb703bdf01"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/libnpmaccess"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "aproba",
          "version": "2.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmaccess@3.0.2|aproba@2.1.0",
          "author": "Rebecca Turner",
          "description": "A ridiculously light-weight argument validator (now browser friendly)",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/aproba@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/iarna/aproba.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/iarna/aproba",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/iarna/aproba/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/aproba/-/aproba-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b4b204723e46b91d914939f134a7642b4749fc6ac2ecfdfcb149220e60ee1dfb0799b6a04c50310d520196da24957115210fdfd7820bf08309e699fd1decf513"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmaccess/node_modules/aproba"
            }
          ]
        },
        {
          "type": "library",
          "name": "npm-registry-fetch",
          "version": "4.0.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmaccess@3.0.2|npm-registry-fetch@4.0.7",
          "author": "Kat Marchán",
          "description": "Fetch-based http client for use with npm registry APIs",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/npm-registry-fetch@4.0.7",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/registry-fetch.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/registry-fetch#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/registry-fetch/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-4.0.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "727cbdbf4f8caba4e3cfe7b47ab14007e45827f0151b39239c84a2a1ba8ff0e5a3f5cf452e8659bbcfd23d2289584d7b175b64e34d7cc1f8d5f996c86ea0bb7d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmaccess/node_modules/npm-registry-fetch"
            }
          ]
        },
        {
          "type": "library",
          "name": "make-fetch-happen",
          "version": "5.0.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmaccess@3.0.2|make-fetch-happen@5.0.2",
          "author": "Kat Marchán",
          "description": "Opinionated, caching, retrying fetch client",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/make-fetch-happen@5.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/zkat/make-fetch-happen.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zkat/make-fetch-happen#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zkat/make-fetch-happen/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-5.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "d3b2470b4af5ca4228aee28ef227cc5eefb1114f2a3970c5113ca592d76e83abc90c00a73fe1ca7af3aedcf5f234fcc5c934a5cfcbeb0589413b525945ef026a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmaccess/node_modules/make-fetch-happen"
            }
          ]
        },
        {
          "type": "library",
          "name": "cacache",
          "version": "12.0.4",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmaccess@3.0.2|cacache@12.0.4",
          "author": "Kat Marchán",
          "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cacache@12.0.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/cacache.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/cacache#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/cacache/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cacache/-/cacache-12.0.4.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6b4b4c078d2879fbee227af80b06f719eadb2fdc538f50f9ca0d13e71ae31821b27ef6f1b1e2175fb0403bfbbf8485dd69fcce239242df00f01f27f6e1bb8e01"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmaccess/node_modules/cacache"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "libnpmconfig",
      "version": "1.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|libnpmconfig@1.2.1",
      "author": "Kat Marchán",
      "description": "Standalone library for reading/writing/managing npm configurations",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/libnpmconfig@1.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/libnpmconfig.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://npmjs.com/package/libnpmconfig",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/libnpmconfig/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/libnpmconfig/-/libnpmconfig-1.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f5eb17f2b4d0007a9aaf1eaa799aa61902813594793886e5fc0cabd2a403cb7a178dada215541023cd51e866766b4d9b48d67da7760e197d4ee871c26f55fb90"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/libnpmconfig"
        }
      ]
    },
    {
      "type": "library",
      "name": "libnpmhook",
      "version": "5.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|libnpmhook@5.0.3",
      "author": "Kat Marchán",
      "description": "programmatic API for managing npm registry hooks",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/libnpmhook@5.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/libnpmhook.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/libnpmhook#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/libnpmhook/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/libnpmhook/-/libnpmhook-5.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "51d34b32e79f559adaff06e705710264f79f1cc1ac5434eae7368cfcb80a344f4a7b29796174139c6033128fa714ea5d46a4d623d2d88b8029a85f6e5420adb8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/libnpmhook"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "aproba",
          "version": "2.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmhook@5.0.3|aproba@2.1.0",
          "author": "Rebecca Turner",
          "description": "A ridiculously light-weight argument validator (now browser friendly)",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/aproba@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/iarna/aproba.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/iarna/aproba",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/iarna/aproba/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/aproba/-/aproba-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b4b204723e46b91d914939f134a7642b4749fc6ac2ecfdfcb149220e60ee1dfb0799b6a04c50310d520196da24957115210fdfd7820bf08309e699fd1decf513"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmhook/node_modules/aproba"
            }
          ]
        },
        {
          "type": "library",
          "name": "npm-registry-fetch",
          "version": "4.0.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmhook@5.0.3|npm-registry-fetch@4.0.7",
          "author": "Kat Marchán",
          "description": "Fetch-based http client for use with npm registry APIs",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/npm-registry-fetch@4.0.7",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/registry-fetch.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/registry-fetch#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/registry-fetch/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-4.0.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "727cbdbf4f8caba4e3cfe7b47ab14007e45827f0151b39239c84a2a1ba8ff0e5a3f5cf452e8659bbcfd23d2289584d7b175b64e34d7cc1f8d5f996c86ea0bb7d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmhook/node_modules/npm-registry-fetch"
            }
          ]
        },
        {
          "type": "library",
          "name": "make-fetch-happen",
          "version": "5.0.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmhook@5.0.3|make-fetch-happen@5.0.2",
          "author": "Kat Marchán",
          "description": "Opinionated, caching, retrying fetch client",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/make-fetch-happen@5.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/zkat/make-fetch-happen.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zkat/make-fetch-happen#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zkat/make-fetch-happen/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-5.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "d3b2470b4af5ca4228aee28ef227cc5eefb1114f2a3970c5113ca592d76e83abc90c00a73fe1ca7af3aedcf5f234fcc5c934a5cfcbeb0589413b525945ef026a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmhook/node_modules/make-fetch-happen"
            }
          ]
        },
        {
          "type": "library",
          "name": "cacache",
          "version": "12.0.4",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmhook@5.0.3|cacache@12.0.4",
          "author": "Kat Marchán",
          "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cacache@12.0.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/cacache.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/cacache#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/cacache/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cacache/-/cacache-12.0.4.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6b4b4c078d2879fbee227af80b06f719eadb2fdc538f50f9ca0d13e71ae31821b27ef6f1b1e2175fb0403bfbbf8485dd69fcce239242df00f01f27f6e1bb8e01"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmhook/node_modules/cacache"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "libnpmorg",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|libnpmorg@1.0.1",
      "author": "Kat Marchán",
      "description": "Programmatic api for `npm org` commands",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/libnpmorg@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/libnpmorg.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://npmjs.com/package/libnpmorg",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/libnpmorg/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/libnpmorg/-/libnpmorg-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d2c4545cb87e3cb060666011bed8616174005a7d1f3ac6ba4f99772527b69fdbca1bf94254ae27b86ee90ec6bbb8cabeb93b767a974f2be6b683a6ed718d755b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/libnpmorg"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "aproba",
          "version": "2.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmorg@1.0.1|aproba@2.1.0",
          "author": "Rebecca Turner",
          "description": "A ridiculously light-weight argument validator (now browser friendly)",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/aproba@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/iarna/aproba.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/iarna/aproba",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/iarna/aproba/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/aproba/-/aproba-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b4b204723e46b91d914939f134a7642b4749fc6ac2ecfdfcb149220e60ee1dfb0799b6a04c50310d520196da24957115210fdfd7820bf08309e699fd1decf513"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmorg/node_modules/aproba"
            }
          ]
        },
        {
          "type": "library",
          "name": "npm-registry-fetch",
          "version": "4.0.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmorg@1.0.1|npm-registry-fetch@4.0.7",
          "author": "Kat Marchán",
          "description": "Fetch-based http client for use with npm registry APIs",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/npm-registry-fetch@4.0.7",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/registry-fetch.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/registry-fetch#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/registry-fetch/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-4.0.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "727cbdbf4f8caba4e3cfe7b47ab14007e45827f0151b39239c84a2a1ba8ff0e5a3f5cf452e8659bbcfd23d2289584d7b175b64e34d7cc1f8d5f996c86ea0bb7d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmorg/node_modules/npm-registry-fetch"
            }
          ]
        },
        {
          "type": "library",
          "name": "make-fetch-happen",
          "version": "5.0.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmorg@1.0.1|make-fetch-happen@5.0.2",
          "author": "Kat Marchán",
          "description": "Opinionated, caching, retrying fetch client",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/make-fetch-happen@5.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/zkat/make-fetch-happen.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zkat/make-fetch-happen#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zkat/make-fetch-happen/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-5.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "d3b2470b4af5ca4228aee28ef227cc5eefb1114f2a3970c5113ca592d76e83abc90c00a73fe1ca7af3aedcf5f234fcc5c934a5cfcbeb0589413b525945ef026a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmorg/node_modules/make-fetch-happen"
            }
          ]
        },
        {
          "type": "library",
          "name": "cacache",
          "version": "12.0.4",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmorg@1.0.1|cacache@12.0.4",
          "author": "Kat Marchán",
          "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cacache@12.0.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/cacache.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/cacache#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/cacache/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cacache/-/cacache-12.0.4.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6b4b4c078d2879fbee227af80b06f719eadb2fdc538f50f9ca0d13e71ae31821b27ef6f1b1e2175fb0403bfbbf8485dd69fcce239242df00f01f27f6e1bb8e01"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmorg/node_modules/cacache"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "libnpmpublish",
      "version": "1.1.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3",
      "author": "Kat Marchán",
      "description": "Programmatic API for the bits behind npm publish and unpublish",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/libnpmpublish@1.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/libnpmpublish.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://npmjs.com/package/libnpmpublish",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/libnpmpublish/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/libnpmpublish/-/libnpmpublish-1.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ff72ec62a55ce767075c19aedbaf89f0477bb0bb3f86019514c1f59b06292fb41aca76fd45e9e92aa20abb4b09d77d0507d3cc9293255a395bb54f00e26ec243"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/libnpmpublish"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "aproba",
          "version": "2.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3|aproba@2.1.0",
          "author": "Rebecca Turner",
          "description": "A ridiculously light-weight argument validator (now browser friendly)",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/aproba@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/iarna/aproba.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/iarna/aproba",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/iarna/aproba/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/aproba/-/aproba-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b4b204723e46b91d914939f134a7642b4749fc6ac2ecfdfcb149220e60ee1dfb0799b6a04c50310d520196da24957115210fdfd7820bf08309e699fd1decf513"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmpublish/node_modules/aproba"
            }
          ]
        },
        {
          "type": "library",
          "name": "npm-registry-fetch",
          "version": "4.0.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3|npm-registry-fetch@4.0.7",
          "author": "Kat Marchán",
          "description": "Fetch-based http client for use with npm registry APIs",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/npm-registry-fetch@4.0.7",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/registry-fetch.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/registry-fetch#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/registry-fetch/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-4.0.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "727cbdbf4f8caba4e3cfe7b47ab14007e45827f0151b39239c84a2a1ba8ff0e5a3f5cf452e8659bbcfd23d2289584d7b175b64e34d7cc1f8d5f996c86ea0bb7d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmpublish/node_modules/npm-registry-fetch"
            }
          ]
        },
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmpublish/node_modules/semver"
            }
          ]
        },
        {
          "type": "library",
          "name": "make-fetch-happen",
          "version": "5.0.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3|make-fetch-happen@5.0.2",
          "author": "Kat Marchán",
          "description": "Opinionated, caching, retrying fetch client",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/make-fetch-happen@5.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/zkat/make-fetch-happen.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zkat/make-fetch-happen#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zkat/make-fetch-happen/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-5.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "d3b2470b4af5ca4228aee28ef227cc5eefb1114f2a3970c5113ca592d76e83abc90c00a73fe1ca7af3aedcf5f234fcc5c934a5cfcbeb0589413b525945ef026a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmpublish/node_modules/make-fetch-happen"
            }
          ]
        },
        {
          "type": "library",
          "name": "cacache",
          "version": "12.0.4",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3|cacache@12.0.4",
          "author": "Kat Marchán",
          "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cacache@12.0.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/cacache.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/cacache#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/cacache/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cacache/-/cacache-12.0.4.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6b4b4c078d2879fbee227af80b06f719eadb2fdc538f50f9ca0d13e71ae31821b27ef6f1b1e2175fb0403bfbbf8485dd69fcce239242df00f01f27f6e1bb8e01"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmpublish/node_modules/cacache"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "libnpmsearch",
      "version": "2.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|libnpmsearch@2.0.2",
      "author": "Kat Marchán",
      "description": "Programmatic API for searching in npm and compatible registries.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/libnpmsearch@2.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/libnpmsearch.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://npmjs.com/package/libnpmsearch",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/libnpmsearch/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/libnpmsearch/-/libnpmsearch-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "55305b579e50e9f4734ddcf38980abeb8f9ff00a29435619f8174f3afd7a51e80811a13c0b429c874d70a38b379114c557ae0fd76d56649c20981c2babaf3362"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/libnpmsearch"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "npm-registry-fetch",
          "version": "4.0.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmsearch@2.0.2|npm-registry-fetch@4.0.7",
          "author": "Kat Marchán",
          "description": "Fetch-based http client for use with npm registry APIs",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/npm-registry-fetch@4.0.7",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/registry-fetch.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/registry-fetch#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/registry-fetch/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-4.0.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "727cbdbf4f8caba4e3cfe7b47ab14007e45827f0151b39239c84a2a1ba8ff0e5a3f5cf452e8659bbcfd23d2289584d7b175b64e34d7cc1f8d5f996c86ea0bb7d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmsearch/node_modules/npm-registry-fetch"
            }
          ]
        },
        {
          "type": "library",
          "name": "make-fetch-happen",
          "version": "5.0.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmsearch@2.0.2|make-fetch-happen@5.0.2",
          "author": "Kat Marchán",
          "description": "Opinionated, caching, retrying fetch client",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/make-fetch-happen@5.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/zkat/make-fetch-happen.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zkat/make-fetch-happen#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zkat/make-fetch-happen/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-5.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "d3b2470b4af5ca4228aee28ef227cc5eefb1114f2a3970c5113ca592d76e83abc90c00a73fe1ca7af3aedcf5f234fcc5c934a5cfcbeb0589413b525945ef026a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmsearch/node_modules/make-fetch-happen"
            }
          ]
        },
        {
          "type": "library",
          "name": "cacache",
          "version": "12.0.4",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmsearch@2.0.2|cacache@12.0.4",
          "author": "Kat Marchán",
          "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cacache@12.0.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/cacache.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/cacache#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/cacache/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cacache/-/cacache-12.0.4.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6b4b4c078d2879fbee227af80b06f719eadb2fdc538f50f9ca0d13e71ae31821b27ef6f1b1e2175fb0403bfbbf8485dd69fcce239242df00f01f27f6e1bb8e01"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmsearch/node_modules/cacache"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "libnpmteam",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|libnpmteam@1.0.2",
      "author": "Kat Marchán",
      "description": "npm Team management APIs",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/libnpmteam@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/libnpmteam.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://npmjs.com/package/libnpmteam",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/libnpmteam/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/libnpmteam/-/libnpmteam-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a78db4bccdbc52cd38340720d6bce0196eb72cc33aaf07beeabb59a5f0f109c5f1334cd44cb97b9cf1449d117725f141179b2417fcae64352d853b0781d7bc40"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/libnpmteam"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "aproba",
          "version": "2.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmteam@1.0.2|aproba@2.1.0",
          "author": "Rebecca Turner",
          "description": "A ridiculously light-weight argument validator (now browser friendly)",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/aproba@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/iarna/aproba.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/iarna/aproba",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/iarna/aproba/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/aproba/-/aproba-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b4b204723e46b91d914939f134a7642b4749fc6ac2ecfdfcb149220e60ee1dfb0799b6a04c50310d520196da24957115210fdfd7820bf08309e699fd1decf513"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmteam/node_modules/aproba"
            }
          ]
        },
        {
          "type": "library",
          "name": "npm-registry-fetch",
          "version": "4.0.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmteam@1.0.2|npm-registry-fetch@4.0.7",
          "author": "Kat Marchán",
          "description": "Fetch-based http client for use with npm registry APIs",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/npm-registry-fetch@4.0.7",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/registry-fetch.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/registry-fetch#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/registry-fetch/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-4.0.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "727cbdbf4f8caba4e3cfe7b47ab14007e45827f0151b39239c84a2a1ba8ff0e5a3f5cf452e8659bbcfd23d2289584d7b175b64e34d7cc1f8d5f996c86ea0bb7d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmteam/node_modules/npm-registry-fetch"
            }
          ]
        },
        {
          "type": "library",
          "name": "make-fetch-happen",
          "version": "5.0.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmteam@1.0.2|make-fetch-happen@5.0.2",
          "author": "Kat Marchán",
          "description": "Opinionated, caching, retrying fetch client",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/make-fetch-happen@5.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/zkat/make-fetch-happen.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zkat/make-fetch-happen#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zkat/make-fetch-happen/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-5.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "d3b2470b4af5ca4228aee28ef227cc5eefb1114f2a3970c5113ca592d76e83abc90c00a73fe1ca7af3aedcf5f234fcc5c934a5cfcbeb0589413b525945ef026a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmteam/node_modules/make-fetch-happen"
            }
          ]
        },
        {
          "type": "library",
          "name": "cacache",
          "version": "12.0.4",
          "bom-ref": "pug@2.0.4-tuxcare.2|libnpmteam@1.0.2|cacache@12.0.4",
          "author": "Kat Marchán",
          "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cacache@12.0.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/cacache.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/cacache#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/cacache/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cacache/-/cacache-12.0.4.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6b4b4c078d2879fbee227af80b06f719eadb2fdc538f50f9ca0d13e71ae31821b27ef6f1b1e2175fb0403bfbbf8485dd69fcce239242df00f01f27f6e1bb8e01"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/libnpmteam/node_modules/cacache"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "lock-verify",
      "version": "2.2.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|lock-verify@2.2.2",
      "author": "Rebecca Turner",
      "description": "Report if your package.json is out of sync with your package-lock.json.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lock-verify@2.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/lock-verify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/lock-verify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/lock-verify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lock-verify/-/lock-verify-2.2.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d8250db6bd594952891dc60ff2e13369f9a6bb26ae081e736629a3f13bd077f2df96df645d566cfbc4be11b03364b6955039fc0981a6782dc31467587e70b379"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lock-verify"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|lock-verify@2.2.2|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/lock-verify/node_modules/semver"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "npm-lifecycle",
      "version": "2.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|npm-lifecycle@2.1.1",
      "author": "Mike Sherov",
      "description": "JavaScript package lifecycle hook runner",
      "licenses": [
        {
          "license": {
            "id": "Artistic-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/npm-lifecycle@2.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/npm/lifecycle.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/lifecycle#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/lifecycle/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/npm-lifecycle/-/npm-lifecycle-2.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f9583a23ad19ef957fd3da5d707e62528ffdf50fefa29df93da23df5e96fc64e7a6b349556c76c4ac4bfb17a8a0cdc1b45134dd6a4b191c3b8e593aed323967b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/npm-lifecycle"
        }
      ]
    },
    {
      "type": "library",
      "name": "npm-logical-tree",
      "version": "1.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|npm-logical-tree@1.2.1",
      "author": "Kat Marchán",
      "description": "Calculate 'logical' trees from a package.json + package-lock",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/npm-logical-tree@1.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/logical-tree.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/logical-tree#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/logical-tree/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/npm-logical-tree/-/npm-logical-tree-1.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "00923fab10c1d8f588e0b1b5098379efd018d6f0a237259f922aae0ac256aa7b51bbf5b08a656b0bcc977882c11470f0c5f39e8f17b09669ef5bd5d78cc95822"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/npm-logical-tree"
        }
      ]
    },
    {
      "type": "library",
      "name": "npm-package-arg",
      "version": "6.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
      "author": "Isaac Z. Schlueter",
      "description": "Parse the things that can be arguments to `npm install`",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/npm-package-arg@6.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-package-arg.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/npm-package-arg",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/npm-package-arg/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/npm-package-arg/-/npm-package-arg-6.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a81a6cb1a2f720e6568b9bc4294296d1c3bb9332de4fe1103bd5bc46c2ce65fefa285f44fcaf7ec07d02eedd3a1d73e9687f161f9c45d4c1312ee0b06d3a9152"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/npm-package-arg"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/npm-package-arg/node_modules/semver"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "npm-profile",
      "version": "4.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|npm-profile@4.0.4",
      "author": "Rebecca Turner",
      "description": "Library for updating an npmjs.com profile",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/npm-profile@4.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-profile.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/npm-profile/tree/latest/lib#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/npm-profile/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/npm-profile/-/npm-profile-4.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4daf31abc4cb329aacb05d07eb40574b503dd2232833a19e2b0b26adabc9eb06235b04b371805377259adc364262a3eeb5a7013049bb73188e92221e0940070d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/npm-profile"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "npm-registry-fetch",
          "version": "4.0.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|npm-profile@4.0.4|npm-registry-fetch@4.0.7",
          "author": "Kat Marchán",
          "description": "Fetch-based http client for use with npm registry APIs",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/npm-registry-fetch@4.0.7",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/registry-fetch.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/registry-fetch#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/registry-fetch/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-4.0.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "727cbdbf4f8caba4e3cfe7b47ab14007e45827f0151b39239c84a2a1ba8ff0e5a3f5cf452e8659bbcfd23d2289584d7b175b64e34d7cc1f8d5f996c86ea0bb7d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/npm-profile/node_modules/npm-registry-fetch"
            }
          ]
        },
        {
          "type": "library",
          "name": "make-fetch-happen",
          "version": "5.0.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|npm-profile@4.0.4|make-fetch-happen@5.0.2",
          "author": "Kat Marchán",
          "description": "Opinionated, caching, retrying fetch client",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/make-fetch-happen@5.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/zkat/make-fetch-happen.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zkat/make-fetch-happen#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zkat/make-fetch-happen/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-5.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "d3b2470b4af5ca4228aee28ef227cc5eefb1114f2a3970c5113ca592d76e83abc90c00a73fe1ca7af3aedcf5f234fcc5c934a5cfcbeb0589413b525945ef026a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/npm-profile/node_modules/make-fetch-happen"
            }
          ]
        },
        {
          "type": "library",
          "name": "cacache",
          "version": "12.0.4",
          "bom-ref": "pug@2.0.4-tuxcare.2|npm-profile@4.0.4|cacache@12.0.4",
          "author": "Kat Marchán",
          "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cacache@12.0.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/cacache.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/cacache#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/cacache/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cacache/-/cacache-12.0.4.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6b4b4c078d2879fbee227af80b06f719eadb2fdc538f50f9ca0d13e71ae31821b27ef6f1b1e2175fb0403bfbbf8485dd69fcce239242df00f01f27f6e1bb8e01"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/npm-profile/node_modules/cacache"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "npm-registry-fetch",
      "version": "3.9.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|npm-registry-fetch@3.9.1",
      "author": "Kat Marchán",
      "description": "Fetch-based http client for use with npm registry APIs",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/npm-registry-fetch@3.9.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/registry-fetch.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/registry-fetch#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/registry-fetch/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-3.9.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "550084665c9d5f0e00c0b44e01759447b4037ded98f0877fbe9020a7a4c8d7f1fbf1ae12890d6442b29900b9b9ff3c4ce67e07222f9a61bfa2754015fd1b98d1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/npm-registry-fetch"
        }
      ]
    },
    {
      "type": "library",
      "name": "npmlog",
      "version": "4.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|npmlog@4.1.2",
      "author": "Isaac Z. Schlueter",
      "description": "logger for npm",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/npmlog@4.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npmlog.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/npmlog#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/npmlog/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/npmlog/-/npmlog-4.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dae52a6b3b8a95369223f742f00ce2714724efe22b11a3a737f7b48dddd7b6dd4a706a70c77d2fe7498bee83f2aff87d6cbdc4e1a65c715c29c0ffb95bd56392"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/npmlog"
        }
      ]
    },
    {
      "type": "library",
      "name": "pacote",
      "version": "9.5.12",
      "bom-ref": "pug@2.0.4-tuxcare.2|pacote@9.5.12",
      "author": "Kat Marchán",
      "description": "JavaScript package downloader",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pacote@9.5.12",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/pacote.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/pacote#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/pacote/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pacote/-/pacote-9.5.12.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "054223ff890a6f05a0e11b670677173c9775e698854953694f3634af2b12af7567328c1362090629c687adb45e7a90248d3afc947d82556462e7c4a98360a271"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pacote"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "cacache",
          "version": "12.0.4",
          "bom-ref": "pug@2.0.4-tuxcare.2|pacote@9.5.12|cacache@12.0.4",
          "author": "Kat Marchán",
          "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cacache@12.0.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/cacache.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/cacache#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/cacache/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cacache/-/cacache-12.0.4.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6b4b4c078d2879fbee227af80b06f719eadb2fdc538f50f9ca0d13e71ae31821b27ef6f1b1e2175fb0403bfbbf8485dd69fcce239242df00f01f27f6e1bb8e01"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/pacote/node_modules/cacache"
            }
          ]
        },
        {
          "type": "library",
          "name": "make-fetch-happen",
          "version": "5.0.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|pacote@9.5.12|make-fetch-happen@5.0.2",
          "author": "Kat Marchán",
          "description": "Opinionated, caching, retrying fetch client",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/make-fetch-happen@5.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/zkat/make-fetch-happen.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zkat/make-fetch-happen#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zkat/make-fetch-happen/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-5.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "d3b2470b4af5ca4228aee28ef227cc5eefb1114f2a3970c5113ca592d76e83abc90c00a73fe1ca7af3aedcf5f234fcc5c934a5cfcbeb0589413b525945ef026a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/pacote/node_modules/make-fetch-happen"
            }
          ]
        },
        {
          "type": "library",
          "name": "npm-registry-fetch",
          "version": "4.0.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|pacote@9.5.12|npm-registry-fetch@4.0.7",
          "author": "Kat Marchán",
          "description": "Fetch-based http client for use with npm registry APIs",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/npm-registry-fetch@4.0.7",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/registry-fetch.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/registry-fetch#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/registry-fetch/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/npm-registry-fetch/-/npm-registry-fetch-4.0.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "727cbdbf4f8caba4e3cfe7b47ab14007e45827f0151b39239c84a2a1ba8ff0e5a3f5cf452e8659bbcfd23d2289584d7b175b64e34d7cc1f8d5f996c86ea0bb7d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/pacote/node_modules/npm-registry-fetch"
            }
          ]
        },
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|pacote@9.5.12|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/pacote/node_modules/semver"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "read-package-json",
      "version": "2.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|read-package-json@2.1.2",
      "author": "Isaac Z. Schlueter",
      "description": "The thing npm uses to read package.json files with semantics and defaults and validation",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/read-package-json@2.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/read-package-json.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/read-package-json#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/read-package-json/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/read-package-json/-/read-package-json-2.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0f52a6b8b42be994894b4b56f217f7586a51970b3324e5d9dc4f1877f0cd45a33977ed7055165d1e5a4604b02ea2f8ebdbc2db5af8e95a4047331a511868f334"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/read-package-json"
        }
      ]
    },
    {
      "type": "library",
      "name": "stringify-package",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|stringify-package@1.0.1",
      "author": "Kat Marchán",
      "description": "stringifies npm-written json files",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stringify-package@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/stringify-package.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/stringify-package",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/stringify-package/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stringify-package/-/stringify-package-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b1ae03510b1872230fd7184a586b85334e1f0742c6ffd0e596e668495cb050c44dbf389de97b9c1cad3ff74c46c51a07ac06913ab7072b568f29a8a30ad4ab86"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stringify-package"
        }
      ]
    },
    {
      "type": "library",
      "name": "babel-types",
      "group": "@types",
      "version": "7.0.16",
      "bom-ref": "pug@2.0.4-tuxcare.2|@types/babel-types@7.0.16",
      "description": "TypeScript definitions for babel-types",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40types/babel-types@7.0.16",
      "externalReferences": [
        {
          "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/babel-types",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/babel-types",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@types/babel-types/-/babel-types-7.0.16.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e505ecf460454cd4e68a52e5581867b29aeaa637eba2dcab9f351dc03af2c042ff0c0e0bb825904f7d3405339703763d9e04fd176baf982a08c48eb3f0394910"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@types/babel-types"
        }
      ]
    },
    {
      "type": "library",
      "name": "babylon",
      "group": "@types",
      "version": "6.16.9",
      "bom-ref": "pug@2.0.4-tuxcare.2|@types/babylon@6.16.9",
      "description": "TypeScript definitions for babylon",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40types/babylon@6.16.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/babylon",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/babylon",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@types/babylon/-/babylon-6.16.9.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b042b2c4c544a3085cafc58b7cdd232587b8812e19f4a0b60c6cf4bea7c2efe31715b9af385ee34a300b0bbeed86f00ed932e01543daf6f0de39a93e01c52b64"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@types/babylon"
        }
      ]
    },
    {
      "type": "library",
      "name": "babel-types",
      "version": "6.26.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|babel-types@6.26.0",
      "author": "Sebastian McKenzie",
      "description": "Babel Types is a Lodash-esque utility library for AST nodes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/babel-types@6.26.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://babeljs.io/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/babel-types/-/babel-types-6.26.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ce17b757fdbaac25ac1192bc91937e1da423e724350a295339b8b1173296d545a3a86efad7c4f0cfa604b029e37e0e6005c261d360eba42912f61f7c66a0d8fa"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/babel-types"
        }
      ]
    },
    {
      "type": "library",
      "name": "babylon",
      "version": "6.18.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|babylon@6.18.0",
      "author": "Sebastian McKenzie",
      "description": "A JavaScript parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/babylon@6.18.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babylon.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://babeljs.io/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babylon/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/babylon/-/babylon-6.18.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "abf5048df189d829b7a0a57bd43273f5ddb94cf9eae6b84154bd90e1f039c1c0b78dcadd9fbf92b2c1326c5231c00bef3fe602b0260d2ae821a05df71b183271"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/babylon"
        }
      ]
    },
    {
      "type": "library",
      "name": "source-map",
      "version": "0.6.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|source-map@0.6.1",
      "author": "Nick Fitzgerald",
      "description": "Generates and consumes source maps",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/mozilla/source-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mozilla/source-map",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mozilla/source-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/source-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-promise",
      "version": "2.2.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-promise@2.2.2",
      "author": "ForbesLindesay",
      "description": "Test whether an object looks like a promises-a+ promise",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-promise@2.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/then/is-promise.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/then/is-promise#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/then/is-promise/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-promise/-/is-promise-2.2.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fa53f8ffa94a5017d08d9da97714e166f2d401a7e665bf0e03115bf175ed890992df920d82bf3985d386a04b35db87b3d450a7649b7a8dabbf4fe6a5879f1015"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-promise"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-regex",
      "version": "1.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-regex@1.2.1",
      "author": "Jordan Harband",
      "description": "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-regex@1.2.1",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-regex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-regex",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-regex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-regex/-/is-regex-1.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "32362c2873b93bb982b26446c5670b5a1785a8df4327fd939a782f8ca5e285ee9e7d588fa9cdbbe3e171ff87d88ffaf4dfe112bc17535cad15ead037ae07b3d6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-regex"
        }
      ]
    },
    {
      "type": "library",
      "name": "fs.realpath",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|fs.realpath@1.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/fs.realpath.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/fs.realpath#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/fs.realpath/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fs.realpath"
        }
      ]
    },
    {
      "type": "library",
      "name": "inflight",
      "version": "1.0.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|inflight@1.0.6",
      "author": "Isaac Z. Schlueter",
      "description": "Add callbacks to requests in flight to avoid async duplication",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/inflight.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/inflight",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/inflight/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/inflight"
        }
      ]
    },
    {
      "type": "library",
      "name": "inherits",
      "version": "2.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|inherits@2.0.4",
      "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/inherits.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/inherits#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/inherits/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/inherits"
        }
      ]
    },
    {
      "type": "library",
      "name": "once",
      "version": "1.4.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|once@1.4.0",
      "author": "Isaac Z. Schlueter",
      "description": "Run a function exactly one time",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/once.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/once#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/once/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/once"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|path-is-absolute@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Node.js 0.12 path.isAbsolute() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/path-is-absolute.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/path-is-absolute#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/path-is-absolute/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-is-absolute"
        }
      ]
    },
    {
      "type": "library",
      "name": "decamelize",
      "version": "1.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|decamelize@1.2.0",
      "author": "Sindre Sorhus",
      "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/decamelize@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/decamelize.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/decamelize#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/decamelize/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cf64be5bd5fbde10145248be37ef596b694196e9fcf738a03b21abb1ac7e29443ac0a5b86685a91180641a1423c008e30c2916c6163454a12193cc3363b17970"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/decamelize"
        }
      ]
    },
    {
      "type": "library",
      "name": "window-size",
      "version": "0.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|window-size@0.1.0",
      "author": "Jon Schlinkert",
      "description": "Reliable way to to get the height and width of the terminal/console in a node.js environment.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/jonschlinkert/window-size/blob/master/LICENSE-MIT"
          }
        }
      ],
      "purl": "pkg:npm/window-size@0.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/window-size.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/window-size",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/window-size/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d694cf40329375deb5a3394a18d0a384d45df8a3e680b4866b79994c7a0e962686704483f06d4f5e187b7357e088f8d56cd55f832d856b0e0123cfe6d1c0bc32"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/window-size"
        }
      ]
    },
    {
      "type": "library",
      "name": "sprintf-js",
      "version": "1.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|sprintf-js@1.0.3",
      "author": "Alexandru Marasteanu",
      "description": "JavaScript sprintf implementation",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/alexei/sprintf.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/alexei/sprintf.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/alexei/sprintf.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0fd70f824bcb955deddc8ccbd03d182ef180f40864e0f72f57051b3747521abd5a3f436bb780049d351bb86beab840b4980eb81aab757f38ab951b3989b5f1f2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/sprintf-js"
        }
      ]
    },
    {
      "type": "library",
      "name": "delayed-stream",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|delayed-stream@1.0.0",
      "author": "Felix Geisendörfer",
      "description": "Buffers events from a stream until you are ready to handle them.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/delayed-stream@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/felixge/node-delayed-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/felixge/node-delayed-stream",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/felixge/node-delayed-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "672483ecd7fdd5a2c1d11c4be0a1ab28705797b11db350c098475ca156b05e72c3ed20e1a4d82db88236680920edaed04b8d63c4f499d7ba7855d1a730793731"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/delayed-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "asynckit",
      "version": "0.4.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|asynckit@0.4.0",
      "author": "Alex Indigo",
      "description": "Minimal async jobs utility library, with streams support",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/asynckit@0.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/alexindigo/asynckit.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/alexindigo/asynckit#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/alexindigo/asynckit/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "39e8bd387e2d461d18a94dc6c615fbf5d33f9b0560bdb64969235a464f9bb21923d12e5c7c772061a92b7818eb1f06ad5ca6f3f88a087582f1aca8a6d8c8d6d1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/asynckit"
        }
      ]
    },
    {
      "type": "library",
      "name": "ajv",
      "version": "6.12.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|ajv@6.12.6",
      "author": "Evgeny Poberezkin",
      "description": "Another JSON Schema Validator",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ajv@6.12.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/ajv-validator/ajv.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ajv-validator/ajv",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ajv-validator/ajv/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ajv/-/ajv-6.12.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8f77d52e0bd3a39dbb6a7c98c893864d825b1bebe79d062f1349b99a691cd532be9f1029a6408b3082f4699e1d6e55423681928619be933138654ca4068320e2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ajv"
        }
      ]
    },
    {
      "type": "library",
      "name": "har-schema",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|har-schema@2.0.0",
      "author": "Ahmad Nassri",
      "description": "JSON Schema for HTTP Archive (HAR)",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/har-schema@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ahmadnassri/har-schema.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ahmadnassri/har-schema",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ahmadnassri/har-schema/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/har-schema/-/har-schema-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3aa96ecface1197f1cc9169342514c3f0f346d22551b6c7f7056fc64f85420b1a01e46bd4aca24082390829bde78f7abaa27593ab4f5e22a6a7c96fb20b716e5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/har-schema"
        }
      ]
    },
    {
      "type": "library",
      "name": "assert-plus",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|assert-plus@1.0.0",
      "author": "Mark Cavage",
      "description": "Extra assertions on top of node's assert module",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/assert-plus@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mcavage/node-assert-plus.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mcavage/node-assert-plus#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mcavage/node-assert-plus/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "35f27853304271018b0e542aee71f11feb6fde4c99d211d0a85e413ba27bb4d25e3f9768d6594fafc759f331e89df840bb43c701d3244a8fbca34c3183d9595b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/assert-plus"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsprim",
      "version": "1.4.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|jsprim@1.4.2",
      "description": "utilities for primitive JavaScript types",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsprim@1.4.2",
      "externalReferences": [
        {
          "url": "git://github.com/joyent/node-jsprim.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/joyent/node-jsprim#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/joyent/node-jsprim/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3f66d238c01cfdc88bcfa0f38235651893fdf81ac95aee540c62bbd02da2c1e0b940121e15fd195d1bc68c48f6b9882b63632400086c4961c35a516d12ba195b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsprim"
        }
      ]
    },
    {
      "type": "library",
      "name": "sshpk",
      "version": "1.18.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|sshpk@1.18.0",
      "author": "Joyent, Inc",
      "description": "A library for finding and using SSH public keys",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/sshpk@1.18.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/joyent/node-sshpk.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/arekinath/node-sshpk#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/arekinath/node-sshpk/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/sshpk/-/sshpk-1.18.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "da9d8a2594d2a90fc8dfe1d7e3612960e6b69777fc12bbfc3162accb623db9fe3003bc852245d17df61db31f3acbacf8bc7b55f2eee0fa93e5afcff8a2e031b1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/sshpk"
        }
      ]
    },
    {
      "type": "library",
      "name": "mime-db",
      "version": "1.52.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|mime-db@1.52.0",
      "description": "Media Type Database",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mime-db@1.52.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/mime-db.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/mime-db#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/mime-db/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b0f538b95edd625bed589c70c311c3d0fba285536213b4f201b439496c43081f66518bce82ba103b061040e28f27c0886c4fb51135653a82b5502da7537818be"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mime-db"
        }
      ]
    },
    {
      "type": "library",
      "name": "psl",
      "version": "1.15.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|psl@1.15.0",
      "author": "Lupo Montero",
      "description": "Domain name parser based on the Public Suffix List",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/psl@1.15.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/lupomontero/psl.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lupomontero/psl#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lupomontero/psl/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/psl/-/psl-1.15.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "25977780c5410154244ace8774d668f52768d0b35c41e30d3f70a8cc125bdc9602fd05186539cac4ff9ff285915f8ac73f912ead6c6a0074d2c140a394d29ad7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/psl"
        }
      ]
    },
    {
      "type": "library",
      "name": "punycode",
      "version": "2.3.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|punycode@2.3.1",
      "author": "Mathias Bynens",
      "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/punycode@2.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/mathiasbynens/punycode.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://mths.be/punycode",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mathiasbynens/punycode.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/punycode/-/punycode-2.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bd8b7b503d54f5683ad77f2c84bb4b3af740bbef03b02fe2945b44547707fb0c9d712a4d136d007d239db9fe8c91115a84be4563b5f5a14ee7295645b5fabc16"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/punycode"
        }
      ]
    },
    {
      "type": "library",
      "name": "find-up",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|find-up@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Find a file or directory by walking up parent directories",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/find-up@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/find-up.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/find-up#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/find-up/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/find-up/-/find-up-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d720fa4662c8d5705fc6e82f391c25724e9fef9b582fe891d23ab0b0eacec4c672198a94b83849d25e005dd3b5897fc54ecf5c040304935816484c759126f296"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/find-up"
        }
      ]
    },
    {
      "type": "library",
      "name": "console",
      "group": "@jest",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@jest/console@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jest/console@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-console",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jest/console/-/console-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "66e8fa6fc4e72978b7ab8ca669cf0441f73779afee84b782193845a97782f07f7fada687f0044f51374877e5f219dd37678227d3f5630f639815c045d3d7cd2d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jest/console"
        }
      ]
    },
    {
      "type": "library",
      "name": "reporters",
      "group": "@jest",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@jest/reporters@24.9.0",
      "description": "Jest's reporters",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jest/reporters@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-reporters",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://jestjs.io/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jest/reporters/-/reporters-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9aee17d328da1eb7df3ac5a654bce2b4a9a6996490dc61ae79f80db1c51258d89435c10e484424f64de911128441505bd029e7f3cf9411222c644307de8f3c1b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jest/reporters"
        }
      ]
    },
    {
      "type": "library",
      "name": "transform",
      "group": "@jest",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@jest/transform@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jest/transform@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-transform",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jest/transform/-/transform-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4dc4149b2351c55f784b442930e9d9974fbee91322aa96c7fd931c70507f6a692ee94c2fc9bd5c8d85fbc64a799c63646d7e103c7fc5701eaad470531f29cb99"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jest/transform"
        }
      ]
    },
    {
      "type": "library",
      "name": "ansi-escapes",
      "version": "3.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|ansi-escapes@3.2.0",
      "author": "Sindre Sorhus",
      "description": "ANSI escape codes for manipulating the terminal",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ansi-escapes@3.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/ansi-escapes.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/ansi-escapes#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/ansi-escapes/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-3.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "701869adee266be5344f5a0ce5f5e0ec3cb5270ef3cf0bfb96dfc6a02a6bfa10d02686272953cb2f8742bd210532642eace42f4abc13ed22ff0c0961048f7b45"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ansi-escapes"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-changed-files",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-changed-files@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-changed-files@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-changed-files",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-changed-files/-/jest-changed-files-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e9a4d6a5eda61c5d0384bdbc5a37643bc2f21a3b37cc8b4f113e1b31279753a4f7b9be053ccc3e99c39c6dd19740e01f98b731a1f0f6dffe4197d678024170aa"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-changed-files"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-haste-map",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-haste-map@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-haste-map@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-haste-map",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-haste-map/-/jest-haste-map-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "91f5459acb96ba2d928f5469d402780fd1ea270138bb04e54bfbcef9e45468c99de78045a658b65e13109cf0b69387071556c1d90d82fa3b48d4018b8049c28d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-haste-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-message-util",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-message-util@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-message-util@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-message-util",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-message-util/-/jest-message-util-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a028fc1626775348533f8692ba2f3b3f82f88c2dfb06d43050caa4fb393f6f5d45475f41243799b1902f207bad5a79adc3bafce54991dc21166741d653698097"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-message-util"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-regex-util",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-regex-util@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-regex-util@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-regex-util",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-regex-util/-/jest-regex-util-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d390a66fa0aec5a03e62ce9f8ebdcf86f5776c64263beda9d8b6b88456d4f96e6e39ce3bf5fec574b5d4597c38a5830086149922e287c125d2bba0ac48101740"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-regex-util"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-resolve-dependencies",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-resolve-dependencies@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-resolve-dependencies@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-resolve-dependencies",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-resolve-dependencies/-/jest-resolve-dependencies-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "166edbe809569d8853d015f2e215e969cb4722a111edeacd808b08a330d75a5e5d566fa4f1774655ed684e0d49c9a1673b16ab3046dac77c32449a863f63eafa"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-resolve-dependencies"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-resolve",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-resolve@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-resolve@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-resolve",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-resolve/-/jest-resolve-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4da2de2d52f5974f1815902ddf368fb63895bf2cb8a1203a0917bed0014f3d55f743f548d20888596a00be84b92fdeaf8fd0eac63e1f079a76aab1c299353f31"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-resolve"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-runner",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-runner@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-runner@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-runner",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-runner/-/jest-runner-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2a4b09432237ff49a171fb299f1c44381b9e1ab779138bd5ec00d02d3f4449a0b3cf4d969db75b29621fe4c91ab9ca1a8fba1b41c9183d55fa24986051ca165a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-runner"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-runtime",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-runtime@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-runtime@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-runtime",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-runtime/-/jest-runtime-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f2836a827985defd89e8f55133625fba3f285f7b322a66b29e50cc30a4388b2cdb433206ead879b9bfe53366c23139a84ca337ca4714608d8fc3dc7036d8cc9f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-runtime"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-snapshot",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-snapshot@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-snapshot@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-snapshot",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-snapshot/-/jest-snapshot-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b88febb33192b3bdf108cd25faea7b3bb6b8d28f74727ae4e36f4b3a22b769e4ef7c2d071e695d6ddf35fc1ec8c7cd4a4857b597091b97b1a70461b851fb837b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-snapshot"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-watcher",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-watcher@24.9.0",
      "description": "Delightful JavaScript Testing.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-watcher@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-watcher",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://jestjs.io/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-watcher/-/jest-watcher-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fbf7cb39f28f5d76090d8964b3adbfe11e06a13f86535b5865e77df494823ac9b392417bef6ed1a8aae3340c6d7cee18a46bf5d70c9b811bc28d1ef794ad8667"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-watcher"
        }
      ]
    },
    {
      "type": "library",
      "name": "micromatch",
      "version": "3.1.10",
      "bom-ref": "pug@2.0.4-tuxcare.2|micromatch@3.1.10",
      "author": "Jon Schlinkert",
      "description": "Glob matching for javascript/node.js. A drop-in replacement and faster alternative to minimatch and multimatch.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/micromatch@3.1.10",
      "externalReferences": [
        {
          "url": "git+https://github.com/micromatch/micromatch.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/micromatch/micromatch",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/micromatch/micromatch/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/micromatch/-/micromatch-3.1.10.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3168a4825f67f4cdf0f9ba6c6371def0bfb0f5e17ddf7f31465f0800ee6f8838b3c12cf3885132533a36c6bae5a01eb80036d37fcb80f2f46aaadb434ce99c72"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/micromatch"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-each-series",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|p-each-series@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Iterate over promises serially",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-each-series@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-each-series.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-each-series#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-each-series/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-each-series/-/p-each-series-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "27f7bdc6265940daedfbde7c145cc9f9ab88b6c046abe52b43b9c4f3d0143fb50e4ed8c79e421200d5cb75aca1573879dfc5272cc09295fd779457d120029038"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-each-series"
        }
      ]
    },
    {
      "type": "library",
      "name": "slash",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|slash@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Convert Windows backslash paths to slash paths",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/slash@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/slash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/slash#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/slash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/slash/-/slash-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6582a1dd6876cf53e91175abd0ca52059d15ea66470107d87afb6d3b5d5ce7509a5a319369a762299fb056dd4f6cc943579aa1305b25a5909e9a1c0e2bb0bcf4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/slash"
        }
      ]
    },
    {
      "type": "library",
      "name": "strip-ansi",
      "version": "5.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|strip-ansi@5.2.0",
      "author": "Sindre Sorhus",
      "description": "Strip ANSI escape codes from a string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@5.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/strip-ansi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/strip-ansi#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/strip-ansi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-5.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0ee46cd6029b06ab0c288665adf7f096e83c30791c9e98ece553e62f53c087e980df45340d3a2d7c3674776514b17a4f98f98c309e96efbdcc680dc9fa56e258"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/strip-ansi"
        }
      ]
    },
    {
      "type": "library",
      "name": "istanbul-lib-coverage",
      "group": "@types",
      "version": "2.0.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|@types/istanbul-lib-coverage@2.0.6",
      "description": "TypeScript definitions for istanbul-lib-coverage",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40types/istanbul-lib-coverage@2.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/istanbul-lib-coverage",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/istanbul-lib-coverage",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d9017fb7f6ae5a6d25b32f17b4a54f1b5f6fdec48e42525efd81d981f8dbfca0411ce19257e276abf4baef5adcabdb9306b2c05e6669a8989a41b313fb3354d7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@types/istanbul-lib-coverage"
        }
      ]
    },
    {
      "type": "library",
      "name": "istanbul-reports",
      "group": "@types",
      "version": "1.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|@types/istanbul-reports@1.1.2",
      "description": "TypeScript definitions for istanbul-reports",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40types/istanbul-reports@1.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/istanbul-reports",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@types/istanbul-reports/-/istanbul-reports-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3ff5bdc8e5ffde83d94a96983824331aa8024115e7d0514efd5f1b5ab090b3ec0b9af555c64e824415c02c4bcdb3d38721ab659e516891f86e0e8dae834d5c8b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@types/istanbul-reports"
        }
      ]
    },
    {
      "type": "library",
      "name": "yargs",
      "group": "@types",
      "version": "13.0.12",
      "bom-ref": "pug@2.0.4-tuxcare.2|@types/yargs@13.0.12",
      "description": "TypeScript definitions for yargs",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40types/yargs@13.0.12",
      "externalReferences": [
        {
          "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/yargs",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/yargs",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@types/yargs/-/yargs-13.0.12.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a82c49135aa0cf6cb4840e292318c147e3de9421f453908ad5725717008da9f9a589ab4aa78ed40975c4f43ca4d4e5c10cbbec085e7b4ea40425a78b7c360439"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@types/yargs"
        }
      ]
    },
    {
      "type": "library",
      "name": "ansi-styles",
      "version": "3.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|ansi-styles@3.2.1",
      "author": "Sindre Sorhus",
      "description": "ANSI escape codes for styling strings in the terminal",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@3.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/ansi-styles.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/ansi-styles#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/ansi-styles/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "553d1923a91945d4e1f18c89c3748c6d89bfbbe36a7ec03112958ed0f7fdb2af3f7bde16c713a93cac7d151d459720ad3950cd390fbc9ed96a17189173eaf9a8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ansi-styles"
        }
      ]
    },
    {
      "type": "library",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|escape-string-regexp@1.0.5",
      "author": "Sindre Sorhus",
      "description": "Escape RegExp special characters",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/escape-string-regexp.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/escape-string-regexp#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/escape-string-regexp/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bdb468ac1e455105af95ad7a53c47faa06852326b6a86cf00eb366099b982ab6dd494306e88d5908641179f911561b8e9081959deec1437e4349fa35aaf26a16"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/escape-string-regexp"
        }
      ]
    },
    {
      "type": "library",
      "name": "supports-color",
      "version": "5.5.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|supports-color@5.5.0",
      "author": "Sindre Sorhus",
      "description": "Detect whether a terminal supports color",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/supports-color@5.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/supports-color.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/supports-color#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/supports-color/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "423563c1d5c8b78d3c308880a825f8a142ac814d84a801b3b363e9926e1a4186e39be644584716e127c5353af8b8c35999ad1ecb87f99602eb901d1a5f440ca3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/supports-color"
        }
      ]
    },
    {
      "type": "library",
      "name": "ci-info",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|ci-info@2.0.0",
      "author": "Thomas Watson Steen",
      "description": "Get details about the current Continuous Integration environment",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ci-info@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/watson/ci-info.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/watson/ci-info",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/watson/ci-info/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ci-info/-/ci-info-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e6d2bb12dad9d0df8e2c532d86da8e8f87c8d8979bf3c0b808064fbb6e4b0d55205c9d00dc9b383cc1aaae7d095355b4321d7f67cc19cd83f1a94ad77816e809"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ci-info"
        }
      ]
    },
    {
      "type": "library",
      "name": "core",
      "group": "@babel",
      "version": "7.28.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/core@7.28.5",
      "author": "The Babel Team",
      "description": "Babel compiler core.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/core@7.28.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-core",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-core",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues?utf8=%E2%9C%93&q=is%3Aissue+label%3A%22pkg%3A%20core%22+is%3Aopen",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/core/-/core-7.28.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7bb8d3e03c58bc80cb935647994fe6fe6075f6b7b1f6cbf47367ed06d8d206ffa454cffdd367a1d1f20d5330fb5302cb351fa3539f391b1509f3f1017c03397f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/core"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "convert-source-map",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|@babel/core@7.28.5|convert-source-map@2.0.0",
          "author": "Thorsten Lorenz",
          "description": "Converts a source-map from/to  different formats and allows adding/changing properties.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/convert-source-map@2.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/thlorenz/convert-source-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/thlorenz/convert-source-map",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/thlorenz/convert-source-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "2afa78e7d1eb576144275080b22d4abbe318de46ac1f5f53172913cf6c5698c7aae9b936354dd75ef7c9f90eb59b4c64b56c2dfb51d261fdc966c4e6b3769126"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/@babel/core/node_modules/convert-source-map"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "test-sequencer",
      "group": "@jest",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@jest/test-sequencer@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jest/test-sequencer@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-test-sequencer",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jest/test-sequencer/-/test-sequencer-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "eaaaac538a34916d5dbc0f79a9f36883cbfc82444df6987a2f3eebf7a22f6691dd362a4fd9c05c6f4ec9d59e399b3fd5212d35387277a58f13e5f518dfcb60e0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jest/test-sequencer"
        }
      ]
    },
    {
      "type": "library",
      "name": "babel-jest",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|babel-jest@24.9.0",
      "description": "Jest plugin to use babel for transformation.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/babel-jest@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/babel-jest",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/babel-jest/-/babel-jest-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9edb9d75fca237e121330e7c3d334bd698780bdac40a24178c8e2730c04a05a3635efa8b7645e93d170c4abe22c81ac983ffb0cfd6eb1540fa4613804faaf823"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/babel-jest"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-environment-jsdom",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-environment-jsdom@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-environment-jsdom@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-environment-jsdom",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-environment-jsdom/-/jest-environment-jsdom-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "66ff4557d3414732ee00b5e3bd18a33b6df9d4345078b617b690f8c4dbdfa15170db520e28d85900450a71b884b634e49b61ac2776e8315824691eeb37ca9eb4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-environment-jsdom"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-environment-node",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-environment-node@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-environment-node@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-environment-node",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-environment-node/-/jest-environment-node-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e9de15d9fe27c73233c1e9dda36ed3af46859be21759ad171149da1fa9d4d0531aa33c68bedfac7d1be1e09e3bc0bd4ebc5f372374924eed172be8b806a7bbb8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-environment-node"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-get-type",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-get-type@24.9.0",
      "description": "A utility function to get the type of a value",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-get-type@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-get-type",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-get-type/-/jest-get-type-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "954b1e3330257b2e0b84872948ff497fe7d3ad0e1ad721d0c0b35e7956b670499b0867a8640b583ce22ff096b12c3fec5292b17ad2863fe82c1e5f1ff134a3f1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-get-type"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-jasmine2",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-jasmine2@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-jasmine2@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-jasmine2",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-jasmine2/-/jest-jasmine2-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0aaeef90081a60aa7e3ec5fedbf25b4daaeb9340e6361b04b6a05737050791d95bad304bb4c2483400dfda67f9164a3036cabc7af6cf734effa853b401d293cf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-jasmine2"
        }
      ]
    },
    {
      "type": "library",
      "name": "pretty-format",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|pretty-format@24.9.0",
      "author": "James Kyle",
      "description": "Stringify any JavaScript value.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pretty-format@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/pretty-format",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pretty-format/-/pretty-format-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d3464c654887689acd7e4df782e6afaa0bdf252df4b0b61fd1ff3e4ab925bf400c3e87461877281e092c6773938589c8bce77ef323029f462210ea208e582c9c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pretty-format"
        }
      ]
    },
    {
      "type": "library",
      "name": "fake-timers",
      "group": "@jest",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@jest/fake-timers@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jest/fake-timers@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-fake-timers",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jest/fake-timers/-/fake-timers-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "79641c35ad984b0cd7588302e4ab9f061de85912228eb40544eb08aadeaffcd4bd228fe0927c358ec002f5cfa287f4505f80373bb49e58085078dd20a0a853f4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jest/fake-timers"
        }
      ]
    },
    {
      "type": "library",
      "name": "source-map",
      "group": "@jest",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@jest/source-map@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jest/source-map@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-source-map",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jest/source-map/-/source-map-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fd7c3bc4696c65be0c273343801ecf5b972ba2ee49a9688141acfac723dddc0ace8369df9ff3ee9d5f3ea255db6c4673365e7dd68e6b58a13d0510da140b8806"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jest/source-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "callsites",
      "version": "3.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|callsites@3.1.0",
      "author": "Sindre Sorhus",
      "description": "Get callsites from the V8 stack trace API",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/callsites@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/callsites.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/callsites#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/callsites/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/callsites/-/callsites-3.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3fc06302c5ef652f95203508d7584709012fef8613ebb6148b924914d588a8bdb7e6c0668d7e3eab1f4cbaf96ce62bf234435cb71e3ac502d0dda4ee13bb2c69"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/callsites"
        }
      ]
    },
    {
      "type": "library",
      "name": "camelcase",
      "version": "5.3.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|camelcase@5.3.1",
      "author": "Sindre Sorhus",
      "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/camelcase@5.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/camelcase.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/camelcase#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/camelcase/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2f6f124c1d7bd27c164badd48ed944384ddd95d400a5a257664388d6e3057f37f7ad1b8f7a01da1deb3279ef98c50f96e92bd10d057a52b74e751891d79df026"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/camelcase"
        }
      ]
    },
    {
      "type": "library",
      "name": "leven",
      "version": "3.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|leven@3.1.0",
      "author": "Sindre Sorhus",
      "description": "Measure the difference between two strings using the fastest JS implementation of the Levenshtein distance algorithm",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/leven@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/leven.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/leven#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/leven/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/leven/-/leven-3.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "aac75af87f234da51a37fc79bf35b6af373ef11c384c043fe0a8c1e3a2302b9547f8895579e7a37bf128651a625ef22a8c580af3841f7ea3f3b462375412c6d4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/leven"
        }
      ]
    },
    {
      "type": "library",
      "name": "kleur",
      "version": "3.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|kleur@3.0.3",
      "author": "Luke Edwards",
      "description": "The fastest Node.js library for formatting terminal text with ANSI colors~!",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/kleur@3.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/lukeed/kleur.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lukeed/kleur#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lukeed/kleur/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/kleur/-/kleur-3.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "793233955392511f89c5d0c57a911870132d67d42a75e7feae7cd675166e31b3b2c2ee6d3b6c3637baea8e800d67993dbf2c212fa06bd55463508813431e04f3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/kleur"
        }
      ]
    },
    {
      "type": "library",
      "name": "sisteransi",
      "version": "1.0.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|sisteransi@1.0.5",
      "author": "Terkel Gjervig",
      "description": "ANSI escape codes for some terminal swag",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/sisteransi@1.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/terkelg/sisteransi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/terkelg/sisteransi#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/terkelg/sisteransi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/sisteransi/-/sisteransi-1.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6cb186951d50c417329e7d9de589835f83068e566fcb631104344d1cb27c548ea5ebef45522c9314d27422f78e48fd1b7178150cf45c7c6a80d298daa94a5f56"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/sisteransi"
        }
      ]
    },
    {
      "type": "library",
      "name": "util.promisify",
      "version": "1.1.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|util.promisify@1.1.3",
      "author": "Jordan Harband",
      "description": "Polyfill/shim for util.promisify in node versions < v8",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/util.promisify@1.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/util.promisify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/util.promisify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/util.promisify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/util.promisify/-/util.promisify-1.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "18811a67aa3ce9f8f4f56b5fd157d9e573fbb66778b778cce5a642826062db7d43d0307500405adc06ba30fe3c0ccb00222f7a5a4a562e2988595c0e8db0cc3b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/util.promisify"
        }
      ]
    },
    {
      "type": "library",
      "name": "cliui",
      "version": "5.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|cliui@5.0.0",
      "author": "Ben Coe",
      "description": "easily create complex multi-column command-line-interfaces",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cliui@5.0.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/yargs/cliui.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yargs/cliui#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/cliui/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cliui/-/cliui-5.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3d87864849a61cceb3be879fdb0f133f396b9cda572234e2a582bbf3462cc2620ff6f8f199de98d9adc20762acebf014f0d1e366e817be8f30de858cdaa9f05c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cliui"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "string-width",
          "version": "3.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|cliui@5.0.0|string-width@3.1.0",
          "author": "Sindre Sorhus",
          "description": "Get the visual width of a string - the number of columns required to display it",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string-width@3.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/string-width.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/string-width#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/string-width/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string-width/-/string-width-3.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "bda7dcbfa2a3559292833d3aa0cfc7e860c1ac0b73f2f76141a9068c522f36b1c0eb2dc7085d422272f2f902eaf1d4c93d0d5bf8a0d4a8315cb647515b8e1ed7"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/cliui/node_modules/string-width"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "get-caller-file",
      "version": "2.0.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|get-caller-file@2.0.5",
      "author": "Stefan Penner",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-caller-file@2.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/stefanpenner/get-caller-file.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stefanpenner/get-caller-file#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stefanpenner/get-caller-file/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0f214fdc133fdd81d340e0942ffc343991d1d25a4a786af1a2d70759ca8d11d9e5b6a1705d57e110143de1e228df801f429a34ac6922e1cc8889fb58d3a87616"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-caller-file"
        }
      ]
    },
    {
      "type": "library",
      "name": "require-directory",
      "version": "2.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|require-directory@2.1.1",
      "author": "Troy Goode",
      "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/require-directory@2.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/troygoode/node-require-directory.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/troygoode/node-require-directory/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/troygoode/node-require-directory/issues/",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7c6c4423bfb0b06f71aef763b2b9662f6d8e3134e21d1c0032ba2211e320abc833a0b0bf3d0afb46c4434932d483f6d9019b45f9354890773aff84482abba2f9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/require-directory"
        }
      ]
    },
    {
      "type": "library",
      "name": "require-main-filename",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|require-main-filename@2.0.0",
      "author": "Ben Coe",
      "description": "shim for require.main.filename() that works in as many environments as possible",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/require-main-filename@2.0.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/yargs/require-main-filename.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yargs/require-main-filename#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/require-main-filename/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "34a37990c0f294aba577160b4947eb6e8e53bb387885dfb613c34f3d7d36999b67d55b911104e861efd9765272f89dee0a97da886174e5eec1f16d225db4079a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/require-main-filename"
        }
      ]
    },
    {
      "type": "library",
      "name": "set-blocking",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|set-blocking@2.0.0",
      "author": "Ben Coe",
      "description": "set blocking stdio and stderr ensuring that terminal output does not truncate",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/set-blocking@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/yargs/set-blocking.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yargs/set-blocking#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/set-blocking/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/set-blocking"
        }
      ]
    },
    {
      "type": "library",
      "name": "which-module",
      "version": "2.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|which-module@2.0.1",
      "author": "nexdrew",
      "description": "Find the module object for something that was require()d",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/which-module@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/nexdrew/which-module.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nexdrew/which-module#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nexdrew/which-module/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/which-module/-/which-module-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "881759e7b443be7391f4018184c2f6bc565fee1f2f9818e1a1a66a3832411561d5b4a90398ab876a2ddcc793e054cad7e580cda76ec0a1f61b03072d492faf85"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/which-module"
        }
      ]
    },
    {
      "type": "library",
      "name": "y18n",
      "version": "4.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|y18n@4.0.3",
      "author": "Ben Coe",
      "description": "the bare-bones internationalization library used by yargs",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/y18n@4.0.3",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/yargs/y18n.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yargs/y18n",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/y18n/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "24a86a4cec12aea340d4d639952ced2751ab06252874b326219b8b88368c449fa2b4577e001544f170633af2162fead2a8d0c2ef82c24859a56ff538519e2125"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/y18n"
        }
      ]
    },
    {
      "type": "library",
      "name": "asap",
      "version": "2.0.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|asap@2.0.6",
      "description": "High-priority task queue for Node.js and browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/asap@2.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/kriskowal/asap.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kriskowal/asap#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kriskowal/asap/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0521d680348088ab39d28d917bca69be9dec7951d7491338e1c752b13f457cd1145192ce196542b2259a44f58cd599e7fa6a99d4e7d5677cf70d61334a9ee144"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/asap"
        }
      ]
    },
    {
      "type": "library",
      "name": "prr",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|prr@1.0.1",
      "author": "Rod Vagg",
      "description": "A better Object.defineProperty()",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/prr@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/rvagg/prr.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/rvagg/prr",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/rvagg/prr/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/prr/-/prr-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c8fc384a78358168211d05a3d01dd98205949b8a956cfc0f15c446f0acb1894ec9d8e1c54a8107292f846777efe65d6df42c828a8a7a97f6587966eb82841e8f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/prr"
        }
      ]
    },
    {
      "type": "library",
      "name": "hawk",
      "version": "3.1.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|hawk@3.1.3",
      "author": "Eran Hammer",
      "description": "HTTP Hawk Authentication Scheme",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hawk@3.1.3",
      "externalReferences": [
        {
          "url": "git://github.com/hueniverse/hawk.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hueniverse/hawk#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hueniverse/hawk/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hawk/-/hawk-3.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5fcc5b99373571b3d77105785a42dc44c00bbb2a3185fa450139b2b82c493ce02fac34b80cd9ec4c03a6294c4c4ce594e93ceb4ce9313cac08c7964ea49552ae"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hawk"
        }
      ]
    },
    {
      "type": "library",
      "name": "stringstream",
      "version": "0.0.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|stringstream@0.0.6",
      "author": "Michael Hart",
      "description": "Encode and decode streams into string streams",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stringstream@0.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/mhart/StringStream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mhart/StringStream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mhart/StringStream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stringstream/-/stringstream-0.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f3b18404091e81b05cc1e4e852b7737f778b856360d3a1494de6e5e01549cff2605b2f02bc4afd751b57e6a5a9862ca7312425c718be42a374cf94f7d922e584"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stringstream"
        }
      ]
    },
    {
      "type": "library",
      "name": "css",
      "version": "2.2.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|css@2.2.4",
      "author": "TJ Holowaychuk",
      "description": "CSS parser / stringifier",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/css@2.2.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/reworkcss/css.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/reworkcss/css#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/reworkcss/css/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/css/-/css-2.2.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a149e3996a72d27888df1fe63cbf1d54423597b3271b7f871f244f1dff981526cafacbce857a6648e703511521d9a382825da0af3ace3edd671cbb8254550b2f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/css"
        }
      ]
    },
    {
      "type": "library",
      "name": "project",
      "group": "@lerna",
      "version": "3.10.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/project@3.10.0",
      "author": "Daniel Stockman",
      "description": "Lerna project configuration",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/project@3.10.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/project/-/project-3.10.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f50465f1a187bb2538cd51042d098d3e7253952ed71ea5fbc3d23d8ac0977678a529cd91d0ccaf52cdb5963e98cadeb14ee427a83d79f1347db5b4b842e7d841"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/project"
        }
      ]
    },
    {
      "type": "library",
      "name": "write-log-file",
      "group": "@lerna",
      "version": "3.6.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/write-log-file@3.6.0",
      "author": "Daniel Stockman",
      "description": "What lerna uses to dump logs",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/write-log-file@3.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/write-log-file/-/write-log-file-3.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3a42caf7d57ab185ec26c620f8ef70b62152df3e9e50f6a2cf67ba71726df3499f208748d6dd9d9e6cae6b421be5c65613142fc76cfa637d9695fd0c9eca0db0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/write-log-file"
        }
      ]
    },
    {
      "type": "library",
      "name": "execa",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|execa@1.0.0",
      "author": "Sindre Sorhus",
      "description": "A better `child_process`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/execa@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/execa.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/execa#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/execa/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/execa/-/execa-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "69d6f1732595e3aaa21f2bd2a79d132add39b41e2d2b71dc985eff9f17c07619e8c7cdec7930dbc276aa28ee2c5d1cbbae81c0205a893ff470fc0b846d7eb52c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/execa"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash",
      "version": "4.17.21",
      "bom-ref": "pug@2.0.4-tuxcare.2|lodash@4.17.21",
      "author": "John-David Dalton",
      "description": "Lodash modular utilities.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash@4.17.21",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bf690311ee7b95e713ba568322e3533f2dd1cb880b189e99d4edef13592b81764daec43e2c54c61d5c558dc5cfb35ecb85b65519e74026ff17675b6f8f916f4a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash"
        }
      ]
    },
    {
      "type": "library",
      "name": "filter-packages",
      "group": "@lerna",
      "version": "3.10.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/filter-packages@3.10.0",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/filter-packages@3.10.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/filter-packages/-/filter-packages-3.10.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dc071d8fe8db6a7cba2e7412b88994e2db5c2b950b1d256e83c1a1fc4bf04dec0a083a4702ea08ddecaecd93a748174cbc33a3134dee2044902b474d36c9fa3b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/filter-packages"
        }
      ]
    },
    {
      "type": "library",
      "name": "config-chain",
      "version": "1.1.13",
      "bom-ref": "pug@2.0.4-tuxcare.2|config-chain@1.1.13",
      "author": "Dominic Tarr",
      "description": "HANDLE CONFIGURATION ONCE AND FOR ALL",
      "purl": "pkg:npm/config-chain@1.1.13",
      "externalReferences": [
        {
          "url": "git+https://github.com/dominictarr/config-chain.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/dominictarr/config-chain",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dominictarr/config-chain/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/config-chain/-/config-chain-1.1.13.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "aa3f9ff003c04571eb33486b6aa5d86f6fdb395495e0fbc9425359fc3563d10ae634cdaad9eba2ce47ae55c910e7b27e5b49911fa1ef8be939d0ce09ba5d9545"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/config-chain"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-npm-exec-opts",
      "group": "@lerna",
      "version": "3.6.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/get-npm-exec-opts@3.6.0",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/get-npm-exec-opts@3.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/get-npm-exec-opts/-/get-npm-exec-opts-3.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "aee1fa2ae2e5b7be5a08e6d77d421d549aa67d5abbb20586ab99976b4e6f735304ab14c8894db762225d5b3a1f40e39438009a664cd9e0ae0dbbbc17120e1782"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/get-npm-exec-opts"
        }
      ]
    },
    {
      "type": "library",
      "name": "signal-exit",
      "version": "3.0.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|signal-exit@3.0.7",
      "author": "Ben Coe",
      "description": "when you want to fire an event no matter how a process exits.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/tapjs/signal-exit.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tapjs/signal-exit",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tapjs/signal-exit/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c270f6644fa5f923c2feea12d2f5de13d2f5fb4c2e68ca8a95fcfd00c528dfc26cc8b48159215c1d1d51ae2eb62d9735daf2ebd606f78e5ee2c10860c2901b19"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/signal-exit"
        }
      ]
    },
    {
      "type": "library",
      "name": "write-pkg",
      "version": "3.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|write-pkg@3.2.0",
      "author": "Sindre Sorhus",
      "description": "Write a package.json file",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/write-pkg@3.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/write-pkg.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/write-pkg#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/write-pkg/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/write-pkg/-/write-pkg-3.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b57da27d9d18a8414e175c23456d8f93ddcd2ec8f4dbe9f550fe51bceeab0acd0ae91da0d6969dbdfd34e9c63be0f40928c192dabe3634aec50f4746e98ea96b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/write-pkg"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-exists",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|path-exists@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Check if a path exists",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-exists@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/path-exists.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/path-exists#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/path-exists/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6e90bb198c220d8438c182def8503c96146385008c7101ae4a0186a83920fd07ab456c3d0a61914f4892395452649dbd34c2d9808cea6a58c9eb7a1a2f834825"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-exists"
        }
      ]
    },
    {
      "type": "library",
      "name": "create-symlink",
      "group": "@lerna",
      "version": "3.6.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/create-symlink@3.6.0",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/create-symlink@3.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/create-symlink/-/create-symlink-3.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "606de54dbeb3ca5be61aa294f90600df29529e82e7f85c8b1f95d9994b03d22f3947cf38f84c8925e1f1ff3524fb2acbd99c074b844152025f0b6e1fab380fa0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/create-symlink"
        }
      ]
    },
    {
      "type": "library",
      "name": "package",
      "group": "@lerna",
      "version": "3.7.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/package@3.7.2",
      "author": "Daniel Stockman",
      "description": "Lerna's internal representation of a package",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/package@3.7.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/package/-/package-3.7.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f00e6137609e90cd5ad08c785543bf83e444a3e32c9d76fc9674346c68ebd58196cd22f9371609d19f7ed29c137c3a6f4436251583b4acc5700545b8e1be1d53"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/package"
        }
      ]
    },
    {
      "type": "library",
      "name": "resolve-symlink",
      "group": "@lerna",
      "version": "3.6.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/resolve-symlink@3.6.0",
      "author": "Daniel Stockman",
      "description": "An internal Lerna tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/resolve-symlink@3.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/resolve-symlink/-/resolve-symlink-3.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4d538012a1c94905613433050b011464f68e113a870d05754d05907c2f1994eab269443bbde6546e0d327c6ed13cdce54a9bc5d1968615e474621603016d3718"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/resolve-symlink"
        }
      ]
    },
    {
      "type": "library",
      "name": "array-differ",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|array-differ@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Create an array with values that are present in the first input array but not additional ones",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/array-differ@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/array-differ.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/array-differ#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/array-differ/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/array-differ/-/array-differ-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2de658f83643467bcfede32e43a2c77c2cd41b100021589406588adb83f78565cbeb2e12a2bb6047a3629bac6b91f48b9661f4fa4fbd358370542dace7766b61"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/array-differ"
        }
      ]
    },
    {
      "type": "library",
      "name": "array-union",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|array-union@1.0.2",
      "author": "Sindre Sorhus",
      "description": "Create an array of unique values, in order, from the input arrays",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/array-union@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/array-union.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/array-union#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/array-union/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/array-union/-/array-union-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0f1afa4098ff45d53f8426818ce7f15beaba972b9513a245588ac0529b8e3a1a0926843df5c527de2811687541e4ff56ae015537415f02b337c7472e78e53c9e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/array-union"
        }
      ]
    },
    {
      "type": "library",
      "name": "arrify",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|arrify@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Convert a value to an array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/arrify@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/arrify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/arrify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/arrify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/arrify/-/arrify-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dc26337b1f4cf451908c218c1b28baff7d5cf0625b81bd2a1b2af1e475b13ddd1a0b0878701d988cc6f65dff54ba8a20accae53bd713aa7079ac8e461d94dc50"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/arrify"
        }
      ]
    },
    {
      "type": "library",
      "name": "readdir-scoped-modules",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|readdir-scoped-modules@1.1.0",
      "author": "Isaac Z. Schlueter",
      "description": "Like `fs.readdir` but handling `@org/module` dirs as if they were a single entry.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/readdir-scoped-modules@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/readdir-scoped-modules.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/readdir-scoped-modules",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/readdir-scoped-modules/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/readdir-scoped-modules/-/readdir-scoped-modules-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6ac6a29037aa01083b2627d1b199f5349657a3d13e57097209f6e4661c322128a7aa4e73352eb6eba1d2e646a1e8fd1269028617a4a43676551d4cc7158c580f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/readdir-scoped-modules"
        }
      ]
    },
    {
      "type": "library",
      "name": "util-promisify",
      "version": "2.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|util-promisify@2.1.0",
      "description": "Node 8's util.promisify, as a node module",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/util-promisify@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/juliangruber/util-promisify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/util-promisify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/util-promisify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/util-promisify/-/util-promisify-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2bee5e40f62cd786f7f84fa1984d89ea0099e0998c97d0db612e8178fd821eae9632e37112bc5fe41fe7d1fcfce4bf3352ea0eeab23334d988403bbf8fed4e70"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/util-promisify"
        }
      ]
    },
    {
      "type": "library",
      "name": "columnify",
      "version": "1.6.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|columnify@1.6.0",
      "author": "Tim Oxley",
      "description": "Render data in text columns. Supports in-column text-wrap.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/columnify@1.6.0",
      "externalReferences": [
        {
          "url": "git://github.com/timoxley/columnify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/timoxley/columnify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/timoxley/columnify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/columnify/-/columnify-1.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9689a3b8564a7cce8c4809d5f5a0990bdb1cd2a19b99975fca036ffa70a9a9591229d0b10a494bb5dd7a3b41082c6908987c3d6691e40271da07ef19c6ae56e9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/columnify"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "strip-ansi",
          "version": "6.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|columnify@1.6.0|strip-ansi@6.0.1",
          "author": "Sindre Sorhus",
          "description": "Strip ANSI escape codes from a string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-ansi@6.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/strip-ansi.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/strip-ansi#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/strip-ansi/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "637f153d21dcaa416b0a916743dbee4979aabaebf9a1738aa46793e9a1abaf7a3719cf409556ba2417d448e0a76f1186645fbfd28a08ecaacfb944b3b54754e4"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/columnify/node_modules/strip-ansi"
            }
          ]
        },
        {
          "type": "library",
          "name": "ansi-regex",
          "version": "5.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|columnify@1.6.0|ansi-regex@5.0.1",
          "author": "Sindre Sorhus",
          "description": "Regular expression for matching ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ansi-regex@5.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/ansi-regex.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "aae2505e54d25062f62c7f52517a3c570b18e2ca1a9e1828e8b3529bce04d4b05c13cb373b4c29762473c91f73fd9649325316bf7eea38e6fda5d26531410a15"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/columnify/node_modules/ansi-regex"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "inquirer",
      "version": "6.5.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|inquirer@6.5.2",
      "author": "Simon Boudrias",
      "description": "A collection of common interactive command line user interfaces.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/inquirer@6.5.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/SBoudrias/Inquirer.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/SBoudrias/Inquirer.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/SBoudrias/Inquirer.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/inquirer/-/inquirer-6.5.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "727b65079821b81d22b8eeb93afa22f2880b1e2586b3fe7236bb5470a8c58524a255e0085690fb92869253d44cf26a57c396038bd45d61719031a394441ef271"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/inquirer"
        }
      ]
    },
    {
      "type": "library",
      "name": "os-locale",
      "version": "3.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|os-locale@3.1.0",
      "author": "Sindre Sorhus",
      "description": "Get the system locale",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/os-locale@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/os-locale.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/os-locale#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/os-locale/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/os-locale/-/os-locale-3.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "67c977478c1858ce34ff9d99f92dbae6891f163f0ab76702d8c298fb1362de416cf97188ed65eefc8df4f5041061b456e228e267ecb1b3da6a121261d03a96dd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/os-locale"
        }
      ]
    },
    {
      "type": "library",
      "name": "string-width",
      "version": "2.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|string-width@2.1.1",
      "author": "Sindre Sorhus",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/string-width@2.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/string-width.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/string-width#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/string-width/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9cea87e7d75e0aaf52447971ab5030f39267b78c3a2af2caa9656293aa00f599255cb3483a5aa0e05db2ad3d4c55a4e302abd5c1d7de67bc3b682bc90fbba093"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/string-width"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "strip-ansi",
          "version": "4.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|string-width@2.1.1|strip-ansi@4.0.0",
          "author": "Sindre Sorhus",
          "description": "Strip ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-ansi@4.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/strip-ansi.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/strip-ansi#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/strip-ansi/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "e17689db341d0b344e6438af1152033e47109fc2cc1526bc923f06c5bfcb9f0ceff40f1572d359fa57e2bc2fec5778af5bc1252531115d9a0f051ad92a434aa3"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/string-width/node_modules/strip-ansi"
            }
          ]
        },
        {
          "type": "library",
          "name": "ansi-regex",
          "version": "3.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|string-width@2.1.1|ansi-regex@3.0.1",
          "author": "Sindre Sorhus",
          "description": "Regular expression for matching ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ansi-regex@3.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/ansi-regex.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f8ef4972df307fefa55f1c4573885cf0bb23692ab41c5cf32fb715b30f2944320f763283da64f8cad0d994bb92059e1c2ca6455c8acc18eec36d00ad30924c2b"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/string-width/node_modules/ansi-regex"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "strong-log-transformer",
      "version": "2.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|strong-log-transformer@2.1.0",
      "author": "Ryan Graham",
      "description": "Stream transformer that prefixes lines with timestamps and other things.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/strong-log-transformer@2.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/strongloop/strong-log-transformer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/strongloop/strong-log-transformer",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/strongloop/strong-log-transformer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/strong-log-transformer/-/strong-log-transformer-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0771e0ba5fb3d0bf5adb7e850140bd899b0bfa75478280899ea09b379f3c0e3631bc65da5da6856df990fc986f2a3670b0eba4b91ef65db1efef5424ba0d07c4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/strong-log-transformer"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsonfile",
      "version": "4.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jsonfile@4.0.0",
      "author": "JP Richardson",
      "description": "Easily read/write JSON files.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsonfile@4.0.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/jprichardson/node-jsonfile.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jprichardson/node-jsonfile#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jprichardson/node-jsonfile/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsonfile/-/jsonfile-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9ba175477cfc8e395fda29901d2d907b3e6c8ca590cdbbae86e27f14a605459bcf1373ee1dc48c559cdfb0b84654e91f776d286cbe5258405ec394a196ab8dc6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsonfile"
        }
      ]
    },
    {
      "type": "library",
      "name": "universalify",
      "version": "0.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|universalify@0.1.2",
      "author": "Ryan Zimmerman",
      "description": "Make a callback- or promise-based function support both promises and callbacks.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/universalify@0.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/RyanZim/universalify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/RyanZim/universalify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/RyanZim/universalify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/universalify/-/universalify-0.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ac125e2390970259b2d6957eeb5ed607d27add4e9771acc71c5d9fd9d6c98b1e17ce9505d114b765b8f414620e080bdae4ffddfc604e61a002435c3ed1acd492"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/universalify"
        }
      ]
    },
    {
      "type": "library",
      "name": "dir-glob",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|dir-glob@2.0.0",
      "author": "Kevin Mårtensson",
      "description": "Convert directories to glob compatible strings",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/dir-glob@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/kevva/dir-glob.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kevva/dir-glob#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kevva/dir-glob/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/dir-glob/-/dir-glob-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dfbaa2ac50f3f1c0397e29a9f5f7a8e377d2b91a36807c1a227e9d5cbf017abd5d1b0528b03ac665e0825eae7b5a722a138690faedde419cec935c8ece17706a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/dir-glob"
        }
      ]
    },
    {
      "type": "library",
      "name": "fast-glob",
      "version": "2.2.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|fast-glob@2.2.7",
      "author": "Denis Malinochkin",
      "description": "Is a faster `node-glob` alternative",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fast-glob@2.2.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/mrmlnc/fast-glob.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mrmlnc/fast-glob#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mrmlnc/fast-glob/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fast-glob/-/fast-glob-2.2.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8352ae4301ce64098e64cb81b477710ed8eef93d914fc8e0082f5a00db1ba5d8830d34a78e07ee56c20134a6d4789237a0a31113171f343b499783a16df7ccb3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fast-glob"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "is-glob",
          "version": "4.0.3",
          "bom-ref": "pug@2.0.4-tuxcare.2|fast-glob@2.2.7|is-glob@4.0.3",
          "author": "Jon Schlinkert",
          "description": "Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-glob@4.0.3",
          "externalReferences": [
            {
              "url": "git+https://github.com/micromatch/is-glob.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/micromatch/is-glob",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/micromatch/is-glob/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-glob/-/is-glob-4.0.3.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "c5e9526b21c7dfa66013b6568658bba56df884d6cd97c3a3bf92959a4243e2105d0f7b61f137e4f6f61ab0b33e99758e6611648197f184b4a7af046be1e9524a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/fast-glob/node_modules/is-glob"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "ignore",
      "version": "3.3.10",
      "bom-ref": "pug@2.0.4-tuxcare.2|ignore@3.3.10",
      "author": "kael",
      "description": "Ignore is a manager and filter for .gitignore rules.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ignore@3.3.10",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/kaelzhang/node-ignore.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kaelzhang/node-ignore#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kaelzhang/node-ignore/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ignore/-/ignore-3.3.10.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3e0b3de7591a326e465cfecc3afc4444835ede0b1a563516166f9464f4aaf7162b890024b32860d1cb274b429748d443e4d98d75aa571298f11b8f7e00a87fba"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ignore"
        }
      ]
    },
    {
      "type": "library",
      "name": "promzard",
      "version": "0.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|promzard@0.3.0",
      "author": "Isaac Z. Schlueter",
      "description": "prompting wizardly",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/promzard@0.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/promzard.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/promzard#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/promzard/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/promzard/-/promzard-0.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "259798a9ded401c1c2c08fac4ce7940d892f114fb56d0ee2134513d4c801fed1119003e47ac5b8e8cae92324b33838bea304e366d885f00cb98fd9bad0a98c07"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/promzard"
        }
      ]
    },
    {
      "type": "library",
      "name": "read",
      "version": "1.0.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|read@1.0.7",
      "author": "Isaac Z. Schlueter",
      "description": "read(1) for node programs",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/read@1.0.7",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/read.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/read#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/read/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/read/-/read-1.0.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ad238a3585266b1cb4a26d4136330de1eccd4fa54a2bedb117818185cf359a41fb2fad22e9da7ca8f62b92774d2d3dd03e9868208de668bf4f542f579a11f055"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/read"
        }
      ]
    },
    {
      "type": "library",
      "name": "spdx-correct",
      "version": "3.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|spdx-correct@3.2.0",
      "description": "correct invalid SPDX expressions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/spdx-correct@3.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jslicense/spdx-correct.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jslicense/spdx-correct.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jslicense/spdx-correct.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-3.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "90df5d25bbe7c921d42c896e0c7cb7d961d152edce83b07db1b63bb6c14b72d42422a9cc877844ad881d3234d8baa99c5d7fa52b94f596752ddc6ef336cc2664"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/spdx-correct"
        }
      ]
    },
    {
      "type": "library",
      "name": "spdx-expression-parse",
      "version": "3.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|spdx-expression-parse@3.0.1",
      "author": "Kyle E. Mitchell",
      "description": "parse SPDX license expressions",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jslicense/spdx-expression-parse.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jslicense/spdx-expression-parse.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jslicense/spdx-expression-parse.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/spdx-expression-parse"
        }
      ]
    },
    {
      "type": "library",
      "name": "builtins",
      "version": "1.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|builtins@1.0.3",
      "description": "List of node.js builtin modules",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/builtins@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/juliangruber/builtins.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/builtins#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/builtins/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/builtins/-/builtins-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b980636a45a2a5f68efdb5c8ec4f2baba929c074592b970d62b52fd8ecd9488fc5be674cc97276b46f5d29c8c40b9607987a54030b1aae058864d59dc5bfdb9d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/builtins"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.sortby",
      "version": "4.7.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|lodash.sortby@4.7.0",
      "author": "John-David Dalton",
      "description": "The lodash method `_.sortBy` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.sortby@4.7.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.sortby/-/lodash.sortby-4.7.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1c35971bc8ac327b40c91179bd9ef12ae12f3a14f8021951b7fddccd34a3bc65318d8081551418e3c5620c7c9f633f552280645b84cc19035aa71fa5dd153074"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.sortby"
        }
      ]
    },
    {
      "type": "library",
      "name": "tr46",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|tr46@1.0.1",
      "author": "Sebastian Mayr",
      "description": "An implementation of the Unicode TR46 spec",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tr46@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/Sebmaster/tr46.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Sebmaster/tr46.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Sebmaster/tr46.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tr46/-/tr46-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "753a68c048dc950eca831e5274192a473561111417a2ff3f97d16df5d54cf5f9a0d16d0a41255a5d7f53e22eadc023cdb58899339de5a5249403025b14f387c4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tr46"
        }
      ]
    },
    {
      "type": "library",
      "name": "webidl-conversions",
      "version": "4.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|webidl-conversions@4.0.2",
      "author": "Domenic Denicola",
      "description": "Implements the WebIDL algorithms for converting to and from JavaScript values",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/webidl-conversions@4.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jsdom/webidl-conversions.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jsdom/webidl-conversions#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jsdom/webidl-conversions/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-4.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "610f819b1b9381de945d95b7f880867f2a91c875d5943e46b50af9faa8e2356edb17472aaf35f9d341d55cf04ebe05dbe589f30ddfa1d33ab2bfad4a503efe4a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/webidl-conversions"
        }
      ]
    },
    {
      "type": "library",
      "name": "detect-indent",
      "version": "5.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|detect-indent@5.0.0",
      "author": "Sindre Sorhus",
      "description": "Detect the indentation of code",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/detect-indent@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/detect-indent.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/detect-indent#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/detect-indent/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/detect-indent/-/detect-indent-5.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ae5a6fb3152d3343d0bf2f6265eeb8d3f216c1663206c4c0a5111b035a473a998e50897d3243ff538cfbbd3b60e0e6a88efaa1c6deec76e7e74f413319a477d6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/detect-indent"
        }
      ]
    },
    {
      "type": "library",
      "name": "sort-keys",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|sort-keys@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Sort the keys of an object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/sort-keys@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/sort-keys.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/sort-keys#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/sort-keys/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/sort-keys/-/sort-keys-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fdd3c2ac6d6cdde3e95a6eb205bc59ab905ed5d5c62f22e7f59efdd5c8430b7345ae99156d61b3901c0f37592769c89ec455e0449ee1cdd9f0678b2d1d20e68e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/sort-keys"
        }
      ]
    },
    {
      "type": "library",
      "name": "write-file-atomic",
      "version": "2.4.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|write-file-atomic@2.4.1",
      "author": "Rebecca Turner",
      "description": "Write files in an atomic fashion w/configurable ownership",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/write-file-atomic@2.4.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/iarna/write-file-atomic.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/iarna/write-file-atomic",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/iarna/write-file-atomic/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-2.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4c61c5799119327bfe8011517e301cc4be5b3c7aec18ab676f8aac140c2ceffbe587e41fc006b2488c380173fd66c9134e1e465aedc52ee261b1655d8893c6be"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/write-file-atomic"
        }
      ]
    },
    {
      "type": "library",
      "name": "byte-size",
      "version": "4.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|byte-size@4.0.4",
      "author": "Lloyd Brookes",
      "description": "Convert a bytes (and octets) value to a more human-readable format. Choose between metric or IEC units.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/byte-size@4.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/75lb/byte-size.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/75lb/byte-size#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/75lb/byte-size/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/byte-size/-/byte-size-4.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f3644f7a7782ea7a82752c025f6859533dc93cebcde5ab7f9d3130fc231fd394a6bb71eba68f4fb1becb8cdfa4f979dd340ac6d4463c2f8f81337693338042bf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/byte-size"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-unicode",
      "version": "2.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|has-unicode@2.0.1",
      "author": "Rebecca Turner",
      "description": "Try to guess if your terminal supports unicode",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-unicode@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/iarna/has-unicode.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/iarna/has-unicode",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/iarna/has-unicode/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-unicode"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-packed",
      "group": "@lerna",
      "version": "3.7.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@lerna/get-packed@3.7.0",
      "author": "Daniel Stockman",
      "description": "Read contents of package tarball created by npm pack",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/get-packed@3.7.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lerna/lerna.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lerna/lerna/tree/master/utils/get-packed#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lerna/lerna/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@lerna/get-packed/-/get-packed-3.7.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cae16d8ec5192078de22f21843f42ecad0be150707c28de9781fb2181493dae5822d4091e6bc7a927a1070fcdbc5d1430ae51be4815c70519ddc1d5f1c583745"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@lerna/get-packed"
        }
      ]
    },
    {
      "type": "library",
      "name": "npm-packlist",
      "version": "1.4.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|npm-packlist@1.4.8",
      "author": "Isaac Z. Schlueter",
      "description": "Get a list of the files to add from a folder into an npm package",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/npm-packlist@1.4.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-packlist.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://www.npmjs.com/package/npm-packlist",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/npm-packlist/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/npm-packlist/-/npm-packlist-1.4.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e7e019830aeee487af17965d9c5825079c0d9471b500e3aec36f16854abcffc7a684198bbfa8d7e5bcb85890a1ee55b4b92619612e835ea22cc995485d1654f4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/npm-packlist"
        }
      ]
    },
    {
      "type": "library",
      "name": "tar",
      "version": "4.4.19",
      "bom-ref": "pug@2.0.4-tuxcare.2|tar@4.4.19",
      "author": "Isaac Z. Schlueter",
      "description": "tar for node",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tar@4.4.19",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/node-tar.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/node-tar#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/node-tar/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tar/-/tar-4.4.19.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6b6d2012cbc79d67b4ca0058f096f1a0ce30dd225d85ced902ec642ea87e9ef35037620eb7407994b80ce3dd17e4797c145d1d974b4e7f67b015802520583354"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tar"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-changelog-angular",
      "version": "5.0.13",
      "bom-ref": "pug@2.0.4-tuxcare.2|conventional-changelog-angular@5.0.13",
      "author": "Steve Mao",
      "description": "conventional-changelog angular preset",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-angular@5.0.13",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/conventional-changelog.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-changelog-angular#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-changelog-angular/-/conventional-changelog-angular-5.0.13.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8bf822a4cc6ceecf0bfd07ae6af3c5da12e72601faa44640b6dc9207a6a240b59c5f7a6e5832f7002566bc18491b19c0cb9d90735e6e6b6e81b9f63a2a99ab54"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-changelog-angular"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-changelog-core",
      "version": "3.2.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|conventional-changelog-core@3.2.3",
      "description": "conventional-changelog core",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-core@3.2.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/conventional-changelog.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-changelog-core#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-changelog-core/-/conventional-changelog-core-3.2.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2cc317d499713c8abf133e5a600612e42a6ec1b3a4e90169f0ee072c0719c5edefc680ad0019217e37ad93c21875107d083406c0914b4770ebe7965ae972a051"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-changelog-core"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-recommended-bump",
      "version": "4.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1",
      "author": "Steve Mao",
      "description": "Get a recommended version bump based on conventional commits",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-recommended-bump@4.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/conventional-changelog.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-recommended-bump#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-recommended-bump/-/conventional-recommended-bump-4.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "253daf29f48ff64475f115d77f9e41458d4edc01c6f053e0e5bb4fde5ecb61f71626c89723a3027f7d037a943df04f10868c2f82fedaf227afd09d5b10391314"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-recommended-bump"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "meow",
          "version": "4.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|meow@4.0.1",
          "author": "Sindre Sorhus",
          "description": "CLI app helper",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/meow@4.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/meow.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/meow#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/meow/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/meow/-/meow-4.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "c5c4811c3e59f3acda39cfbbf352abba9b870337865d22ed8803a606c88b0e23d2698481ea175ec369e0f440409d9eb68da806f4c1c039dc690e2fe5581149fc"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/conventional-recommended-bump/node_modules/meow"
            }
          ]
        },
        {
          "type": "library",
          "name": "camelcase-keys",
          "version": "4.2.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|camelcase-keys@4.2.0",
          "author": "Sindre Sorhus",
          "description": "Convert object keys to camelCase",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase-keys@4.2.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase-keys.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase-keys#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase-keys/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-4.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "123dfb60a61b15423c422625be3f581dbebf67ad1d6723c95b40acf2c16294c6ddda53f46f0df2940abdc8990ae257130367480f97c6f0b8e62586ceee459bed"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/conventional-recommended-bump/node_modules/camelcase-keys"
            }
          ]
        },
        {
          "type": "library",
          "name": "minimist-options",
          "version": "3.0.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|minimist-options@3.0.2",
          "author": "Vadim Demedes",
          "description": "Pretty options for minimist",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/minimist-options@3.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/vadimdemedes/minimist-options.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/vadimdemedes/minimist-options#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/vadimdemedes/minimist-options/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/minimist-options/-/minimist-options-3.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "17206b4ff774778fae89945bab39cf5eac372296591b7825df0296897efce05c9c50a57006dd2e2c116442bb44e2d64eae0a3bf27669da39cacf72fae53e4b75"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/conventional-recommended-bump/node_modules/minimist-options"
            }
          ]
        },
        {
          "type": "library",
          "name": "redent",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|redent@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Strip redundant indentation and indent the string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/redent@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/redent.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/redent#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/redent/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/redent/-/redent-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "5cdc2b4f1efb2500843174de6fc9a8bc12ae2bbe4c807d11664ba336e0ca09ecde9b1fefa1aa65f62da00928bc5969bcfa8c79c9c262d60c45db67d1edcd028b"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/conventional-recommended-bump/node_modules/redent"
            }
          ]
        },
        {
          "type": "library",
          "name": "trim-newlines",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|trim-newlines@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Trim newlines from the start and/or end of a string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/trim-newlines@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/trim-newlines.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/trim-newlines#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/trim-newlines/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "313056bf78e15634d4ed74772101e595b889b3cb1cef96bcd0e12107aa2bfeaee92d35a04346cc1905d76104ab4ae5dee9688a583679b715d8e4fe7d6bf72854"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/conventional-recommended-bump/node_modules/trim-newlines"
            }
          ]
        },
        {
          "type": "library",
          "name": "camelcase",
          "version": "4.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|camelcase@4.1.0",
          "author": "Sindre Sorhus",
          "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase@4.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/camelcase/-/camelcase-4.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "17102fec7a47ad76e1dda3e8e28daac476b2da590b637c79330dca784e0a404f32b157f3896791643c1c8dabafc01486102fe75d43f3672f337a1e07a24a8e9f"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/conventional-recommended-bump/node_modules/camelcase"
            }
          ]
        },
        {
          "type": "library",
          "name": "map-obj",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|map-obj@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Map object keys and values into a new object",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/map-obj@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/map-obj.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/map-obj#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/map-obj/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/map-obj/-/map-obj-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "4f34125760e231882817947272778a554cc86bd6d0b23fc1ded4e0b04ddd386aa5cc79c6203682ed7044ee0ae703ef2464f9dfa921857bde551dcda873454551"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/conventional-recommended-bump/node_modules/map-obj"
            }
          ]
        },
        {
          "type": "library",
          "name": "quick-lru",
          "version": "1.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|quick-lru@1.1.0",
          "author": "Sindre Sorhus",
          "description": "Simple \"Least Recently Used\" (LRU) cache",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/quick-lru@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/quick-lru.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/quick-lru#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/quick-lru/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/quick-lru/-/quick-lru-1.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b514bbb13832c4c5ed2ee9bc2fae5d6899c75217c35206e845d7165b66d1f6f05fae3dbe3b91d231b40e25f2498c85523c5a9b042177ec5a705971a2b43739b4"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/conventional-recommended-bump/node_modules/quick-lru"
            }
          ]
        },
        {
          "type": "library",
          "name": "indent-string",
          "version": "3.2.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|indent-string@3.2.0",
          "author": "Sindre Sorhus",
          "description": "Indent each line in a string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/indent-string@3.2.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/indent-string.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/indent-string#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/indent-string/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/indent-string/-/indent-string-3.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "058a931d74c6508be0eedd6be2c24d29c6c36642fdda791703c62d4696e31474471832ff36d51e88124c784eb490814dfcc83c11269642f7ed69830627341909"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/conventional-recommended-bump/node_modules/indent-string"
            }
          ]
        },
        {
          "type": "library",
          "name": "strip-indent",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|strip-indent@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Strip leading whitespace from each line in a string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-indent@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/strip-indent.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-indent#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-indent/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/strip-indent/-/strip-indent-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "46c48d3cba6ae9850bed0632e384673d54e7fe571566d6f8f14a1fdd7e492db178cc3fc6b3b6450efd875a897e95ea10376993f3a2c0cd2b2119f9139523a9b0"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/conventional-recommended-bump/node_modules/strip-indent"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "get-stream",
      "version": "4.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|get-stream@4.1.0",
      "author": "Sindre Sorhus",
      "description": "Get a stream as a string, buffer, or array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-stream@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/get-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/get-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/get-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-4.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "18c6ade04279d7ad64232d877af2e5af896e363060be68f8d7729a400ee3b7857c078443b1fa4793b590f4656a7d8cb2c7c392fcbeba2a8c7eac944d9252caef"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "brace-expansion",
      "version": "1.1.12",
      "bom-ref": "pug@2.0.4-tuxcare.2|brace-expansion@1.1.12",
      "author": "Julian Gruber",
      "description": "Brace expansion as known from sh/bash",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.12",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/brace-expansion.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/brace-expansion",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/brace-expansion/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f53f548d6debd145b973543b193c25969b57c21bd8984cc587331f67d1fb1505adfae65e3e364f8c13ff5b5644c99d6dc065a89b9ff9e9317894f72a8e70c772"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/brace-expansion"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-stream",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-stream@1.1.0",
      "author": "Sindre Sorhus",
      "description": "Check if something is a Node.js stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-stream@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b903e6f2472ce3b8f1dfc6ad01c593571ca5b506283d3ebccbd69661d57ac965d2c96f26cd26add132fa0a259d65e09d1772ab02fa55b671db4efe1137eaea75"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "temp-dir",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|temp-dir@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Get the real path of the system temp directory",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/temp-dir@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/temp-dir.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/temp-dir#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/temp-dir/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/temp-dir/-/temp-dir-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c591571066c6ed2342de2b700732374588eafdc121064c76849b8a18850e70450b9a4404c578876addb3fea908498b2e47e20aba68447ca29b579a979a120215"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/temp-dir"
        }
      ]
    },
    {
      "type": "library",
      "name": "gentle-fs",
      "version": "2.3.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|gentle-fs@2.3.1",
      "author": "Mike Sherov",
      "description": "Gentle Filesystem operations",
      "licenses": [
        {
          "license": {
            "id": "Artistic-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/gentle-fs@2.3.1",
      "externalReferences": [
        {
          "url": "git://github.com/npm/gentle-fs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/gentle-fs#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/gentle-fs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/gentle-fs/-/gentle-fs-2.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3a5c01070a8214f7239b7deb1760635be3ebebf965dbbe3597ec68a22c1309e697d8203566e7256afc8c05ed3f2a5476d7f5c6b2063a873110675e4174d6b5dd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/gentle-fs"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "cmd-shim",
          "version": "3.0.3",
          "bom-ref": "pug@2.0.4-tuxcare.2|gentle-fs@2.3.1|cmd-shim@3.0.3",
          "description": "Used in npm for command line application support",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cmd-shim@3.0.3",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/cmd-shim.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/cmd-shim#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/cmd-shim/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cmd-shim/-/cmd-shim-3.0.3.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "0ed1a0fb4c621614089ed4814732f67d14019e6b405705c80e8e10ab8e873e939b62abb131a652e2c6fcd94f671fdd6a26b968b02d706bd830af44322ff1f2a4"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/gentle-fs/node_modules/cmd-shim"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "npm-normalize-package-bin",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|npm-normalize-package-bin@1.0.1",
      "author": "Isaac Z. Schlueter",
      "description": "Turn any flavor of allowable package.json bin into a normalized object",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/npm-normalize-package-bin@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-normalize-package-bin.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/npm-normalize-package-bin#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/npm-normalize-package-bin/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/npm-normalize-package-bin/-/npm-normalize-package-bin-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "10f7da7e5e892f9feb53ea2de8fde04520a93c35b95662335fde7d39bd7ec92154bae6075877a45e9c1d51970a3f90be0d2e0612d74996ec018e7b0d0e5f9f48"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/npm-normalize-package-bin"
        }
      ]
    },
    {
      "type": "library",
      "name": "ini",
      "version": "1.3.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|ini@1.3.8",
      "author": "Isaac Z. Schlueter",
      "description": "An ini encoder/decoder for node",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ini@1.3.8",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/ini.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/ini#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/ini/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "255ff2ba0576bb35b988c4528990320ed41dfa7c6d5278de2edd1a70d770f7c90a2ebbee455c81f34b6c444384ef2bc65606a5859e913570a61079142812b17b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ini"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.clonedeep",
      "version": "4.5.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|lodash.clonedeep@4.5.0",
      "author": "John-David Dalton",
      "description": "The lodash method `_.cloneDeep` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.clonedeep@4.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.clonedeep/-/lodash.clonedeep-4.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1f9661085db9ae215df6e0795029152a8eb59b74bfc59935c78c00eb2a7f2f74453fa67f7871f5ca641c18ba3b27718c3df9b457fee6d6daf21ee195c69a8405"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.clonedeep"
        }
      ]
    },
    {
      "type": "library",
      "name": "normalize-package-data",
      "version": "2.5.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0",
      "author": "Meryn Stol",
      "description": "Normalizes data that can be found in package.json files.",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/normalize-package-data@2.5.0",
      "externalReferences": [
        {
          "url": "git://github.com/npm/normalize-package-data.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/normalize-package-data#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/normalize-package-data/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ff908c3774f44785d38f80dc19a7b1a3eae8652752156ff400e39344eae3c73086d70ad65c4b066d129ebe39482fe643138b19949af9103e185b4caa9a42be78"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/normalize-package-data"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "resolve",
          "version": "1.22.11",
          "bom-ref": "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0|resolve@1.22.11",
          "author": "James Halliday",
          "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/resolve@1.22.11",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/browserify/resolve.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/browserify/resolve#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/browserify/resolve/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/resolve/-/resolve-1.22.11.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "45fa80bcb9cc977d77afb73da1c941d478541007b37292e3cfde70147e0b56e864f4917faf6daa9953fd00c98e538bcc5fb43ca4df23c0d83f092a5d1673234d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/normalize-package-data/node_modules/resolve"
            }
          ]
        },
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/normalize-package-data/node_modules/semver"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "ssri",
      "version": "6.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|ssri@6.0.2",
      "author": "Kat Marchán",
      "description": "Standard Subresource Integrity library --  parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ssri@6.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/zkat/ssri.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zkat/ssri#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zkat/ssri/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ssri/-/ssri-6.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "71ea5b4aafe77852bbc41e80e74287374c470e8b58ceae7cc1609ae4b796aa73eb1c6f06cdf1233bfe0ef24a667065bea1ac64be110909681b80d938fd957ddd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ssri"
        }
      ]
    },
    {
      "type": "library",
      "name": "cli",
      "group": "@iarna",
      "version": "2.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@iarna/cli@2.2.0",
      "author": "Rebecca Turner",
      "description": "Some simple CLI scaffolding for promise returning applications.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40iarna/cli@2.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/iarna/cli.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/iarna/cli#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/iarna/cli/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@iarna/cli/-/cli-2.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7e7d5dc2142e583fceb8cfd7661684cb618e2f91ed6bf0e2b3566d111fc501efc12974c7a210f8b313dc61078f1d4626ae49c3fa257edee89cd0cf331fff6c25"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@iarna/cli"
        }
      ]
    },
    {
      "type": "library",
      "name": "byline",
      "version": "5.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|byline@5.0.0",
      "author": "John Hewson",
      "description": "simple line-by-line stream reader",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/byline@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jahewson/node-byline.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jahewson/node-byline",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jahewson/node-byline/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/byline/-/byline-5.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b3ac1e6c0cbe478491f1756e256b76576ac6be19eb87137ef52d7918db932b7c0a3ce5c517a44d73ef2e8365e11fedace1ffaeb9d1b891455899839058bda0d1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/byline"
        }
      ]
    },
    {
      "type": "library",
      "name": "node-gyp",
      "version": "4.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|node-gyp@4.0.0",
      "author": "Nathan Rajlich",
      "description": "Node.js native addon build tool",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/node-gyp@4.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/nodejs/node-gyp.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodejs/node-gyp#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodejs/node-gyp/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/node-gyp/-/node-gyp-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d978abc89f2c202368e9e8fc77489d5c310c29f55f14aee47a4182b4902e7a51ac607431863d772937fde6cc1308dd9d67fe254df67ce05bb7d63a8910482358"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/node-gyp"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "semver",
          "version": "5.3.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|node-gyp@4.0.0|semver@5.3.0",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.3.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "99f9a6dff1fdfbaecc0958b1d61f885d3a43c0bebbd742f21ee93bf9c582f53d66134ab3e221e187aaf8854db0ac84fd893b00002d97411bdf6e52f4dbc7292f"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/node-gyp/node_modules/semver"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "resolve-from",
      "version": "4.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|resolve-from@4.0.0",
      "author": "Sindre Sorhus",
      "description": "Resolve the path of a module like `require.resolve()` but from a given path",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/resolve-from@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/resolve-from.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/resolve-from#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/resolve-from/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/resolve-from/-/resolve-from-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a5bfcc6265ecb40932b11171f2988d235b4614d408140def904dc6ab812e035745ea01e9ffebe066ab021896a9bf2f0ddd0fb8a3b170beab8f25c9d9ed1632e2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/resolve-from"
        }
      ]
    },
    {
      "type": "library",
      "name": "slide",
      "version": "1.1.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|slide@1.1.6",
      "author": "Isaac Z. Schlueter",
      "description": "A flow control lib small enough to fit on in a slide presentation. Derived live at Oak.JS",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/slide@1.1.6",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/slide-flow-control.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/slide-flow-control#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/slide-flow-control/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/slide/-/slide-1.1.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "370aed8c283e959a2a84553c7cec25e1acb67a2f0f6aa081394577fde92d3d8f6daced72435a1711f987021280ad4554aff84e1efcb97fa01d3f5edd08cd3333"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/slide"
        }
      ]
    },
    {
      "type": "library",
      "name": "uid-number",
      "version": "0.0.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|uid-number@0.0.6",
      "author": "Isaac Z. Schlueter",
      "description": "Convert a username/group name to a uid/gid number",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/uid-number@0.0.6",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/uid-number.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/uid-number#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/uid-number/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/uid-number/-/uid-number-0.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "738eb51572258ecc02bac7199faef1abd3e9b3390f4fa46385e585413802c9a6c9ad3528cc495a9dbd1812abf6506824db8ed8a5c264141b9218dbc19695ccf7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/uid-number"
        }
      ]
    },
    {
      "type": "library",
      "name": "umask",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|umask@1.1.0",
      "author": "Sam Mikes",
      "description": "convert umask from string <-> number",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/umask@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/smikes/umask.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/smikes/umask",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/smikes/umask/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/umask/-/umask-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "944febc4e866892709bbd2fa453355801ff365b17ebc60b4fe9e83df19e401e3c8da8d2c332146f7aea24792a2e74388ff498d8b6c9a467c5f2ec3e611917f24"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/umask"
        }
      ]
    },
    {
      "type": "library",
      "name": "which",
      "version": "1.3.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|which@1.3.1",
      "author": "Isaac Z. Schlueter",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/which@1.3.1",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-which.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/node-which#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/node-which/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/which/-/which-1.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1f125d616ab53132106c9de7c3472ab2c1e84cd536ebb2a5ac3b866755989710d2b54b4a52139a266875d76fd36661f1c547ee26a3d748e9bbb43c9ab3439221"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/which"
        }
      ]
    },
    {
      "type": "library",
      "name": "hosted-git-info",
      "version": "2.8.9",
      "bom-ref": "pug@2.0.4-tuxcare.2|hosted-git-info@2.8.9",
      "author": "Rebecca Turner",
      "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hosted-git-info@2.8.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/hosted-git-info.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/hosted-git-info",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/hosted-git-info/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.8.9.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9b120301bf4bb26e83a0e27bc47fb9f97e32d4b53fe078b9d0bf42e6c22cc0adc9cd42d2e1bc24d45be374182f611e1bcd3e2db944220b5e451367f91db2ef63"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hosted-git-info"
        }
      ]
    },
    {
      "type": "library",
      "name": "osenv",
      "version": "0.1.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|osenv@0.1.5",
      "author": "Isaac Z. Schlueter",
      "description": "Look up environment settings specific to different operating systems",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/osenv@0.1.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/osenv.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/osenv#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/osenv/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/osenv/-/osenv-0.1.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d0259c08409d315736470dd4e70f598ea5fa81aeae6e4d710d52b1b4140f2bbc22b3fd05dabf53ea4e3274662179c97b614071055c612f9a22b0fb0dc403deda"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/osenv"
        }
      ]
    },
    {
      "type": "library",
      "name": "aproba",
      "version": "1.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|aproba@1.2.0",
      "author": "Rebecca Turner",
      "description": "A ridiculously light-weight argument validator (now browser friendly)",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/aproba@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/iarna/aproba.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/iarna/aproba",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/iarna/aproba/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/aproba/-/aproba-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "63d27a6635eda1887c4675d508c394fedb439a4d5a063ba7abdbced2d6b9c7ce560d08907d417db083c121375b8a2215701a34dc78b78ccc62801b6c75d95747"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/aproba"
        }
      ]
    },
    {
      "type": "library",
      "name": "JSONStream",
      "version": "1.3.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|JSONStream@1.3.5",
      "author": "Dominic Tarr",
      "description": "rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)",
      "licenses": [
        {
          "expression": "(MIT OR Apache-2.0)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/jsonstream@1.3.5",
      "externalReferences": [
        {
          "url": "git://github.com/dominictarr/JSONStream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/dominictarr/JSONStream",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dominictarr/JSONStream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/JSONStream/-/JSONStream-1.3.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "13e8abb8d398f1557db382446ded5a3449ba322b333d1aff51f707333d13421d415d2c472be01257547a5b81e98c1852792fb9e0f22c00c0819b00f4e8b2eca9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/JSONStream"
        }
      ]
    },
    {
      "type": "library",
      "name": "lru-cache",
      "version": "5.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
      "author": "Isaac Z. Schlueter",
      "description": "A cache object that deletes the least-recently-used items.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@5.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-lru-cache.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/node-lru-cache#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/node-lru-cache/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-5.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2a9340450037230bfe8d3034bad51555bae1f8996baf516fd1ee7a186cc014e5cdedd93f16f89a0d6f0b1e62b9d8395c1f858fda7ea023cbcdd5a7ac045828f7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lru-cache"
        }
      ]
    },
    {
      "type": "library",
      "name": "make-fetch-happen",
      "version": "4.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|make-fetch-happen@4.0.2",
      "author": "Kat Marchán",
      "description": "Opinionated, caching, retrying fetch client",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/make-fetch-happen@4.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/zkat/make-fetch-happen.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zkat/make-fetch-happen#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zkat/make-fetch-happen/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/make-fetch-happen/-/make-fetch-happen-4.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "60c26b0231d26ff068add96c0c471570fc936e224a933a8c7f8f0df1d009653f598dcb6b91be988384d8f52ab6030488409167e6a0412954d8b77bcfe453081c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/make-fetch-happen"
        }
      ]
    },
    {
      "type": "library",
      "name": "are-we-there-yet",
      "version": "1.1.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|are-we-there-yet@1.1.7",
      "author": "Rebecca Turner",
      "description": "Keep track of the overall completion of many disparate processes",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/are-we-there-yet@1.1.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/iarna/are-we-there-yet.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/iarna/are-we-there-yet",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/iarna/are-we-there-yet/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-1.1.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9f1c32e344ee322506a8cc911e0092599f45338540a113f8c546124efe48991a20fa1f722123db547ec7f1f012088cd89fdc2512fe33bc52fbb8a0cc085426de"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/are-we-there-yet"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "readable-stream",
          "version": "2.3.8",
          "bom-ref": "pug@2.0.4-tuxcare.2|are-we-there-yet@1.1.7|readable-stream@2.3.8",
          "description": "Streams3, a user-land copy of the stream library from Node.js",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@2.3.8",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f29d00524e173838087b04a2d25f04a63b3e1159d688aecda03204194d07844efe67263c0f520c63ba1dbb9951ac55c683bd4bd79286f10acf9ae9b8e514ed74"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/are-we-there-yet/node_modules/readable-stream"
            }
          ]
        },
        {
          "type": "library",
          "name": "isarray",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|are-we-there-yet@1.1.7|isarray@1.0.0",
          "author": "Julian Gruber",
          "description": "Array#isArray for older browsers",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isarray@1.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/isarray.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/isarray",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/isarray/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "54b82121634ce842d0ce8ef3c26720d0d99357258a623bc878cf37ca3a74c110d39949eb33aefc7d06dc281a3a9f6089105d2cce81bfff2b60f932a56bcf402d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/are-we-there-yet/node_modules/isarray"
            }
          ]
        },
        {
          "type": "library",
          "name": "safe-buffer",
          "version": "5.1.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|are-we-there-yet@1.1.7|safe-buffer@5.1.2",
          "author": "Feross Aboukhadijeh",
          "description": "Safer Node.js Buffer API",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/safe-buffer@5.1.2",
          "externalReferences": [
            {
              "url": "git://github.com/feross/safe-buffer.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/feross/safe-buffer",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/feross/safe-buffer/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/are-we-there-yet/node_modules/safe-buffer"
            }
          ]
        },
        {
          "type": "library",
          "name": "string_decoder",
          "version": "1.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|are-we-there-yet@1.1.7|string_decoder@1.1.1",
          "description": "The string_decoder module from Node core",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string_decoder@1.1.1",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/string_decoder.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/are-we-there-yet/node_modules/string_decoder"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "console-control-strings",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|console-control-strings@1.1.0",
      "author": "Rebecca Turner",
      "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning.  This is a subset of both ansi and vt100.  All control codes included work on both Windows & Unix-like OSes, except where noted.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/console-control-strings@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/iarna/console-control-strings.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/iarna/console-control-strings#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/iarna/console-control-strings/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/console-control-strings"
        }
      ]
    },
    {
      "type": "library",
      "name": "gauge",
      "version": "2.7.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|gauge@2.7.4",
      "author": "Rebecca Turner",
      "description": "A terminal based horizontal guage",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/gauge@2.7.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/iarna/gauge.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/iarna/gauge",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/iarna/gauge/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/gauge/-/gauge-2.7.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d78c7892373a9640f796dc39f3d93436b3c3e9c08d4c3e825a855436907ce7e0ebb4e368667f91ba0eb1654e51bd20b8f9364fc40e409c189b41802f667e351e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/gauge"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "string-width",
          "version": "1.0.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|gauge@2.7.4|string-width@1.0.2",
          "author": "Sindre Sorhus",
          "description": "Get the visual width of a string - the number of columns required to display it",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string-width@1.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/string-width.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/string-width#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/string-width/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "d17b15a502e75425c725fc84b3cb42d33a53548af93ca2ac42d913dbd230ba99cf4e3b4f990df14ffe32091105f6162457fdccde4cdc513480653e9aea1f35b7"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/gauge/node_modules/string-width"
            }
          ]
        },
        {
          "type": "library",
          "name": "strip-ansi",
          "version": "3.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|gauge@2.7.4|strip-ansi@3.0.1",
          "author": "Sindre Sorhus",
          "description": "Strip ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-ansi@3.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/strip-ansi.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/strip-ansi#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/strip-ansi/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "561ba64926c1a834cff29d992ca8f8d148c1095e3ebfc6d4484a546f82a34605a4f696ea185e111058fa2846a089d6f67ff33a0330b41261720cd19ac3d382ce"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/gauge/node_modules/strip-ansi"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-fullwidth-code-point",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|gauge@2.7.4|is-fullwidth-code-point@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Check if the character represented by a given Unicode code point is fullwidth",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "d69a94a918e484f27d9a236af52c0c7ddbe2ea504971de9e171bdf6a2bd085a1f74a08ac7e2bae76f167b5d28e9b1b9e7bfefb97e14f8caad08d6be63e35ab47"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/gauge/node_modules/is-fullwidth-code-point"
            }
          ]
        },
        {
          "type": "library",
          "name": "ansi-regex",
          "version": "2.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|gauge@2.7.4|ansi-regex@2.1.1",
          "author": "Sindre Sorhus",
          "description": "Regular expression for matching ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ansi-regex@2.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/ansi-regex.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "4c81a74e9768f84dfea42c8096e66fb440f9a79c02a8b75ecc2ca13d9cca3dcc6f169944b788be5bb38e3422a0799153dfecb935965f38e4bf05d71a9e6d4c60"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/gauge/node_modules/ansi-regex"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "chownr",
      "version": "1.1.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|chownr@1.1.4",
      "author": "Isaac Z. Schlueter",
      "description": "like `chown -R`",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/chownr@1.1.4",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/chownr.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/chownr#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/chownr/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/chownr/-/chownr-1.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8c9d1bab36b296626d567360cd37923acf033dabe96d8804aff6f460bf3fd863b7c4912122716684a3149c42508d9ba62bb297185854cbcf4faec25695a90156"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/chownr"
        }
      ]
    },
    {
      "type": "library",
      "name": "infer-owner",
      "version": "1.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|infer-owner@1.0.4",
      "author": "Isaac Z. Schlueter",
      "description": "Infer the owner of a path based on the owner of its nearest existing parent",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/infer-owner@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/infer-owner.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/infer-owner#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/infer-owner/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/infer-owner/-/infer-owner-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "202963f97cfde3e77b8ab1f9a91c9f2689ce75f4f3b836a27c4e993d67f1d0dd3efc04d909bb933eada9ac5979dbabab91077dd16c942888750df050da1333f4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/infer-owner"
        }
      ]
    },
    {
      "type": "library",
      "name": "minipass",
      "version": "2.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|minipass@2.9.0",
      "author": "Isaac Z. Schlueter",
      "description": "minimal implementation of a PassThrough stream",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minipass@2.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/minipass#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/minipass/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minipass/-/minipass-2.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c317d48e0f5679b1fe0940d7fc275b4658794a67d98b2fe1a64c5a448d7a63d5b9e8f6bbe6c5a077faef16295282b6ae0fd37217298fffe2455772b0cc8b097a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minipass"
        }
      ]
    },
    {
      "type": "library",
      "name": "mississippi",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
      "author": "max ogden",
      "description": "a collection of useful streams",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mississippi@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/maxogden/mississippi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/maxogden/mississippi#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/maxogden/mississippi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mississippi/-/mississippi-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c78ef54ac56352d051b5cbdde01cca13d9050beff64de5a0282830d1b65cc356fd9765f7417e6f096805f8a6996989bced2b3ffeb1e75abcaea43ae02ef99290"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mississippi"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "concat-stream",
          "version": "1.6.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|mississippi@3.0.0|concat-stream@1.6.2",
          "author": "Max Ogden",
          "description": "writable stream that concatenates strings or binary data and calls a callback with the result",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/concat-stream@1.6.2",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/maxogden/concat-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/maxogden/concat-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "http://github.com/maxogden/concat-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "dbb1c18212718e266d224dd872f9ffe246c993fd6e66e2457ee3c49ece8b684be9bc6d5fd214de6bc96296ba2eca8f6655cd8659d70467c38ba0699200396b0b"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/mississippi/node_modules/concat-stream"
            }
          ]
        },
        {
          "type": "library",
          "name": "through2",
          "version": "2.0.5",
          "bom-ref": "pug@2.0.4-tuxcare.2|mississippi@3.0.0|through2@2.0.5",
          "author": "Rod Vagg",
          "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/through2@2.0.5",
          "externalReferences": [
            {
              "url": "git+https://github.com/rvagg/through2.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/rvagg/through2#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/rvagg/through2/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/through2/-/through2-2.0.5.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "fe6ad1a1df31aa903e20748bc86090dacf123c78820c47902527a9d63a8b61e1140a53851b642c87ee0553a1bd55eaa9667196fd2bbc2d019ce182a78b9ad849"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/mississippi/node_modules/through2"
            }
          ]
        },
        {
          "type": "library",
          "name": "readable-stream",
          "version": "2.3.8",
          "bom-ref": "pug@2.0.4-tuxcare.2|mississippi@3.0.0|readable-stream@2.3.8",
          "description": "Streams3, a user-land copy of the stream library from Node.js",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@2.3.8",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f29d00524e173838087b04a2d25f04a63b3e1159d688aecda03204194d07844efe67263c0f520c63ba1dbb9951ac55c683bd4bd79286f10acf9ae9b8e514ed74"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/mississippi/node_modules/readable-stream"
            }
          ]
        },
        {
          "type": "library",
          "name": "isarray",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|mississippi@3.0.0|isarray@1.0.0",
          "author": "Julian Gruber",
          "description": "Array#isArray for older browsers",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isarray@1.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/isarray.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/isarray",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/isarray/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "54b82121634ce842d0ce8ef3c26720d0d99357258a623bc878cf37ca3a74c110d39949eb33aefc7d06dc281a3a9f6089105d2cce81bfff2b60f932a56bcf402d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/mississippi/node_modules/isarray"
            }
          ]
        },
        {
          "type": "library",
          "name": "safe-buffer",
          "version": "5.1.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|mississippi@3.0.0|safe-buffer@5.1.2",
          "author": "Feross Aboukhadijeh",
          "description": "Safer Node.js Buffer API",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/safe-buffer@5.1.2",
          "externalReferences": [
            {
              "url": "git://github.com/feross/safe-buffer.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/feross/safe-buffer",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/feross/safe-buffer/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/mississippi/node_modules/safe-buffer"
            }
          ]
        },
        {
          "type": "library",
          "name": "string_decoder",
          "version": "1.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|mississippi@3.0.0|string_decoder@1.1.1",
          "description": "The string_decoder module from Node core",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string_decoder@1.1.1",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/string_decoder.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/mississippi/node_modules/string_decoder"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "npm-pick-manifest",
      "version": "3.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|npm-pick-manifest@3.0.2",
      "author": "Kat Marchán",
      "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/npm-pick-manifest@3.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-pick-manifest.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/npm-pick-manifest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/npm-pick-manifest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/npm-pick-manifest/-/npm-pick-manifest-3.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c0da6b4cd83e5f99dffad0e2fa16e374784ce1b5fe98aaafe9798f87b079786f9063d54045f40f7c2107d35dc7e46a9f363e9e7bc223d9f83cca4d26ce9b3557"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/npm-pick-manifest"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|npm-pick-manifest@3.0.2|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/npm-pick-manifest/node_modules/semver"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "promise-inflight",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|promise-inflight@1.0.1",
      "author": "Rebecca Turner",
      "description": "One promise for multiple requests in flight to avoid async duplication",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/promise-inflight@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/iarna/promise-inflight.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/iarna/promise-inflight#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/iarna/promise-inflight/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/promise-inflight/-/promise-inflight-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "eb358fc8438569004961c18c1c1293289deee9306c9cc14e21949ae9c7b57bf66baec3a59c74476da6cc8cb88160aa7e9f8e17f5e508e9550f6ae9025c7b86e2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/promise-inflight"
        }
      ]
    },
    {
      "type": "library",
      "name": "promise-retry",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|promise-retry@1.1.1",
      "author": "IndigoUnited",
      "description": "Retries a function that returns a promise, leveraging the power of the retry module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/promise-retry@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/IndigoUnited/node-promise-retry.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/IndigoUnited/node-promise-retry#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/IndigoUnited/node-promise-retry/issues/",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/promise-retry/-/promise-retry-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4ad132da8b0faf6f28d7b6c85bbefa1adc0eebe43e33dccf8999187e8b1c89450c62a8e153f7dfc11007d33376faebc6c94b27f3f6080881d1ccb6cf69ca591b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/promise-retry"
        }
      ]
    },
    {
      "type": "library",
      "name": "protoduck",
      "version": "5.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|protoduck@5.0.1",
      "author": "Kat Marchán",
      "description": "Fancy duck typing for the most serious of ducks.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/protoduck@5.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/zkat/protoduck.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zkat/protoduck#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zkat/protoduck/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/protoduck/-/protoduck-5.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5b1a027830a8081639e4132f8f870012375550519159e77d6713e5a93298cb0d670c34d0e29aa69c830019f26583b0f1df9b81fccf8f1c93d39863af68268f4e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/protoduck"
        }
      ]
    },
    {
      "type": "library",
      "name": "unique-filename",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|unique-filename@1.1.1",
      "author": "Rebecca Turner",
      "description": "Generate a unique filename for use in temporary directories or caches.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/unique-filename@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/iarna/unique-filename.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/iarna/unique-filename",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/iarna/unique-filename/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/unique-filename/-/unique-filename-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "566a748c8a76967df95135eeaf2be3ce48c6751c9ff5bda54d7b9261488f9b345c977143b58a80c0e9d3264027803f525a19e82730db4cac1a3ab67e493b7135"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/unique-filename"
        }
      ]
    },
    {
      "type": "library",
      "name": "json-parse-even-better-errors",
      "version": "2.3.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|json-parse-even-better-errors@2.3.1",
      "author": "Kat Marchán",
      "description": "JSON.parse with context information on error",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/json-parse-even-better-errors@2.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/json-parse-even-better-errors.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/json-parse-even-better-errors#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/json-parse-even-better-errors/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/json-parse-even-better-errors/-/json-parse-even-better-errors-2.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c72170ca1ae8fc91287fa1a17b68b3d8d717a23dac96836c5abfd7b044432bfa223c27da36197938d7e9fa341d01945043420958dcc7f7321917b962f75921db"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/json-parse-even-better-errors"
        }
      ]
    },
    {
      "type": "library",
      "name": "babel-runtime",
      "version": "6.26.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|babel-runtime@6.26.0",
      "author": "Sebastian McKenzie",
      "description": "babel selfContained runtime",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/babel-runtime@6.26.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/babel/babel/tree/master#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/babel-runtime/-/babel-runtime-6.26.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "21328dbaadb02a55b57c983db125b9d9e7a9a1881906082f3801c2d2efc262efeac50f445734e10a047af419d25cb1e3cb67fb498e73690e32b7b1fd655c58da"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/babel-runtime"
        }
      ]
    },
    {
      "type": "library",
      "name": "esutils",
      "version": "2.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|esutils@2.0.3",
      "description": "utility box for ECMAScript language tools",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/esutils@2.0.3",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/estools/esutils.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/estools/esutils",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/estools/esutils/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "915b1ca97938382a7af126747648042958baffc8a3df4d0a0564c9ab7d8ffdd61e5934b02b8d56c93c5a94dd5e46603967d514fcb5fd0fb1564a657d480631ea"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/esutils"
        }
      ]
    },
    {
      "type": "library",
      "name": "to-fast-properties",
      "version": "1.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|to-fast-properties@1.0.3",
      "author": "Sindre Sorhus",
      "description": "Force V8 to use fast properties for an object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/to-fast-properties@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/to-fast-properties.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/to-fast-properties#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/to-fast-properties/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "971ad63fc7a3b2afbb1379cd8f06265013008233136684c8fac7413a9bcdca28de0cb6b6f4b527f506a85c01efe3e679efc85b9871c9299927cf156dbe8efba2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/to-fast-properties"
        }
      ]
    },
    {
      "type": "library",
      "name": "call-bound",
      "version": "1.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
      "author": "Jordan Harband",
      "description": "Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/call-bound@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/call-bound.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/call-bound#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/call-bound/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fb2b3df7b53dea9a382b1fc0069042aa103d12ec49690583420ef6f791f8841a61bf72198346e804abb0629b78617a7a319e4099942753fb72313951a5a49e8e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/call-bound"
        }
      ]
    },
    {
      "type": "library",
      "name": "gopd",
      "version": "1.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|gopd@1.2.0",
      "author": "Jordan Harband",
      "description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/gopd@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/gopd.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/gopd#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/gopd/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "65429187afe4505a0089302d4d83d9277870f70371c7e04804e8a39e51bd3e7ac9b027128ecd70cb20fabc9a5a62d827cc3aca6114aa7f738ee917daf77c6c46"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/gopd"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-tostringtag",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|has-tostringtag@1.0.2",
      "author": "Jordan Harband",
      "description": "Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-tostringtag@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/has-tostringtag.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/has-tostringtag#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/has-tostringtag/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-tostringtag/-/has-tostringtag-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "36a00307c5633c52ccd95d15bc751ec30c2cc3465605a21d828fa2787b4ade16ac2f3e2a78246361ca9f07a010ac182044aa69285f0be76fd5a9d56c3b8ec397"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-tostringtag"
        }
      ]
    },
    {
      "type": "library",
      "name": "hasown",
      "version": "2.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|hasown@2.0.2",
      "author": "Jordan Harband",
      "description": "A robust, ES3 compatible, \"has own property\" predicate.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hasown@2.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/hasOwn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/hasOwn#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/hasOwn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d21254f5208fbe633320175916a34f5d66ba76a87b59d1f470823dcbe0b24bcac6de72f8f01725adaf4798a8555541f23d6347e58ef10f0001edb7e04a391431"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hasown"
        }
      ]
    },
    {
      "type": "library",
      "name": "wrappy",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|wrappy@1.0.2",
      "author": "Isaac Z. Schlueter",
      "description": "Callback wrapping utility",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/wrappy.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/wrappy",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/wrappy/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/wrappy"
        }
      ]
    },
    {
      "type": "library",
      "name": "center-align",
      "version": "0.1.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|center-align@0.1.3",
      "author": "Jon Schlinkert",
      "description": "Center-align the text in a string.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/center-align@0.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/center-align.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/center-align",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/center-align/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/center-align/-/center-align-0.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "05acf768d7b681dd8b3f6aa4e54fac0e4fe6e284aec120dc05f6b24c24c1a16a5f2063b95c5c4f9a320b4082383468998c3e83a0323a91fee029ac647fbb3755"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/center-align"
        }
      ]
    },
    {
      "type": "library",
      "name": "right-align",
      "version": "0.1.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|right-align@0.1.3",
      "author": "Jon Schlinkert",
      "description": "Right-align the text in a string.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/right-align@0.1.3",
      "externalReferences": [
        {
          "url": "git://github.com/jonschlinkert/right-align.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/right-align",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/right-align/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/right-align/-/right-align-0.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "caa20db4bfc6eefb36bfe7452199855036e757215424529dea02b6d8a828e91e237c9185b62b0aca77160c350b8237ea7f801242e210ca327b5d9fb7696a6c02"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/right-align"
        }
      ]
    },
    {
      "type": "library",
      "name": "fast-deep-equal",
      "version": "3.1.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|fast-deep-equal@3.1.3",
      "author": "Evgeny Poberezkin",
      "description": "Fast deep equal",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/epoberezkin/fast-deep-equal.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/epoberezkin/fast-deep-equal#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/epoberezkin/fast-deep-equal/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7f7a90f68432f63d808417bf1fd542f75c0b98a042094fe00ce9ca340606e61b303bb04b2a3d3d1dce4760dcfd70623efb19690c22200da8ad56cd3701347ce1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fast-deep-equal"
        }
      ]
    },
    {
      "type": "library",
      "name": "fast-json-stable-stringify",
      "version": "2.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|fast-json-stable-stringify@2.1.0",
      "author": "James Halliday",
      "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/epoberezkin/fast-json-stable-stringify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/epoberezkin/fast-json-stable-stringify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "96177fc05f8b93df076684c2b6556b687b5f8795d88a32236a55dc93bb1a52db9a9d20f22ccc671e149710326a1f10fb9ac47c0f4b829aa964c23095f31bf01f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fast-json-stable-stringify"
        }
      ]
    },
    {
      "type": "library",
      "name": "json-schema-traverse",
      "version": "0.4.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|json-schema-traverse@0.4.1",
      "author": "Evgeny Poberezkin",
      "description": "Traverse JSON Schema passing each schema object to callback",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.4.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/epoberezkin/json-schema-traverse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/epoberezkin/json-schema-traverse#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/epoberezkin/json-schema-traverse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c5b6c21f9742614e53f0b704861ba1ec727cf075ee5b7aac237634cce64529f6441dca5688753f271ce4eb6f41aec69bfe63221d0b62f7030ffbce3944f7b756"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/json-schema-traverse"
        }
      ]
    },
    {
      "type": "library",
      "name": "uri-js",
      "version": "4.4.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|uri-js@4.4.1",
      "author": "Gary Court",
      "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/uri-js@4.4.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/garycourt/uri-js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/garycourt/uri-js",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/garycourt/uri-js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/uri-js/-/uri-js-4.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "eeb294cb2df7435c9cf7ca50d430262edc17d74f45ed321f5a55b561da3c5a5d628b549e1e279e8741c77cf78bd9f3172bacf4b3c79c2acf5fac2b8b26f9dd06"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/uri-js"
        }
      ]
    },
    {
      "type": "library",
      "name": "extsprintf",
      "version": "1.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|extsprintf@1.3.0",
      "description": "extended POSIX-style sprintf",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/extsprintf@1.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/davepacheco/node-extsprintf.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/davepacheco/node-extsprintf#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/davepacheco/node-extsprintf/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d7535dcfb36ffa6bc00b58f492d4daedf01bd2f2f21865feacc1cd05842f8900c65341f0ee585cb4900da9b3e1bbd9d5f7f8b34ff227b53819ec89bff4b26cf6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/extsprintf"
        }
      ]
    },
    {
      "type": "library",
      "name": "json-schema",
      "version": "0.4.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|json-schema@0.4.0",
      "author": "Kris Zyp",
      "description": "JSON Schema validation and specifications",
      "licenses": [
        {
          "expression": "(AFL-2.1 OR BSD-3-Clause)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/json-schema@0.4.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/kriszyp/json-schema.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kriszyp/json-schema#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kriszyp/json-schema/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/json-schema/-/json-schema-0.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7acf783379d321fb043e2b1169f6a4f870cb7c75e7281855def5397aa3dc4b77e5216a9cc495a05c75e27b2dd8ae968db1a9d8e5e8b55686046cece28eeabd04"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/json-schema"
        }
      ]
    },
    {
      "type": "library",
      "name": "verror",
      "version": "1.10.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|verror@1.10.0",
      "description": "richer JavaScript errors",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/verror@1.10.0",
      "externalReferences": [
        {
          "url": "git://github.com/davepacheco/node-verror.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/davepacheco/node-verror#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/davepacheco/node-verror/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "65929298300414e8a311104b92661f27ebe6937c3eee138b603364442b91b8c246126a9834234bc81045c162953217f068417758e774665c3ce94fd60bffa763"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/verror"
        }
      ]
    },
    {
      "type": "library",
      "name": "asn1",
      "version": "0.2.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|asn1@0.2.6",
      "author": "Joyent",
      "description": "Contains parsers and serializers for ASN.1 (currently BER only)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/asn1@0.2.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/joyent/node-asn1.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/joyent/node-asn1#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/joyent/node-asn1/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/asn1/-/asn1-0.2.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8b1fc5c4f9f43038dec89ee2ff2a07185b7f117e8bc8d6f148484f3d73833cbf8a07454f93ce9461f2f494c772f8a0a7bfe7e6bc8cf24b068ae423b0a956d64d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/asn1"
        }
      ]
    },
    {
      "type": "library",
      "name": "bcrypt-pbkdf",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|bcrypt-pbkdf@1.0.2",
      "description": "Port of the OpenBSD bcrypt_pbkdf function to pure JS",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/bcrypt-pbkdf@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/joyent/node-bcrypt-pbkdf.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/joyent/node-bcrypt-pbkdf#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/joyent/node-bcrypt-pbkdf/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a9e1485ed3f8312a22e8d2ea3b5d967ea011596b822a2d919fff6124b126b41e724cdafd0ea1569094427f6a92856ccf7803119ce802aead2c83f28bbf9112f7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/bcrypt-pbkdf"
        }
      ]
    },
    {
      "type": "library",
      "name": "dashdash",
      "version": "1.14.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|dashdash@1.14.1",
      "author": "Trent Mick",
      "description": "A light, featureful and explicit option parsing library.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/dashdash@1.14.1",
      "externalReferences": [
        {
          "url": "git://github.com/trentm/node-dashdash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/trentm/node-dashdash#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/trentm/node-dashdash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8d1162f140c6a3a8fea1d6621298dacd9696a846a5df0fdb6ac163407404c15b592460e9c5b1f531e625bb0092f17ab9c262c9a280e5320bd56ab9967c6338e2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/dashdash"
        }
      ]
    },
    {
      "type": "library",
      "name": "ecc-jsbn",
      "version": "0.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|ecc-jsbn@0.1.2",
      "author": "Jeremie Miller",
      "description": "ECC JS code based on JSBN",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ecc-jsbn@0.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/quartzjer/ecc-jsbn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/quartzjer/ecc-jsbn",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/quartzjer/ecc-jsbn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7a1f4efa1c111cd6c6e012d38c49779f0d38e029069b95fa2e86827fb2cfa7b514f10aede3b258362ea73d7f318d6f7b4ca18a9b5a2e72d834412a597bdaab9f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ecc-jsbn"
        }
      ]
    },
    {
      "type": "library",
      "name": "getpass",
      "version": "0.1.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|getpass@0.1.7",
      "author": "Alex Wilson",
      "description": "getpass for node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/getpass@0.1.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/arekinath/node-getpass.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/arekinath/node-getpass#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/arekinath/node-getpass/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d1fce3f49c4e2df27e5c62e147ccdedee9cdd0a642819c224920f3d7af151118caf1697c91549d72eda4b29778b38c2d01ad72feaad5462000d1672556cbb49e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/getpass"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsbn",
      "version": "0.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|jsbn@0.1.1",
      "author": "Tom Wu",
      "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsbn@0.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/andyperlitch/jsbn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/andyperlitch/jsbn#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/andyperlitch/jsbn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "51553d7626ead897055b140f03a282aa3e4ee3654e980637cd051f10ac54d0aa53197c0da028e45f57b5dde1cdbf0ff13f29edea9534ad9d61b63593353497b2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsbn"
        }
      ]
    },
    {
      "type": "library",
      "name": "tweetnacl",
      "version": "0.14.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|tweetnacl@0.14.5",
      "author": "TweetNaCl-js contributors",
      "description": "Port of TweetNaCl cryptographic library to JavaScript",
      "licenses": [
        {
          "license": {
            "id": "Unlicense",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tweetnacl@0.14.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/dchest/tweetnacl-js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://tweetnacl.js.org",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dchest/tweetnacl-js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2975c515d01b15763881e148c28c8d2be7f96756fbb307d70017cbec75c29a821630a5377664b6ebaef603811e42d0f32cacbb49799f06ee7526896f10ac2d18"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tweetnacl"
        }
      ]
    },
    {
      "type": "library",
      "name": "locate-path",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|locate-path@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Get the first path that exists on disk of multiple paths",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/locate-path@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/locate-path.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/locate-path#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/locate-path/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ec03bbe3cc169c884da80b9ab72d995879101d148d7cf548b0f21fc043963b6d8099aa15ad66af94e70c4799f34cb358be9dfa5f6db4fe669a46cade7351bae4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/locate-path"
        }
      ]
    },
    {
      "type": "library",
      "name": "environment",
      "group": "@jest",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@jest/environment@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jest/environment@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-environment",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jest/environment/-/environment-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e40d5096e4cf86f7483c56273b7b190b7b2690d7973d510bcfb8a43db8548f46d08c1d3b12813daad2eb7a6d786546167556b261bb235702222f858120c57869"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jest/environment"
        }
      ]
    },
    {
      "type": "library",
      "name": "istanbul-lib-coverage",
      "version": "2.0.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|istanbul-lib-coverage@2.0.5",
      "author": "Krishnan Anantheswaran",
      "description": "Data library for istanbul coverage objects",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-coverage@2.0.5",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://istanbul.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/istanbuljs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f1a5f39ee10f089bc69cc4917ede2e743443b5bd55de991090c308e4b23ee87b90cf9a10e09d94167d47f36ada037a89b7238b924c15a880814248e71ad9f998"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/istanbul-lib-coverage"
        }
      ]
    },
    {
      "type": "library",
      "name": "istanbul-lib-instrument",
      "version": "3.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|istanbul-lib-instrument@3.3.0",
      "author": "Krishnan Anantheswaran",
      "description": "Core istanbul API for JS code coverage",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-instrument@3.3.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://istanbul.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/istanbuljs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-3.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e679c8378be8e714191dd5e7a3f6035c9d06f88ddd026e178337d25533cb4298ffcc0576755e89bb2d3269fd74ff3ac9389787a0dddfada15ef9746ad9b15564"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/istanbul-lib-instrument"
        }
      ]
    },
    {
      "type": "library",
      "name": "istanbul-lib-report",
      "version": "2.0.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|istanbul-lib-report@2.0.8",
      "author": "Krishnan Anantheswaran",
      "description": "Base reporting library for istanbul",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-report@2.0.8",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://istanbul.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/istanbuljs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-2.0.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7c705e1b9ef71088a18406e5c20c6b49e9e9d036f2ead24c151fc7be57ab06cac24c3e5b914ba836d9f7815876f59092f36e1c18604f9fb4a0edc364fb6c54b1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/istanbul-lib-report"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "supports-color",
          "version": "6.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|istanbul-lib-report@2.0.8|supports-color@6.1.0",
          "author": "Sindre Sorhus",
          "description": "Detect whether a terminal supports color",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/supports-color@6.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/supports-color.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/supports-color#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/supports-color/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/supports-color/-/supports-color-6.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "a9ed637e6d4c83b36afcd4a1e97136e203d744e115b161f10b52c8c7ffd73650fd8b0ed86501a364d8d837bc466841ba88a740f04b4d156e91d208e7557a7ec1"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/istanbul-lib-report/node_modules/supports-color"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "istanbul-lib-source-maps",
      "version": "3.0.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|istanbul-lib-source-maps@3.0.6",
      "author": "Krishnan Anantheswaran",
      "description": "Source maps support for istanbul",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-source-maps@3.0.6",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://istanbul.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/istanbuljs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-3.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "478ecacccb43247e97e3f616f574f1fa3acb9d99ec716e15a4d37ed4f5624984de8cb54f5afee8a2ff83b9ff184123f255152fb9e42acf54dcb02ea6a286535f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/istanbul-lib-source-maps"
        }
      ]
    },
    {
      "type": "library",
      "name": "istanbul-reports",
      "version": "2.2.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|istanbul-reports@2.2.7",
      "author": "Krishnan Anantheswaran",
      "description": "istanbul reports",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/istanbul-reports@2.2.7",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://istanbul.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/istanbuljs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-2.2.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "baed45fcbd68e58e8bccf5525595cd3a80ff297a49b9ef5a78b45dd2c33db8c5df66fce8981d16c556a659be6e7bc900daf5561265bb106f80e67ddfd64a872a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/istanbul-reports"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-worker",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-worker@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-worker@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-worker",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-worker/-/jest-worker-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e753c4e2168c497707a219d231d338d9a9dbbd900d613a8caebe76b5528faaab0f24cce83fa15860356a6a15ff1eb0282842b3dee50fcd2bcab3d037a91e2257"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-worker"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "supports-color",
          "version": "6.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|jest-worker@24.9.0|supports-color@6.1.0",
          "author": "Sindre Sorhus",
          "description": "Detect whether a terminal supports color",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/supports-color@6.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/supports-color.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/supports-color#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/supports-color/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/supports-color/-/supports-color-6.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "a9ed637e6d4c83b36afcd4a1e97136e203d744e115b161f10b52c8c7ffd73650fd8b0ed86501a364d8d837bc466841ba88a740f04b4d156e91d208e7557a7ec1"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/jest-worker/node_modules/supports-color"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "node-notifier",
      "version": "5.4.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|node-notifier@5.4.5",
      "author": "Mikael Brevik",
      "description": "A Node.js module for sending notifications on native Mac, Windows (post and pre 8) and Linux (or Growl as fallback)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/node-notifier@5.4.5",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/mikaelbr/node-notifier.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mikaelbr/node-notifier#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mikaelbr/node-notifier/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/node-notifier/-/node-notifier-5.4.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b556c7b3b0f24cbb733a237bf22ccb03ce7346a07d36f1179007f4d78571de3b52be7ff1065e9b47c65889f8fe745705aca236d61b92420259e99b4bdc1e077d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/node-notifier"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|node-notifier@5.4.5|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/node-notifier/node_modules/semver"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "string-length",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|string-length@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Get the real length of a string - by correctly counting astral symbols and ignoring ansi escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/string-length@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/string-length.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/string-length#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/string-length/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/string-length/-/string-length-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4246b8d861ab4bc326dd267eedc1fc517888588f3aeff6ff67f7de412a50c7fadb7c1f141a49c611955a51030e5158feb2863a369580c62972eb71c8d4e72455"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/string-length"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "strip-ansi",
          "version": "4.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|string-length@2.0.0|strip-ansi@4.0.0",
          "author": "Sindre Sorhus",
          "description": "Strip ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-ansi@4.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/strip-ansi.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/strip-ansi#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/strip-ansi/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "e17689db341d0b344e6438af1152033e47109fc2cc1526bc923f06c5bfcb9f0ceff40f1572d359fa57e2bc2fec5778af5bc1252531115d9a0f051ad92a434aa3"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/string-length/node_modules/strip-ansi"
            }
          ]
        },
        {
          "type": "library",
          "name": "ansi-regex",
          "version": "3.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|string-length@2.0.0|ansi-regex@3.0.1",
          "author": "Sindre Sorhus",
          "description": "Regular expression for matching ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ansi-regex@3.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/ansi-regex.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f8ef4972df307fefa55f1c4573885cf0bb23692ab41c5cf32fb715b30f2944320f763283da64f8cad0d994bb92059e1c2ca6455c8acc18eec36d00ad30924c2b"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/string-length/node_modules/ansi-regex"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "babel-plugin-istanbul",
      "version": "5.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|babel-plugin-istanbul@5.2.0",
      "author": "Thai Pangsakulyanont @dtinth",
      "description": "A babel plugin that adds istanbul instrumentation to ES6 code",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-istanbul@5.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/istanbuljs/babel-plugin-istanbul.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/istanbuljs/babel-plugin-istanbul#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/babel-plugin-istanbul/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/babel-plugin-istanbul/-/babel-plugin-istanbul-5.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e4ba610b451203cb788b5cc2b636db35bea3263ffdf97e8fdfb41f8ab73fef4110df8c4a94c5be6b54471b0c4623e4b05a9370676ec7aafcc0a1b7aa697c2267"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/babel-plugin-istanbul"
        }
      ]
    },
    {
      "type": "library",
      "name": "convert-source-map",
      "version": "1.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|convert-source-map@1.9.0",
      "author": "Thorsten Lorenz",
      "description": "Converts a source-map from/to  different formats and allows adding/changing properties.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.9.0",
      "externalReferences": [
        {
          "url": "git://github.com/thlorenz/convert-source-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/thlorenz/convert-source-map",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/thlorenz/convert-source-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "012141ba9d0ccf5bb28888c035a9f58f32d06a68bdcf53e86126428a2616d857333db7a75dce3915974164bcce4feafafa2722b8432876d982b62fa18da024d0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/convert-source-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "pirates",
      "version": "4.0.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|pirates@4.0.7",
      "author": "Ari Porad",
      "description": "Properly hijack require, i.e., properly define require hooks and customizations",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pirates@4.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/danez/pirates.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/danez/pirates#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/danez/pirates/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pirates/-/pirates-4.0.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4dfc92aecff99e6f1f4090dc043b949e0dd53942ac77b4beceabdb3938865c77f15f8c0adf56ab77e86836ebe489c33fd981739690e000139ebca4ac0781bf14"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pirates"
        }
      ]
    },
    {
      "type": "library",
      "name": "throat",
      "version": "4.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|throat@4.1.0",
      "author": "ForbesLindesay",
      "description": "Throttle the parallelism of an asynchronous (promise returning) function / functions",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/throat@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ForbesLindesay/throat.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ForbesLindesay/throat#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ForbesLindesay/throat/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/throat/-/throat-4.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c025712c3705c70eee8c3c5a7890ba9df9765df1c9358b3cc946099ef320b4f10596db4ff6d1d27d152fdaf05ee82e2191514f5a83f53fa65c71b62399212428"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/throat"
        }
      ]
    },
    {
      "type": "library",
      "name": "anymatch",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|anymatch@2.0.0",
      "author": "Elan Shanker",
      "description": "Matches strings against configurable strings, globs, regular expressions, and/or functions",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/anymatch@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/micromatch/anymatch.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/micromatch/anymatch",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/micromatch/anymatch/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/anymatch/-/anymatch-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e6d78eb105800571c70453fdcb7b244b93f777f59f597a6fdc5529cbe2e8accacd61a4fda48e282cc417ee3cd0d8a9253691a9587cdd0974c34f66375c695907"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/anymatch"
        }
      ]
    },
    {
      "type": "library",
      "name": "fb-watchman",
      "version": "2.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|fb-watchman@2.0.2",
      "author": "Wez Furlong",
      "description": "Bindings for the Watchman file watching service",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fb-watchman@2.0.2",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/facebook/watchman.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://facebook.github.io/watchman/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/watchman/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fb-watchman/-/fb-watchman-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a79d7ad41a9bb826929c1f2321bcd01ce96982c3e62b9ac95437c328ef75031b39342d6ebb71d1426eb0b7d71df7ff86b504083b9dc97465d7a320e94c0b2060"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fb-watchman"
        }
      ]
    },
    {
      "type": "library",
      "name": "invariant",
      "version": "2.2.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|invariant@2.2.4",
      "author": "Andres Suarez",
      "description": "invariant",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/invariant@2.2.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/zertosh/invariant.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zertosh/invariant#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zertosh/invariant/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/invariant/-/invariant-2.2.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a6125f41506e689339ada3a926349f9220fa0696c213836cfff2da5e5eb0198b54058f379d64ba45ff6d5e6d9ef1568aeb42448d895d6cf89ffc0d81d42da034"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/invariant"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-serializer",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-serializer@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-serializer@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-serializer",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-serializer/-/jest-serializer-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0f1622a43afc3af7eb287dca7a5e8d7440f7397c63bf15d9d6e218d88f4e15b1a0faf524920ec01af8bae6a6e16d634fbc37245e6ccc3db2b7bb71da0cee3d6d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-serializer"
        }
      ]
    },
    {
      "type": "library",
      "name": "sane",
      "version": "4.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|sane@4.1.0",
      "author": "amasad",
      "description": "Sane aims to be fast, small, and reliable file system watcher.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/sane@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/amasad/sane.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/amasad/sane",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/amasad/sane/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/sane/-/sane-4.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8616f30204c85fc3bb4877e9d9cf3f91111f127e2a3bff6af02f5b7b263afadbd9f3b129a19de2d51204be9dbb601b309cd6d8f6659dea968a56629b0202df64"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/sane"
        }
      ]
    },
    {
      "type": "library",
      "name": "walker",
      "version": "1.0.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|walker@1.0.8",
      "author": "Naitik Shah",
      "description": "A simple directory tree walker.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/walker@1.0.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/daaku/nodejs-walker.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/daaku/nodejs-walker",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/daaku/nodejs-walker/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/walker/-/walker-1.0.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b6cffc13c9796fb918d2f9562dec0e9035cc98f74b7155781a63902f2c6e4acc0826cc1e78566d02c305ee4d4db33cfe4d8050ae56119b33a7af7f7ccb525e99"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/walker"
        }
      ]
    },
    {
      "type": "library",
      "name": "code-frame",
      "group": "@babel",
      "version": "7.27.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/code-frame@7.27.1",
      "author": "The Babel Team",
      "description": "Generate errors that contain a code frame that point to source locations.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/code-frame@7.27.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-code-frame",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-code-frame",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues?utf8=%E2%9C%93&q=is%3Aissue+is%3Aopen",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.27.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "72343b66543432fddbe3b84006e4debf24ee60de22fa5a09286795f5f95c0a020adfb7025d187e2f56ddde20479729deae143b0610a49f604f6d050bfab1aa16"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/code-frame"
        }
      ]
    },
    {
      "type": "library",
      "name": "stack-utils",
      "group": "@types",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|@types/stack-utils@1.0.1",
      "description": "TypeScript definitions for stack-utils",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40types/stack-utils@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@types/stack-utils/-/stack-utils-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "978d81820a6947accb9a97d4e9fabd1c46b6a063c423ccab48f2f71884e37d1227a696056a139b6c840e40add41b1127c90a65b592da3deef9d38e8d39942293"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@types/stack-utils"
        }
      ]
    },
    {
      "type": "library",
      "name": "stack-utils",
      "version": "1.0.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|stack-utils@1.0.5",
      "author": "James Talmage",
      "description": "Captures and cleans stack traces",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stack-utils@1.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/tapjs/stack-utils.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tapjs/stack-utils#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tapjs/stack-utils/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stack-utils/-/stack-utils-1.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "299893cee5770a74a74af80c46b0115428fe1edeeb31b6ae1832b42dd545446c9e9f07729696a3029e10d22e925fcac499b4e930c7faaf2ab681bf293ead9681"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stack-utils"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "escape-string-regexp",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|stack-utils@1.0.5|escape-string-regexp@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Escape RegExp special characters",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/escape-string-regexp@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/escape-string-regexp.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/escape-string-regexp#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/escape-string-regexp/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "529cdc2c25e895459c36ee47b5530761d5c98c0ae3b05f42d1a367aae658638b96fd5bb49a2cb96285af6d5df8e476ae56f700527a51ba130c72a4dc18e636fb"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/stack-utils/node_modules/escape-string-regexp"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "browser-resolve",
      "version": "1.11.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|browser-resolve@1.11.3",
      "author": "Roman Shtylman",
      "description": "resolve which handles browser field support in package.json",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browser-resolve@1.11.3",
      "externalReferences": [
        {
          "url": "git://github.com/shtylman/node-browser-resolve.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/shtylman/node-browser-resolve#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/shtylman/node-browser-resolve/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browser-resolve/-/browser-resolve-1.11.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7b10e2d4161607feab68a1e60d30a27107d392ac0de5f8a83055788fc06c7cc5384760cafd07d97caee439592658234035fd2c9e4073a86a802416a8f6064c75"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browser-resolve"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-pnp-resolver",
      "version": "1.2.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-pnp-resolver@1.2.3",
      "description": "plug'n'play resolver for Webpack",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-pnp-resolver@1.2.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/arcanis/jest-pnp-resolver.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/arcanis/jest-pnp-resolver",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/arcanis/jest-pnp-resolver/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-pnp-resolver/-/jest-pnp-resolver-1.2.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fb7369c10127468201b71e1fca16e54033e0248d07d48108917ed284b5233c603b4ed513bc8d6888a8b7491e28051d21421411f349785807b946b5c1c16300f3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-pnp-resolver"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-docblock",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-docblock@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-docblock@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-docblock",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-docblock/-/jest-docblock-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1750e37690cc24c03570de877b414d60d665a37c9898eb5152792dad3f50dfb9e36330b95846837666f29c8832d0bfc8bd7bef82c1bc3acaa12cf5d3a5f99900"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-docblock"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-leak-detector",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-leak-detector@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-leak-detector@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-leak-detector",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-leak-detector/-/jest-leak-detector-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b58905203b222931b06f6146d70f215fd5746946f6a2df3363fda7160d3cedd51a81ea27c35ceb2cc3f85bacec44ee7d74f91348a89ef83e2b84cb8ff67466ac"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-leak-detector"
        }
      ]
    },
    {
      "type": "library",
      "name": "source-map-support",
      "version": "0.5.21",
      "bom-ref": "pug@2.0.4-tuxcare.2|source-map-support@0.5.21",
      "description": "Fixes stack traces for files with source maps",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/source-map-support@0.5.21",
      "externalReferences": [
        {
          "url": "git+https://github.com/evanw/node-source-map-support.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/evanw/node-source-map-support#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/evanw/node-source-map-support/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b811d4dcbddccec232617297f3c7ddac6a2fc5d482a13183459e92617b524712d95331e0e4fffae87b7aba85251eef4466877e8a75e12a8dea420c17513ff2d7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/source-map-support"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-mock",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-mock@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-mock@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-mock",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-mock/-/jest-mock-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dc111837959b4aaf7077e4b22c3112ec01e78c7f40fd1381c26cfb976cbea25f8db5214ef03622101ce83b509e15cf5af03632d7410ee1d0c556fff0377ce5d7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-mock"
        }
      ]
    },
    {
      "type": "library",
      "name": "strip-bom",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|strip-bom@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Strip UTF-8 byte order mark (BOM) from a string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/strip-bom@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/strip-bom.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-bom#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-bom/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bdabc03115ce80154d17a9f210498bdc304ad7d891a437282305beb3043e09b1a2bbb963bbab7e264940d4c1f07a85ad69d82de0849552c5cbc83ab7e1d75cc0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/strip-bom"
        }
      ]
    },
    {
      "type": "library",
      "name": "types",
      "group": "@babel",
      "version": "7.28.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/types@7.28.5",
      "author": "The Babel Team",
      "description": "Babel Types is a Lodash-esque utility library for AST nodes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/types@7.28.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-types",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-types",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues?utf8=%E2%9C%93&q=is%3Aissue+label%3A%22pkg%3A%20types%22+is%3Aopen",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/types/-/types-7.28.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a90e66e3c788fcc14b4393f1423e0f15aa6b8f20932c8dfb12558c98db342bc2e4ddd55e39d36907792cf2373bc8ce420e6542ef778c564fedae4ddf826ad4a4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/types"
        }
      ]
    },
    {
      "type": "library",
      "name": "expect",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|expect@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/expect@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/expect",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/expect/-/expect-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c2f540c7c5c8a25dd9e66f73bd95e2c99390fac449a8d4c89bab068dd5a569921eba94063b759b608fb5e43fc0984c19cb02fac2d2646c06c9b7390e7c1b91d1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/expect"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-diff",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-diff@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-diff@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-diff",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-diff/-/jest-diff-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a8c7eb4ecf007491368aaad3a7487387b9137763d05abb05ca3f6d391a0a9aedf6c633e3784e0dca35510f3f326d8c2a4b68a4f0de21b08a62553c857a8da505"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-diff"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-matcher-utils",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-matcher-utils@24.9.0",
      "description": "A set of utility functions for expect and related packages",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-matcher-utils@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-matcher-utils",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-matcher-utils/-/jest-matcher-utils-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "399cf6217b2ee9e6a2300c1eebb7354fee6d500b50c90c76eff10c1246c50068b0e76b41f5e9beb866f3a5c81856903cc25d2197128f671ae5cb809753f1a31c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-matcher-utils"
        }
      ]
    },
    {
      "type": "library",
      "name": "natural-compare",
      "version": "1.4.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|natural-compare@1.4.0",
      "author": "Lauri Rooden",
      "description": "Compare strings containing a mix of letters and numbers in the way a human being would in sort order.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/natural-compare@1.4.0",
      "externalReferences": [
        {
          "url": "git://github.com/litejs/natural-compare-lite.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/litejs/natural-compare-lite#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/litejs/natural-compare-lite/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "396343f1e8b756d342f61ed5eb4a9f7f7495a1b1ebf7de824f0831b9b832418129836f7487d2746eec8408d3497b19059b9b0e6a38791b5d7a45803573c64c4b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/natural-compare"
        }
      ]
    },
    {
      "type": "library",
      "name": "arr-diff",
      "version": "4.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|arr-diff@4.0.0",
      "author": "Jon Schlinkert",
      "description": "Returns an array with only the unique values from the first array, by excluding all values from additional arrays using strict equality for comparisons.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/arr-diff@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/arr-diff.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/arr-diff",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/arr-diff/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/arr-diff/-/arr-diff-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "615210f368193c605e6d057f6bc75aaf8022b73090b348e35f030f6659695cc6868d73d85546b04b142b46c8e18eea7257112f6c781498884a565343fa3d3690"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/arr-diff"
        }
      ]
    },
    {
      "type": "library",
      "name": "array-unique",
      "version": "0.3.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|array-unique@0.3.2",
      "author": "Jon Schlinkert",
      "description": "Remove duplicate values from an array. Fastest ES5 implementation.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/array-unique@0.3.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/array-unique.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/array-unique",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/array-unique/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/array-unique/-/array-unique-0.3.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4a57915a387d254b9ddb01f584fb3dad9059df71fa4fd1ce88bd2ec069c6c7d16913ac0a1b27d6ba099b904388b3aa96ad9860d0b59e2f388bac4c10261b3999"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/array-unique"
        }
      ]
    },
    {
      "type": "library",
      "name": "braces",
      "version": "2.3.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|braces@2.3.2",
      "author": "Jon Schlinkert",
      "description": "Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/braces@2.3.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/micromatch/braces.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/micromatch/braces",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/micromatch/braces/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/braces/-/braces-2.3.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "68d75b9e3f4ff0f8dd5d4e326da58b2b6205de373f1280d86c2ec06b35bab68dd346c7d7c6c702f545ce07988388442b93221b5a9d922d075ae3e4006bb9dcdf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/braces"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "extend-shallow",
          "version": "2.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|braces@2.3.2|extend-shallow@2.0.1",
          "author": "Jon Schlinkert",
          "description": "Extend an object with the properties of additional objects. node.js/javascript util.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/extend-shallow@2.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/extend-shallow.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/extend-shallow",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/extend-shallow/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "cc29d3b65c4da0088373782a636698016171ed759689ab2e1762bc31ee566cdf28b4729350a0708cfb4da51b3fadb5199bb2b158068d8fb3f56bfa79d866d5ba"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/braces/node_modules/extend-shallow"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-extendable",
          "version": "0.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|braces@2.3.2|is-extendable@0.1.1",
          "author": "Jon Schlinkert",
          "description": "Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-extendable@0.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/is-extendable.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extendable",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extendable/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "e413142cda1bd6f8055fa123430e62cd60f1ade7162bd00cef6aee80daf44c595d30e8b47e3e8993ecde288b74c468f87047d0209b61e30dce296389e1ff8017"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/braces/node_modules/is-extendable"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "define-property",
      "version": "2.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|define-property@2.0.2",
      "author": "Jon Schlinkert",
      "description": "Define a non-enumerable property on an object. Uses Reflect.defineProperty when available, otherwise Object.defineProperty.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/define-property@2.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/define-property.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/define-property",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/define-property/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/define-property/-/define-property-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8f02b6515e1c9cfa5b706efe55101129364f516a30c1703c6f31f934feae774a1e031c983ee1995000bb84cba0a42773e01792665d8397d93ae821c9ff8e9961"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/define-property"
        }
      ]
    },
    {
      "type": "library",
      "name": "extend-shallow",
      "version": "3.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|extend-shallow@3.0.2",
      "author": "Jon Schlinkert",
      "description": "Extend an object with the properties of additional objects. node.js/javascript util.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/extend-shallow@3.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/extend-shallow.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/extend-shallow",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/extend-shallow/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-3.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0706396f9425e3ea99a1e7e0323d8d526c7eb5e8554c7fca7f8935644b4e1cd15c9b6c12c4c468f7dda5e97dd32209e2d9e6554d9f39c4c3a3177d5fc19023e9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/extend-shallow"
        }
      ]
    },
    {
      "type": "library",
      "name": "extglob",
      "version": "2.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|extglob@2.0.4",
      "author": "Jon Schlinkert",
      "description": "Extended glob support for JavaScript. Adds (almost) the expressive power of regular expressions to glob patterns.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/extglob@2.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/micromatch/extglob.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/micromatch/extglob",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/micromatch/extglob/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/extglob/-/extglob-2.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3666fa4179042ecb81af6e02252922968e941c781b7a42b95226607c4e941c3dc46f6ed80baa03f9b85c4feb49e9c97c766b20750c675a572bcbc92c04804ba7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/extglob"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "define-property",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|extglob@2.0.4|define-property@1.0.0",
          "author": "Jon Schlinkert",
          "description": "Define a non-enumerable property on an object.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/define-property@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/define-property.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/define-property",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/define-property/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/define-property/-/define-property-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "7194d82855aca6df6366c32c716a3cb1cff995b3c2f50d0de6704b81bf9877dd7988bdee741d6e1604b707c602c7ae94547ab4d7c0c0545a1e7bbc7e83182078"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/extglob/node_modules/define-property"
            }
          ]
        },
        {
          "type": "library",
          "name": "extend-shallow",
          "version": "2.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|extglob@2.0.4|extend-shallow@2.0.1",
          "author": "Jon Schlinkert",
          "description": "Extend an object with the properties of additional objects. node.js/javascript util.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/extend-shallow@2.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/extend-shallow.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/extend-shallow",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/extend-shallow/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "cc29d3b65c4da0088373782a636698016171ed759689ab2e1762bc31ee566cdf28b4729350a0708cfb4da51b3fadb5199bb2b158068d8fb3f56bfa79d866d5ba"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/extglob/node_modules/extend-shallow"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-extendable",
          "version": "0.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|extglob@2.0.4|is-extendable@0.1.1",
          "author": "Jon Schlinkert",
          "description": "Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-extendable@0.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/is-extendable.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extendable",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extendable/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "e413142cda1bd6f8055fa123430e62cd60f1ade7162bd00cef6aee80daf44c595d30e8b47e3e8993ecde288b74c468f87047d0209b61e30dce296389e1ff8017"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/extglob/node_modules/is-extendable"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "fragment-cache",
      "version": "0.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|fragment-cache@0.2.1",
      "author": "Jon Schlinkert",
      "description": "A cache for managing namespaced sub-caches",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fragment-cache@0.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/fragment-cache.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/fragment-cache",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/fragment-cache/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fragment-cache/-/fragment-cache-0.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "18c0406d6f5a9ed07c8994472e81b0d1bdc700db79edd8996053bf1cbd491880b53232ab766871beb25bba99d5be9cacd33b33ef2040a57750c9f7a92a5cb690"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fragment-cache"
        }
      ]
    },
    {
      "type": "library",
      "name": "kind-of",
      "version": "6.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|kind-of@6.0.3",
      "author": "Jon Schlinkert",
      "description": "Get the native type of a value.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/kind-of@6.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/kind-of.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/kind-of",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/kind-of/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "75c4b5ba5fbdb66783f794fec76f3f7a12e077d98435adcbb2f0d3b739b7bf20443bb44fa6dbc00feb78e165576948d305172ba45785942f160abb94478e7a87"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/kind-of"
        }
      ]
    },
    {
      "type": "library",
      "name": "nanomatch",
      "version": "1.2.13",
      "bom-ref": "pug@2.0.4-tuxcare.2|nanomatch@1.2.13",
      "author": "Jon Schlinkert",
      "description": "Fast, minimal glob matcher for node.js. Similar to micromatch, minimatch and multimatch, but complete Bash 4.3 wildcard support only (no support for exglobs, posix brackets or braces)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/nanomatch@1.2.13",
      "externalReferences": [
        {
          "url": "git+https://github.com/micromatch/nanomatch.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/micromatch/nanomatch",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/micromatch/nanomatch/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/nanomatch/-/nanomatch-1.2.13.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7e9a1ed93d116c7c014c150e7ed01f04f683122d3ab9f6946a2d2613a627d6469c7374a74c4adf6ff87e5fde155f323ae2b2851d82265d2bddc061829b03aa08"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/nanomatch"
        }
      ]
    },
    {
      "type": "library",
      "name": "object.pick",
      "version": "1.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|object.pick@1.3.0",
      "author": "Jon Schlinkert",
      "description": "Returns a filtered copy of an object with only the specified keys, similar to `_.pick` from lodash / underscore.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/object.pick@1.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/object.pick.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/object.pick",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/object.pick/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/object.pick/-/object.pick-1.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b6a6bf50ccbf082a189a3f87e6a734eeabd22fd76a72cfd6644359d496ed5819404cffa254e7bbefc804e8c4a28e7c829ce4730ee5fa854f8b038499d3d62315"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/object.pick"
        }
      ]
    },
    {
      "type": "library",
      "name": "regex-not",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|regex-not@1.0.2",
      "author": "Jon Schlinkert",
      "description": "Create a javascript regular expression for matching everything except for the given string.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/regex-not@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/regex-not.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/regex-not",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/regex-not/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/regex-not/-/regex-not-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "27a4838d4803c508f936eb273ad745c43c0dffe1d6ca447c1842f072d27b99daa1732cb5c44738491147517bf14e9ebad586952808df44b67d702a92ead9f7d8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/regex-not"
        }
      ]
    },
    {
      "type": "library",
      "name": "snapdragon",
      "version": "0.8.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|snapdragon@0.8.2",
      "author": "Jon Schlinkert",
      "description": "Fast, pluggable and easy-to-use parser-renderer factory.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/snapdragon@0.8.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/snapdragon.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/snapdragon",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/snapdragon/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/snapdragon/-/snapdragon-0.8.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "16dc8e9d637fc021d355738cc2f4afdba77e928e6f5a52030face8509ecb5bcbe1f99042f107658ef7913fe72b36bb41c22a04516cbfe1d32d6c18c0e22a0d96"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/snapdragon"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "debug",
          "version": "2.6.9",
          "bom-ref": "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|debug@2.6.9",
          "author": "TJ Holowaychuk",
          "description": "small debugging utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/debug@2.6.9",
          "externalReferences": [
            {
              "url": "git://github.com/visionmedia/debug.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/visionmedia/debug#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/visionmedia/debug/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/snapdragon/node_modules/debug"
            }
          ]
        },
        {
          "type": "library",
          "name": "define-property",
          "version": "0.2.5",
          "bom-ref": "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|define-property@0.2.5",
          "author": "Jon Schlinkert",
          "description": "Define a non-enumerable property on an object.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/define-property@0.2.5",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/define-property.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/define-property",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/define-property/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "46bec00e34197a771e54e00aa29e802e49110261f50381b1f6157fed9ba33d4376ae4013a853b42592d92276c08e9658a09d60531f0c44c4159187a671b3124c"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/snapdragon/node_modules/define-property"
            }
          ]
        },
        {
          "type": "library",
          "name": "extend-shallow",
          "version": "2.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|extend-shallow@2.0.1",
          "author": "Jon Schlinkert",
          "description": "Extend an object with the properties of additional objects. node.js/javascript util.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/extend-shallow@2.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/extend-shallow.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/extend-shallow",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/extend-shallow/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "cc29d3b65c4da0088373782a636698016171ed759689ab2e1762bc31ee566cdf28b4729350a0708cfb4da51b3fadb5199bb2b158068d8fb3f56bfa79d866d5ba"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/snapdragon/node_modules/extend-shallow"
            }
          ]
        },
        {
          "type": "library",
          "name": "source-map",
          "version": "0.5.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|source-map@0.5.7",
          "author": "Nick Fitzgerald",
          "description": "Generates and consumes source maps",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/source-map@0.5.7",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/mozilla/source-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mozilla/source-map",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mozilla/source-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "2dbae624e31449d115c482af75c273402fa74217bc1546504d7432ebe23be6c90d827dcea10d03640f189c56bb829f2daad2f728f7f5926a344790e802979219"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/snapdragon/node_modules/source-map"
            }
          ]
        },
        {
          "type": "library",
          "name": "ms",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|ms@2.0.0",
          "description": "Tiny milisecond conversion utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ms@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/zeit/ms.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zeit/ms#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zeit/ms/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "4e9a7ad0fe885090d3b8eabfe59f1c76c93326e8dfc2a7ce4e4af02308fb211212a679099d3e92c89e0f08f9c63281630bd75d85a979295218b40b7dee2c74e4"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/snapdragon/node_modules/ms"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-descriptor",
          "version": "0.1.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|is-descriptor@0.1.7",
          "author": "Jon Schlinkert",
          "description": "Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-descriptor@0.1.7",
          "externalReferences": [
            {
              "url": "git+https://github.com/inspect-js/is-descriptor.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/inspect-js/is-descriptor",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/inspect-js/is-descriptor/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "0b782b653bce6de375c6e7787115a5dfae8e3176538f4f871b293886f7e9c78647b753dbeb400d497a822bba5d3937944294731020524e986abc3ed4fa5db612"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/snapdragon/node_modules/is-descriptor"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-extendable",
          "version": "0.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|is-extendable@0.1.1",
          "author": "Jon Schlinkert",
          "description": "Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-extendable@0.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/is-extendable.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extendable",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extendable/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "e413142cda1bd6f8055fa123430e62cd60f1ade7162bd00cef6aee80daf44c595d30e8b47e3e8993ecde288b74c468f87047d0209b61e30dce296389e1ff8017"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/snapdragon/node_modules/is-extendable"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "to-regex",
      "version": "3.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|to-regex@3.0.2",
      "author": "Jon Schlinkert",
      "description": "Generate a regex from a string or array of strings.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/to-regex@3.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/to-regex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/to-regex",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/to-regex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/to-regex/-/to-regex-3.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "156b6578d02d67f2a2daab6a7a3d825d339ac8e1fd6c70d017e438f15a56c835e36d8c40e18cfc883077d735ce05494e1c72a27436ea195ad352f40c3e604607"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/to-regex"
        }
      ]
    },
    {
      "type": "library",
      "name": "ansi-regex",
      "version": "4.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|ansi-regex@4.1.1",
      "author": "Sindre Sorhus",
      "description": "Regular expression for matching ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@4.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/ansi-regex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/ansi-regex#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/ansi-regex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-4.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "20b96fe24ff77fabdf4383a83f6006be2ace92d950f7c6442f593d15a423c5adcbd5a6c181bb930c074f3a9bdb1a7702d014d542b97e38cf316462bab565edee"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ansi-regex"
        }
      ]
    },
    {
      "type": "library",
      "name": "istanbul-lib-report",
      "group": "@types",
      "version": "3.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|@types/istanbul-lib-report@3.0.3",
      "description": "TypeScript definitions for istanbul-lib-report",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40types/istanbul-lib-report@3.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/istanbul-lib-report",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/istanbul-lib-report",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@types/istanbul-lib-report/-/istanbul-lib-report-3.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3509fb00742793f4522cec6b05b1b224cfda550fa98e3e470a06ac1717342bf2a1a004df43fe3b032525d79236c815298a18e66acf9af952413aa79cac51feb8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@types/istanbul-lib-report"
        }
      ]
    },
    {
      "type": "library",
      "name": "yargs-parser",
      "group": "@types",
      "version": "21.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|@types/yargs-parser@21.0.3",
      "description": "TypeScript definitions for yargs-parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40types/yargs-parser@21.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/yargs-parser",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/yargs-parser",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@types/yargs-parser/-/yargs-parser-21.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "238abd414f4c42fe2810ecf8b401c9b4dcf5730b8bc67d85df171cda257959da8b3e95278f7d1a52ec6dd660316131bea1ef0264c57ffbaad4e12e20443ceab5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@types/yargs-parser"
        }
      ]
    },
    {
      "type": "library",
      "name": "color-convert",
      "version": "1.9.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|color-convert@1.9.3",
      "author": "Heather Arthur",
      "description": "Plain color conversion functions",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/color-convert@1.9.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/Qix-/color-convert.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Qix-/color-convert#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Qix-/color-convert/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "41f014b5dfaf15d02d150702f020b262dd5f616c52a8088ad9c483eb30c1f0dddca6c10102f471a7dcce1a0e86fd21c7258013f3cfdacff22e0c600bb0d55b1a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/color-convert"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-flag",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|has-flag@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Check if argv has a specific flag",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-flag@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/has-flag.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/has-flag#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/has-flag/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b0a25fd7e71e401af848c92f427043343b5fe135e95615466ad7aed2df75f1b977d059db1369b8bcd2d7f9559efdda6395bf87ba0198cd6eee4171fdf073c463"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-flag"
        }
      ]
    },
    {
      "type": "library",
      "name": "generator",
      "group": "@babel",
      "version": "7.28.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/generator@7.28.5",
      "author": "The Babel Team",
      "description": "Turns an AST into code.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/generator@7.28.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-generator",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-generator",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues?utf8=%E2%9C%93&q=is%3Aissue+label%3A%22pkg%3A%20generator%22+is%3Aopen",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/generator/-/generator-7.28.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dc4c0b161677f09e15c883fa58db6dda451d5bd76891703d0abe08548147b82a59dc7f3f6053a5e498d91e2b2b9f57c04cf06628aa97cc316f87d7d4c07cfa09"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/generator"
        }
      ]
    },
    {
      "type": "library",
      "name": "helper-compilation-targets",
      "group": "@babel",
      "version": "7.27.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/helper-compilation-targets@7.27.2",
      "author": "The Babel Team",
      "description": "Helper functions on Babel compilation targets",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-compilation-targets@7.27.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-helper-compilation-targets",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/babel/babel#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/helper-compilation-targets/-/helper-compilation-targets-7.27.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dbed6d8465145968cb4d84c76562b59fc6206b48a3073d5702151770acbcd6b77983aca1ee11aa329e39bfb71a7526c41dcf46dce4efe394b29de44dde9b380d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/helper-compilation-targets"
        }
      ]
    },
    {
      "type": "library",
      "name": "helper-module-transforms",
      "group": "@babel",
      "version": "7.28.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/helper-module-transforms@7.28.3",
      "author": "The Babel Team",
      "description": "Babel helper functions for implementing ES6 module transformations",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-module-transforms@7.28.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-helper-module-transforms",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-helper-module-transforms",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/helper-module-transforms/-/helper-module-transforms-7.28.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "832b5751bb3c936b174bd3e7429b73e68d109e92cbe754b001220e458e97681285f3c9ec393d19c3db332ea9521900cfff84e58c1003e72f7ca765357ea91db3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/helper-module-transforms"
        }
      ]
    },
    {
      "type": "library",
      "name": "helpers",
      "group": "@babel",
      "version": "7.28.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/helpers@7.28.4",
      "author": "The Babel Team",
      "description": "Collection of helper functions used by Babel transforms.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helpers@7.28.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-helpers",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-helpers",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/helpers/-/helpers-7.28.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1c5379f4c9905c61d5c9869d28b56e998b00f5d045ba7fe5758c62a448f3038d7dea3a4b65df148c41012e46c492f7d8ade0ea2616716005853edadf84da63e3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/helpers"
        }
      ]
    },
    {
      "type": "library",
      "name": "parser",
      "group": "@babel",
      "version": "7.28.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/parser@7.28.5",
      "author": "The Babel Team",
      "description": "A JavaScript parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/parser@7.28.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-parser",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-parser",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues?utf8=%E2%9C%93&q=is%3Aissue+label%3A%22pkg%3A+parser+%28babylon%29%22+is%3Aopen",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/parser/-/parser-7.28.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "28a054d5519847b391af702de4702d510f935774b34425e603ff0e7436622c3048671572cd7bb3b4f8df2dddc15753d10101823165921d884bd05f1de6e1c10d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/parser"
        }
      ]
    },
    {
      "type": "library",
      "name": "template",
      "group": "@babel",
      "version": "7.27.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/template@7.27.2",
      "author": "The Babel Team",
      "description": "Generate an AST from a string template.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/template@7.27.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-template",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-template",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues?utf8=%E2%9C%93&q=is%3Aissue+label%3A%22pkg%3A%20template%22+is%3Aopen",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/template/-/template-7.27.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2cf0d9f39684272612775f3f0e48cd878ff2d67b641392b05075938aa811c6bbae64bd85d72b879628151cbbdc1d8daf3075edb4a169267e8bc1f23b730ece0f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/template"
        }
      ]
    },
    {
      "type": "library",
      "name": "traverse",
      "group": "@babel",
      "version": "7.28.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/traverse@7.28.5",
      "author": "The Babel Team",
      "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/traverse@7.28.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-traverse",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-traverse",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues?utf8=%E2%9C%93&q=is%3Aissue+label%3A%22pkg%3A%20traverse%22+is%3Aopen",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/traverse/-/traverse-7.28.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4c20a3e2de7953dd24865624555ff44df9099009148378d9140dcd79beee9d94fc08fa24ee28917da5f417e5a7a96aadecec613a7d2e04a5c2c3895b2fc5b469"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/traverse"
        }
      ]
    },
    {
      "type": "library",
      "name": "remapping",
      "group": "@jridgewell",
      "version": "2.3.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|@jridgewell/remapping@2.3.5",
      "author": "Justin Ridgewell",
      "description": "Remap sequential sourcemaps through transformations to point at the original source code",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/remapping@2.3.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/jridgewell/sourcemaps.git#packages/remapping",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/remapping",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jridgewell/sourcemaps/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jridgewell/remapping/-/remapping-2.3.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2c8f6effe95a606e03b354c3292256d983eb22571560ec22d9f502eb1078de5b9e0a383157895f7ce0990ad605887e9334e5feb50297c7ded3e082876e1c8711"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jridgewell/remapping"
        }
      ]
    },
    {
      "type": "library",
      "name": "debug",
      "version": "4.4.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|debug@4.4.3",
      "author": "Josh Junon",
      "description": "Lightweight debugging utility for Node.js and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/debug@4.4.3",
      "externalReferences": [
        {
          "url": "git://github.com/debug-js/debug.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/debug-js/debug#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/debug-js/debug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/debug/-/debug-4.4.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "446c305a7c10be455f6af295b76d8518bc3ec5849dcc04709b4aeee83853540dee994e6165cdbc57790ee2cb6062bcab4e52e9baf808f468a28e5b408cd6dca8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/debug"
        }
      ]
    },
    {
      "type": "library",
      "name": "gensync",
      "version": "1.0.0-beta.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|gensync@1.0.0-beta.2",
      "author": "Logan Smyth",
      "description": "Allows users to use generators in order to write common functions that can be both sync or async.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/gensync@1.0.0-beta.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/loganfsmyth/gensync.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/loganfsmyth/gensync",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/loganfsmyth/gensync/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/gensync/-/gensync-1.0.0-beta.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "de137b35ab2462f3032d0639e609d6dcd43e99eb0401ea53aa583e5446e3ef3cea10c055361cdc19861ea85a3f4e5633e9e42215ca751dcb0264efa71a04bcce"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/gensync"
        }
      ]
    },
    {
      "type": "library",
      "name": "json5",
      "version": "2.2.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|json5@2.2.3",
      "author": "Aseem Kishore",
      "description": "JSON for Humans",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/json5@2.2.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/json5/json5.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://json5.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/json5/json5/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/json5/-/json5-2.2.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5e63967bb7b21d81f5e1c2dd54fa3283e18e1f7ad85fef8aa73af2949c125bdf2ddcd93e53c5ce97c15628e830b7375bf255c67facd8c035337873167f16acca"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/json5"
        }
      ]
    },
    {
      "type": "library",
      "name": "babel__core",
      "group": "@types",
      "version": "7.20.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|@types/babel__core@7.20.5",
      "description": "TypeScript definitions for @babel/core",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40types/babel__core@7.20.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/babel__core",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/babel__core",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@types/babel__core/-/babel__core-7.20.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "aa8429ad9bf3e70405270303a9eb1e4575afdeba8cbe18296d715f5725a16f1f57e3b3ce200ea2ffe75779f12664aa0080e69375a22035232a30853ad72472cc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@types/babel__core"
        }
      ]
    },
    {
      "type": "library",
      "name": "babel-preset-jest",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|babel-preset-jest@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/babel-preset-jest@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/babel-preset-jest",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/babel-preset-jest/-/babel-preset-jest-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8b34d4ba11384cc7d344f17dd9f1700f641f7576995b4f2abd64c5088e7557cad6e71d3452e3e07376a34685a87d73aec637dc38ce73cd262c412dc7f0a18202"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/babel-preset-jest"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsdom",
      "version": "11.12.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jsdom@11.12.0",
      "description": "A JavaScript implementation of many web standards",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsdom@11.12.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jsdom/jsdom.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jsdom/jsdom#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jsdom/jsdom/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsdom/-/jsdom-11.12.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cbc3f1e37a32881335dd9735cfbf3416b7cd2c90974cbe3411696dcbf2d752d723ca44413602e50a3597a5f48f065da2bfe37b92840df9dbeab331d9813fc58f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsdom"
        }
      ]
    },
    {
      "type": "library",
      "name": "co",
      "version": "4.6.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|co@4.6.0",
      "description": "generator async control flow goodness",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/co@4.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/tj/co.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tj/co#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tj/co/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/co/-/co-4.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4156f474ce47bc6fae6b18ad9bcc0e365ee396dc7c76a85f537dc372ab4e65c2d25482920c32c38bbfb42db00a8b223c843f6ee369b66315d290c1964e169e71"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/co"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-generator-fn",
      "version": "2.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-generator-fn@2.1.0",
      "author": "Sindre Sorhus",
      "description": "Check if something is a generator function",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-generator-fn@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-generator-fn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-generator-fn#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-generator-fn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-generator-fn/-/is-generator-fn-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "713201e323d82ff1abc3411a4b3012ce0e9b072f60a82a1fbd637ca244e1018231289642fae7654409866ccd172de9e21094acf2e1201cf1ae1d27b55ec38b49"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-generator-fn"
        }
      ]
    },
    {
      "type": "library",
      "name": "jest-each",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jest-each@24.9.0",
      "author": "Matt Phillips",
      "description": "Parameterised tests for Jest",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jest-each@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/jest-each",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jest-each/-/jest-each-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "38d8b447806f5b8e5cc3cb362ebc7c6206de5cbd68090ff0203c26b0cdc2a8cfe795b94d08f9a70b720f42531b44566edf029d43653c06a33a961dcb27906ca2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jest-each"
        }
      ]
    },
    {
      "type": "library",
      "name": "react-is",
      "version": "16.13.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|react-is@16.13.1",
      "description": "Brand checking of React Elements.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/react-is@16.13.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/react.git#packages/react-is",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://reactjs.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/react/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/react-is/-/react-is-16.13.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "db87baca71361fe38ab7892ab0ebcd77c901a55eb9ce8c5b038055b04381dc0455590922fc31f3694a02e4ab8e37f06271c0da0824d906e39c7d9b3bd2447c6d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/react-is"
        }
      ]
    },
    {
      "type": "library",
      "name": "call-bind",
      "version": "1.0.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
      "author": "Jordan Harband",
      "description": "Robustly `.call.bind()` a function",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/call-bind@1.0.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/call-bind.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/call-bind#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/call-bind/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a0a95214c70cc29520d9e767921438e78c1f5a253fba5dc29097bf3c41dc4caba25fa4696de854885317bb5dc76a5199c5f530090cd91bbe3b617067d629bdc3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/call-bind"
        }
      ]
    },
    {
      "type": "library",
      "name": "define-data-property",
      "version": "1.1.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|define-data-property@1.1.4",
      "author": "Jordan Harband",
      "description": "Define a data property on an object. Will fall back to assignment in an engine without descriptors.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/define-data-property@1.1.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/define-data-property.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/define-data-property#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/define-data-property/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/define-data-property/-/define-data-property-1.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ac132f23396903cbfa13e489668a3ef87018aac2eb920ecc49f2229cc3c5866928af0ed7f9d39754942cf904faf731a4cccc9f0e720c3765a2775f8d6cbdd3f8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/define-data-property"
        }
      ]
    },
    {
      "type": "library",
      "name": "define-properties",
      "version": "1.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|define-properties@1.2.1",
      "author": "Jordan Harband",
      "description": "Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/define-properties@1.2.1",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/define-properties.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/define-properties#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/define-properties/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/define-properties/-/define-properties-1.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f109902aa10048b7799f1d14d41d6890b1256d4baeb6d27f0276264576db6c60d687ab92db4f048c3e17aaafc8f702bbbb4bfa3b4f178535a7b795ed11b47a0e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/define-properties"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-errors",
      "version": "1.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
      "author": "Jordan Harband",
      "description": "A simple cache for a few of the JS Error constructors.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-errors@1.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/es-errors.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/es-errors#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/es-errors/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "65fe47d8ac6ddb18d3bdb26f3f66562c4202c40ea3fa1026333225ca9cb8c5c060d6f2959f1f3d5b2d066d2fa47f9730095145cdd0858765d20853542d2e9cb3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-errors"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-object-atoms",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|es-object-atoms@1.1.1",
      "author": "Jordan Harband",
      "description": "ES Object-related atoms: Object, ToObject, RequireObjectCoercible",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-object-atoms@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/es-object-atoms.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/es-object-atoms#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/es-object-atoms/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "146807da1f3328d8a6f658e3edd6a79053dc20220af42a796e6f9cda041261e3e1a5a1b9f9eb2b2ce0e2848a2b9fe3dee85189cd6857428b4fbfbde34da95d5c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-object-atoms"
        }
      ]
    },
    {
      "type": "library",
      "name": "for-each",
      "version": "0.3.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|for-each@0.3.5",
      "author": "Raynos",
      "description": "A better forEach",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/for-each@0.3.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/Raynos/for-each.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Raynos/for-each",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Raynos/for-each/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/for-each/-/for-each-0.3.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "74ac75d9e442548cea0b1146a65c8528930fbcb11682636d52ba53889211e6ef7bcc48511bcc92aed6e83c7657c7b75a2f1415ae5eb8ddc4f36da6f6b64423c6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/for-each"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-intrinsic",
      "version": "1.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0",
      "author": "Jordan Harband",
      "description": "Get and robustly cache all JS language-level intrinsics at first require time",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-intrinsic@1.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/get-intrinsic.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/get-intrinsic#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/get-intrinsic/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f5f4a349aa2cfdf448548a7ec5226513a95fc21112ecb36d29a08121a987b23af69dad418800493e8d263a38f3f062435116ab9823c6a9a89583999f8dbf7c09"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-intrinsic"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-proto",
      "version": "1.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|has-proto@1.2.0",
      "author": "Jordan Harband",
      "description": "Does this environment have the ability to get the [[Prototype]] of an object on creation with `__proto__`?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-proto@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/has-proto.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/has-proto#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/has-proto/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-proto/-/has-proto-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2882fb7903df1d0442f3e5e5b9a230ec11d4c30a8bd7d6d09f887336076bfb5c17a14d0a2a3eabb9fbb8ee5858eca6c94760ba4faf8f7f237411aef09124bea9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-proto"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-symbols",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|has-symbols@1.1.0",
      "author": "Jordan Harband",
      "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-symbols@1.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/has-symbols.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/has-symbols#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/has-symbols/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d5c0cd77027625aa2199bdec8383a629a301c2e0b8f2c6278b91d4c360efb02f0b8c64cb2bd87e79bd57e91cae3877b8853d142c25baf22a26863528294aa53d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-symbols"
        }
      ]
    },
    {
      "type": "library",
      "name": "object.getownpropertydescriptors",
      "version": "2.1.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|object.getownpropertydescriptors@2.1.8",
      "author": "Jordan Harband",
      "description": "ES2017 spec-compliant shim for `Object.getOwnPropertyDescriptors` that works in ES5.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/object.getownpropertydescriptors@2.1.8",
      "externalReferences": [
        {
          "url": "git://github.com/es-shims/object.getownpropertydescriptors.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/object.getownpropertydescriptors#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/object.getownpropertydescriptors/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/object.getownpropertydescriptors/-/object.getownpropertydescriptors-2.1.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "aa41c819ee2ad2549832fd172384ac053273dd66944612ef77494a4a0b55b8eb09da4ae0e1280cc373c845014ca74ef28bef94477b1eda691c2eab0136905bfc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/object.getownpropertydescriptors"
        }
      ]
    },
    {
      "type": "library",
      "name": "safe-array-concat",
      "version": "1.1.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|safe-array-concat@1.1.3",
      "author": "Jordan Harband",
      "description": "`Array.prototype.concat`, but made safe by ignoring Symbol.isConcatSpreadable",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/safe-array-concat@1.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/safe-array-concat.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/safe-array-concat#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/safe-array-concat/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/safe-array-concat/-/safe-array-concat-1.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "014466e5fd236043b27418fb550955bc3ae378582d8437441791f574ffba98da685ce328d6ab90a89e30bc90f2459f7ea4ede4196a0e766574f1c4afd9a255e9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/safe-array-concat"
        }
      ]
    },
    {
      "type": "library",
      "name": "wrap-ansi",
      "version": "5.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|wrap-ansi@5.1.0",
      "author": "Sindre Sorhus",
      "description": "Wordwrap a string with ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/wrap-ansi@5.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/wrap-ansi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/wrap-ansi#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/wrap-ansi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-5.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "402d7f88dff6fd13d52798d82bc046b6d8f9cfcdcb9922a6bdbbeb5cf3422d94846f7d8a2950c90e5fcc3add8dd35a94d87fc593311af4f2ada3506a0e3b5ded"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/wrap-ansi"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "string-width",
          "version": "3.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|wrap-ansi@5.1.0|string-width@3.1.0",
          "author": "Sindre Sorhus",
          "description": "Get the visual width of a string - the number of columns required to display it",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string-width@3.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/string-width.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/string-width#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/string-width/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string-width/-/string-width-3.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "bda7dcbfa2a3559292833d3aa0cfc7e860c1ac0b73f2f76141a9068c522f36b1c0eb2dc7085d422272f2f902eaf1d4c93d0d5bf8a0d4a8315cb647515b8e1ed7"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/wrap-ansi/node_modules/string-width"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "emoji-regex",
      "version": "7.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|emoji-regex@7.0.3",
      "author": "Mathias Bynens",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/emoji-regex@7.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/mathiasbynens/emoji-regex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://mths.be/emoji-regex",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mathiasbynens/emoji-regex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-7.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0b004b444210ecbbd8141d16c91bf086ae4de6a3e173a3cc8c3e9b620805948e58c83825fb4bf1ab95476cc385a8b83b85f5b39aef13e59d50a1f8664c8848b4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/emoji-regex"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-fullwidth-code-point",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-fullwidth-code-point@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Check if the character represented by a given Unicode code point is fullwidth",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "547b2400a60cf117d2157c1e7b9b7971b3793d97aad56ae1eaa7796e4ca25c87fa51070deb0fc0d1e5ccf6beadf1df8660e87ea3a6618849dbf3c2cdfd8f26db"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-fullwidth-code-point"
        }
      ]
    },
    {
      "type": "library",
      "name": "boom",
      "version": "2.10.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|boom@2.10.1",
      "description": "HTTP-friendly error objects",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/boom@2.10.1",
      "externalReferences": [
        {
          "url": "git://github.com/hapijs/boom.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hapijs/boom#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hapijs/boom/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/boom/-/boom-2.10.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "29b89911af7fbe87cd7152571b07565a7db9ade4375777470566d2d3b153177fd339e84b9e6f46121255e13e99bc63e44a1469994a98c27682ae48f49919cfe9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/boom"
        }
      ]
    },
    {
      "type": "library",
      "name": "cryptiles",
      "version": "2.0.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|cryptiles@2.0.5",
      "description": "General purpose crypto utilities",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cryptiles@2.0.5",
      "externalReferences": [
        {
          "url": "git://github.com/hapijs/cryptiles.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hapijs/cryptiles#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hapijs/cryptiles/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cryptiles/-/cryptiles-2.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1453792b0a6fbd04d34b98563f1ad4f3f404e2441473abb065cae794c04df36b7532002dabc9a7a03c08341972f5376bd36b1e788221b5d17e507d5f781606a2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cryptiles"
        }
      ]
    },
    {
      "type": "library",
      "name": "hoek",
      "version": "2.16.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|hoek@2.16.3",
      "description": "General purpose node utilities",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hoek@2.16.3",
      "externalReferences": [
        {
          "url": "git://github.com/hapijs/hoek.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hapijs/hoek#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hapijs/hoek/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hoek/-/hoek-2.16.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "57a630d6b21c615ff826c9e0823054d25e0aafe117869c2a5d1bac10d5355f1eaba34d081cf1d83729c2b814ce6403e5af700098bbdc847f48ecdfd551dbcec1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hoek"
        }
      ]
    },
    {
      "type": "library",
      "name": "sntp",
      "version": "1.0.9",
      "bom-ref": "pug@2.0.4-tuxcare.2|sntp@1.0.9",
      "author": "Eran Hammer",
      "description": "SNTP Client",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "acknowledgement": "declared",
            "url": "http://github.com/hueniverse/sntp/raw/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/sntp@1.0.9",
      "externalReferences": [
        {
          "url": "git://github.com/hueniverse/sntp.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hueniverse/sntp#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hueniverse/sntp/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/sntp/-/sntp-1.0.9.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "edb8153809cf8f75e3aca639efb4bea6e08a18246552b72b11db0c7915e583d1a17f975fff1362eac38d51ae375ab1d47774e324117b3b4e23628898d0555ad0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/sntp"
        }
      ]
    },
    {
      "type": "library",
      "name": "source-map-resolve",
      "version": "0.5.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|source-map-resolve@0.5.3",
      "author": "Simon Lydell",
      "description": "Resolve the source map and/or sources for a generated file.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/source-map-resolve@0.5.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/lydell/source-map-resolve.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lydell/source-map-resolve#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lydell/source-map-resolve/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/source-map-resolve/-/source-map-resolve-0.5.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1edcfe467b175a4e7e3f6b25c79261dd0ebabe1423d429659b4cef9da63df3e345c7e0efd8217f7f93bfb7cc7e29a35dadd200b2bb8dce887f2a989a95ba809f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/source-map-resolve"
        }
      ]
    },
    {
      "type": "library",
      "name": "urix",
      "version": "0.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|urix@0.1.0",
      "author": "Simon Lydell",
      "description": "Makes Windows-style paths more unix and URI friendly.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/urix@0.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lydell/urix.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lydell/urix#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lydell/urix/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/urix/-/urix-0.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "026d68bac02148b05e07d706ffb93baf6474ce3e74b834656473c66dace2779b3dae517517f40a60e6c429222e9d28c83a4259ab04512e9bdec2312433ba52aa"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/urix"
        }
      ]
    },
    {
      "type": "library",
      "name": "cosmiconfig",
      "version": "5.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|cosmiconfig@5.2.1",
      "author": "David Clark",
      "description": "Find and load configuration from a package.json property, rc file, or CommonJS module",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cosmiconfig@5.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/davidtheclark/cosmiconfig.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/davidtheclark/cosmiconfig#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/davidtheclark/cosmiconfig/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-5.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1fae60b17a3548a8dff339ab27aede264f1a211295e5f7f60f8b8a6480594a16e1192a449ac40e3d6fd228c2988524eba91eee7f2e913faf6b3e881d68f87f90"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cosmiconfig"
        }
      ]
    },
    {
      "type": "library",
      "name": "dot-prop",
      "version": "4.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|dot-prop@4.2.1",
      "author": "Sindre Sorhus",
      "description": "Get, set, or delete a property from a nested object using a dot path",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/dot-prop@4.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/dot-prop.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/dot-prop#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/dot-prop/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/dot-prop/-/dot-prop-4.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "974a78fa622e248b9ad268711a88786be88d2fd6e678ae43be749541ae93d0e86b5666846b55d2717e44b5cebbdc578f089380aeaff83dad9c2c63835164cf39"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/dot-prop"
        }
      ]
    },
    {
      "type": "library",
      "name": "glob-parent",
      "version": "3.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|glob-parent@3.1.0",
      "author": "Elan Shanker",
      "description": "Strips glob magic from a string to provide the parent directory path",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/glob-parent@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/es128/glob-parent.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es128/glob-parent",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es128/glob-parent/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-3.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "13c024ff6f9d658e9f9f3951efeb9e5af86c1f54a31ebe238ecb38612fe1e29cb8e2363d3212bf54575a6490160f3e816cbdb529eb5e2b1152169abc392e6054"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/glob-parent"
        }
      ]
    },
    {
      "type": "library",
      "name": "load-json-file",
      "version": "4.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|load-json-file@4.0.0",
      "author": "Sindre Sorhus",
      "description": "Read and parse a JSON file",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/load-json-file@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/load-json-file.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/load-json-file#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/load-json-file/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/load-json-file/-/load-json-file-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2b1f2131a9235f4ded8864cb008749fa52f486d2a75e311937a864feda337ff58eb9819d64126b67eac22516d50ae82c8c1de330b9fdef8e8db1021fe558c133"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/load-json-file"
        }
      ]
    },
    {
      "type": "library",
      "name": "cross-spawn",
      "version": "6.0.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|cross-spawn@6.0.6",
      "author": "André Cruz",
      "description": "Cross platform child_process#spawn and child_process#spawnSync",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cross-spawn@6.0.6",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/moxystudio/node-cross-spawn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/moxystudio/node-cross-spawn",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/moxystudio/node-cross-spawn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-6.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "56a094ba171dd6207e76cbfc8313edb5be62661fc3d22b9b48fdb5837e8a5dd12e7fa2392628a87ac5158e909d1d5f4c65151f54596fc2d214c8f7f1a39b6bb7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cross-spawn"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|cross-spawn@6.0.6|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/cross-spawn/node_modules/semver"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "npm-run-path",
      "version": "2.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|npm-run-path@2.0.2",
      "author": "Sindre Sorhus",
      "description": "Get your PATH prepended with locally installed binaries",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/npm-run-path@2.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/npm-run-path.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/npm-run-path#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/npm-run-path/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "949c596254f80d6fdb454b45875310216aa62f041f0319ea586e0784476332592b2589c99f426baf6bb79a0c6a696b1d88173be936244c6fe686b9d84eecdf1f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/npm-run-path"
        }
      ]
    },
    {
      "type": "library",
      "name": "strip-eof",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|strip-eof@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Strip the End-Of-File (EOF) character from a string/buffer",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/strip-eof@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/strip-eof.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-eof#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-eof/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/strip-eof/-/strip-eof-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ec50b01869b1f260f9c5077744f52f9d2a545c7337056bb38eda43e135ec7dc67d10be1acef55552c7056300fd9f1f0a87eb82042d345c1b40ca4a0c1f04e1f1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/strip-eof"
        }
      ]
    },
    {
      "type": "library",
      "name": "proto-list",
      "version": "1.2.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|proto-list@1.2.4",
      "author": "Isaac Z. Schlueter",
      "description": "A utility for managing a prototype chain",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/proto-list@1.2.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/proto-list.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/proto-list#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/proto-list/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/proto-list/-/proto-list-1.2.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bed2bff786a4c6c4cc85ed3f71b7e947eb323eeb3372ec21a958c9ab6e82b8d0e01468faf36a1105738fe4c269bf6afb26d13c32c89ea4622abef3930709f6bc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/proto-list"
        }
      ]
    },
    {
      "type": "library",
      "name": "cmd-shim",
      "version": "2.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|cmd-shim@2.1.0",
      "description": "Used in npm for command line application support",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cmd-shim@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/cmd-shim.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/cmd-shim#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/cmd-shim/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cmd-shim/-/cmd-shim-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0390b40b27f61fcb0ab07a97d2dbc85915f0e7f3cafbedc37349436ecba0afdd2738408b2ee48f6a1550046f298268225e09bf4f305632a236ad6759c0776e03"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cmd-shim"
        }
      ]
    },
    {
      "type": "library",
      "name": "read-cmd-shim",
      "version": "1.0.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|read-cmd-shim@1.0.5",
      "author": "Rebecca Turner",
      "description": "Figure out what a cmd-shim is pointing at. This acts as the equivalent of fs.readlink.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/read-cmd-shim@1.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/read-cmd-shim.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/read-cmd-shim#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/read-cmd-shim/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/read-cmd-shim/-/read-cmd-shim-1.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bf9c82a90ffba242a865990141401f4ec437b1526d5dd35f6cf9c8e5c71ea69a311152d803793e56d576a2691ea3c312f78242cb87d2894c2544103009544f50"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/read-cmd-shim"
        }
      ]
    },
    {
      "type": "library",
      "name": "array-uniq",
      "version": "1.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|array-uniq@1.0.3",
      "author": "Sindre Sorhus",
      "description": "Create an array without duplicates",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/array-uniq@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/array-uniq.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/array-uniq#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/array-uniq/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "30d85ae01590e896f0845863d3760ae79d9fedc6f7033a04f12cde96380286f2f5765dc872f8205d5cf50e2973c926640a36be097b996dd5bbc804dc8569fcfd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/array-uniq"
        }
      ]
    },
    {
      "type": "library",
      "name": "debuglog",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|debuglog@1.0.1",
      "author": "Sam Roberts",
      "description": "backport of util.debuglog from node v0.11",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/debuglog@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sam-github/node-debuglog.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sam-github/node-debuglog#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sam-github/node-debuglog/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/debuglog/-/debuglog-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b32059fab9c02b712032c1f669810e2d45bb999498f466fed3050c085b19bdc9a2cfe1e2800d0b39cabf1e842a56e186f842b292e9dced01b66f3ae9a277da4b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/debuglog"
        }
      ]
    },
    {
      "type": "library",
      "name": "dezalgo",
      "version": "1.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|dezalgo@1.0.4",
      "author": "Isaac Z. Schlueter",
      "description": "Contain async insanity so that the dark pony lord doesn't eat souls",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/dezalgo@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/dezalgo.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/dezalgo",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/dezalgo/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/dezalgo/-/dezalgo-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ad748fd1b7fee67d10a27b1bf925557cd7c8b2298ee0712d9a72293c763c435502cca950ac331f7686ebf2724e3ac460582c8c46a792050ce659432aef3bd58a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/dezalgo"
        }
      ]
    },
    {
      "type": "library",
      "name": "wcwidth",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|wcwidth@1.0.1",
      "author": "Tim Oxley",
      "description": "Port of C's wcwidth() and wcswidth()",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/wcwidth@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/timoxley/wcwidth.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/timoxley/wcwidth#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/timoxley/wcwidth/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/wcwidth/-/wcwidth-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5c73c4c12d2ae936b172f1bce7ef046246e20aec765ed586da691ce3b360d80efb050bbdf83a8838995d493e0780f92e79aeddbca4a3e55817dcfd5de2b5bc4e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/wcwidth"
        }
      ]
    },
    {
      "type": "library",
      "name": "cli-cursor",
      "version": "2.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|cli-cursor@2.1.0",
      "author": "Sindre Sorhus",
      "description": "Toggle the CLI cursor",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cli-cursor@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/cli-cursor.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/cli-cursor#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/cli-cursor/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cli-cursor/-/cli-cursor-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f2580acfc2e60916196500e94724f69b9aca274f139d4e2d47d145156dabc69c51d45cd68b83d0fcd7f238372101ab4769482748f55cc7f479c3a36e4c1cc58b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cli-cursor"
        }
      ]
    },
    {
      "type": "library",
      "name": "cli-width",
      "version": "2.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|cli-width@2.2.1",
      "author": "Ilya Radchenko",
      "description": "Get stdout window width, with two fallbacks, tty and then a default.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cli-width@2.2.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/knownasilya/cli-width.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/knownasilya/cli-width",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/knownasilya/cli-width/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cli-width/-/cli-width-2.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1913160f1a4e07a0e0936139528fb778406fb4e3a58a6326a5b1622ae2c59d0cd80dabed2c56372b9a276b8d6380dfd675166d1bbbadb954954cbe076d91c693"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cli-width"
        }
      ]
    },
    {
      "type": "library",
      "name": "external-editor",
      "version": "3.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|external-editor@3.1.0",
      "author": "Kevin Gravier",
      "description": "Edit a string with the users preferred text editor using $VISUAL or $ENVIRONMENT",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/external-editor@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mrkmg/node-external-editor.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mrkmg/node-external-editor#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mrkmg/node-external-editor/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/external-editor/-/external-editor-3.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "84c438097d69d62ce6b8b63266a2cc3bfa86370d74c12bfd40308f7f35dfc85ace682492a117ea13529fd6ce5a9fae89e49642eb635ec06fa62b8f63382b507b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/external-editor"
        }
      ]
    },
    {
      "type": "library",
      "name": "figures",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|figures@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Unicode symbols with Windows CMD fallbacks",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/figures@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/figures.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/figures#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/figures/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/figures/-/figures-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "39ad8cf5ab6283af5991fc2202963c176632fadccc6dacf2beabf6d51d0db120bc7e5a12382d3d05b4f521358076830642f27f6999d1d4a330771f6dbc79d334"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/figures"
        }
      ]
    },
    {
      "type": "library",
      "name": "mute-stream",
      "version": "0.0.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|mute-stream@0.0.7",
      "author": "Isaac Z. Schlueter",
      "description": "Bytes go in, but they don't come out (when muted).",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mute-stream@0.0.7",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/mute-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/mute-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/mute-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "afae6709986b6d75dbe9d5ce0028a1600a47c3643aa55d0cdd5d0f4b177be0dd3e0fc9f301d100213ab6a008c0d63567288fad1af101529aa2321d3ead6eb30d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mute-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "run-async",
      "version": "2.4.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|run-async@2.4.1",
      "author": "Simon Boudrias",
      "description": "Utility method to run function either synchronously or asynchronously using the common `this.async()` style.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/run-async@2.4.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/SBoudrias/run-async.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/SBoudrias/run-async#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/SBoudrias/run-async/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/run-async/-/run-async-2.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b6f56756fd356fc73546b03a129ec9912b63f391aebff62b31cc2a6109f08ec012d9c4e698f181063023a425bb46b4a874d4a8136fea83d3b86dc78dbd4b8381"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/run-async"
        }
      ]
    },
    {
      "type": "library",
      "name": "rxjs",
      "version": "6.6.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|rxjs@6.6.7",
      "author": "Ben Lesh",
      "description": "Reactive Extensions for modern JavaScript",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/rxjs@6.6.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/reactivex/rxjs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ReactiveX/RxJS",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ReactiveX/RxJS/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/rxjs/-/rxjs-6.6.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "853770afeef260d213e67e00318a7ce4a03acb0d956b414b6b7460baf6e96b85b7239c729da059a38d5c3375ccfb843a7d1323dec058211d5502664c5d826f45"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/rxjs"
        }
      ]
    },
    {
      "type": "library",
      "name": "through",
      "version": "2.3.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|through@2.3.8",
      "author": "Dominic Tarr",
      "description": "simplified stream construction",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/through@2.3.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/dominictarr/through.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/dominictarr/through",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dominictarr/through/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/through/-/through-2.3.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c3cf6a83b3c8f3001dbd7eb46cc0cff9b1680f90ef866f682e1785a793b86b6405d1c4811ac057e2a66669d3ccbd5aa52c9041722f96a8618e00fbdc0de35256"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/through"
        }
      ]
    },
    {
      "type": "library",
      "name": "lcid",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|lcid@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Mapping between standard locale identifiers and Windows locale identifiers (LCID)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lcid@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/lcid.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/lcid#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/lcid/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lcid/-/lcid-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6af3c46fc3fc1069f05ca0a5c2c35482bc958e595c46ab4c61ae3d353b1b41a818b93d437179e5d7dd79a315a3a321ab5d1eb31ff63465cf7ac56b0f7280ca78"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lcid"
        }
      ]
    },
    {
      "type": "library",
      "name": "mem",
      "version": "4.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|mem@4.3.0",
      "author": "Sindre Sorhus",
      "description": "Memoize functions - An optimization used to speed up consecutive function calls by caching the result of calls with identical input",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mem@4.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/mem.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/mem#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/mem/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mem/-/mem-4.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a97d9b1b8f294ea6115660c1dfbae7ffa3d3ecb711f13ee8017ddb7fdf6ed53b759f3c587f1920a83c14c2894f957c1e3345f304e045cd2c7891fa7b28fd6cff"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mem"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "mimic-fn",
          "version": "2.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|mem@4.3.0|mimic-fn@2.1.0",
          "author": "Sindre Sorhus",
          "description": "Make a function mimic another one",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/mimic-fn@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/mimic-fn.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/mimic-fn#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/mimic-fn/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "3aa6ce939a0441e019f165d6c9d96ef47263cfd59574422f6a63027179aea946234e49c7fecaac5af850def830285451d47a63bcd04a437ee76c9818cc6a8672"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/mem/node_modules/mimic-fn"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "duplexer",
      "version": "0.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|duplexer@0.1.2",
      "author": "Raynos",
      "description": "Creates a duplex stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/duplexer@0.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/Raynos/duplexer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Raynos/duplexer",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Raynos/duplexer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8ed0fa606dfbd190888bff464da24a431593643d38e7ee11e214e4ff1d54ca8a9a77227dc7d0a04a2d519550d017c536b312cb4a716409a32286a9631c85a032"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/duplexer"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-type",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|path-type@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Check if a path is a file, directory, or symlink",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-type@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/path-type.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/path-type#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/path-type/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-type/-/path-type-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4f6654b1d6451e0037bb87b93df3db8ddec70c3a713e741be633744ab0ec8cd4ae5571c9aadc139d6a86d01d6366b82627fee58f51265480725add60c46916be"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-type"
        }
      ]
    },
    {
      "type": "library",
      "name": "readdir-enhanced",
      "group": "@mrmlnc",
      "version": "2.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|@mrmlnc/readdir-enhanced@2.2.1",
      "author": "James Messinger",
      "description": "fs.readdir with sync, async, and streaming APIs + filtering, recursion, absolute paths, etc.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40mrmlnc/readdir-enhanced@2.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/bigstickcarpet/readdir-enhanced.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/bigstickcarpet/readdir-enhanced",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/bigstickcarpet/readdir-enhanced/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@mrmlnc/readdir-enhanced/-/readdir-enhanced-2.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6cf1e9e898bc6f8d6ccd339c68feb75659db6cee4dcba7700004ed63a2538e1e4dd8e2eb6f9424fd38797119114219160adf8426c62b341d0c88bf86a67e9ede"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@mrmlnc/readdir-enhanced"
        }
      ]
    },
    {
      "type": "library",
      "name": "fs.stat",
      "group": "@nodelib",
      "version": "1.1.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|@nodelib/fs.stat@1.1.3",
      "description": "Get the status of a file with some features",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.stat@1.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/nodelib/nodelib.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodelib/nodelib/tree/master#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodelib/nodelib/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@nodelib/fs.stat/-/fs.stat-1.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b210260f26900b81fdd803c5a086950c70b1e5b4ad228720bdbc10cb13d1adb518db45751184db48372159bbb094c1b7575edca6b66103afbbf097c1fb70d33f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@nodelib/fs.stat"
        }
      ]
    },
    {
      "type": "library",
      "name": "merge2",
      "version": "1.4.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|merge2@1.4.1",
      "description": "Merge multiple streams into one stream in sequence or parallel.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/merge2@1.4.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/teambition/merge2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/teambition/merge2",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/teambition/merge2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/merge2/-/merge2-1.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f2aed51203095b827cb5c7d53f2f20d3d35c43065d6f0144aa17bf5999282338e7ff74c60f0b4e098b571b10373bcb4fce97330820e0bfe3f63f9cb4d1924e3a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/merge2"
        }
      ]
    },
    {
      "type": "library",
      "name": "spdx-license-ids",
      "version": "3.0.22",
      "bom-ref": "pug@2.0.4-tuxcare.2|spdx-license-ids@3.0.22",
      "author": "Shinnosuke Watanabe",
      "description": "A list of SPDX license identifiers",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@3.0.22",
      "externalReferences": [
        {
          "url": "git+https://github.com/jslicense/spdx-license-ids.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jslicense/spdx-license-ids#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jslicense/spdx-license-ids/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.22.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e0f453e2787510898f6edda301238a1d7ecf07b23e7b821634bbe42850f13612657e36d8965798421dbce59ff798f4c74802bf02f74c9b0e4134db981fc4a181"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/spdx-license-ids"
        }
      ]
    },
    {
      "type": "library",
      "name": "spdx-exceptions",
      "version": "2.5.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|spdx-exceptions@2.5.0",
      "author": "The Linux Foundation",
      "description": "list of SPDX standard license exceptions",
      "licenses": [
        {
          "license": {
            "id": "CC-BY-3.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/spdx-exceptions@2.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/kemitchell/spdx-exceptions.json.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kemitchell/spdx-exceptions.json#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kemitchell/spdx-exceptions.json/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3e2538dabfb13b851b512d5bba8dcb3c992394eef8df45e7e5254085da73cec3c7b236d855f9679c57404e069b9cbb9d7be0aabb6e69e8dfa0da5c3f3c5b1ae3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/spdx-exceptions"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-plain-obj",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-plain-obj@1.1.0",
      "author": "Sindre Sorhus",
      "description": "Check if a value is a plain object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-plain-obj@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-plain-obj.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-plain-obj#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-plain-obj/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "caf911cb1985284390e293570a6246e401103655c94b92da38d5e8e7f70b75365d5afb19d62a091289cb180a2c2a531613c970532fdb273323730f1acfbdfe16"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-plain-obj"
        }
      ]
    },
    {
      "type": "library",
      "name": "imurmurhash",
      "version": "0.1.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|imurmurhash@0.1.4",
      "author": "Jens Taylor",
      "description": "An incremental implementation of MurmurHash3",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/jensyt/imurmurhash-js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jensyt/imurmurhash-js",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jensyt/imurmurhash-js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2665cc67ac2ebc398b88712697dca4cea3ba97015ba1fd061b822470668435d0910c398c5679f2eece47b0880709b6aad30d8cc8f843aa48535204b62d4d8f1c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/imurmurhash"
        }
      ]
    },
    {
      "type": "library",
      "name": "ignore-walk",
      "version": "3.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|ignore-walk@3.0.4",
      "author": "Isaac Z. Schlueter",
      "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ignore-walk@3.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/ignore-walk.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/ignore-walk#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/ignore-walk/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ignore-walk/-/ignore-walk-3.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3d8e888bca358cc440d73e05da14641ffc4de7da31e370dabcabc3de80e97eead194e272007a627c8c296ddbf59f88ede28bf48d2a70de44381a1267a412fa59"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ignore-walk"
        }
      ]
    },
    {
      "type": "library",
      "name": "npm-bundled",
      "version": "1.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|npm-bundled@1.1.2",
      "author": "Isaac Z. Schlueter",
      "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/npm-bundled@1.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/npm-bundled.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/npm-bundled#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/npm-bundled/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/npm-bundled/-/npm-bundled-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c790c7ba9d12bb241c98bdeced1c7f610f2c6f0fc7ce0d2b8f8f1e374755ee17f972642ae4f5c87a2a2ba07deb695d500b5ca1dee4d8b8c4e1bc4405de22a019"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/npm-bundled"
        }
      ]
    },
    {
      "type": "library",
      "name": "fs-minipass",
      "version": "1.2.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|fs-minipass@1.2.7",
      "author": "Isaac Z. Schlueter",
      "description": "fs read and write streams based on minipass",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fs-minipass@1.2.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/fs-minipass.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/fs-minipass#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/fs-minipass/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-1.2.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "196492246172e1ef4651e09c6c89040fe6e00281728fb5c5d6657cae66b7416e0d22a5fd2b2c7bf4dfcf17ad47e6e74e577698d4868c2ecea919b1fbd679424c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fs-minipass"
        }
      ]
    },
    {
      "type": "library",
      "name": "minizlib",
      "version": "1.3.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|minizlib@1.3.3",
      "author": "Isaac Z. Schlueter",
      "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minizlib@1.3.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minizlib.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/minizlib#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/minizlib/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minizlib/-/minizlib-1.3.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e9960c3849e656c7427932551345bd643fa956713c87d1e66bf88ec30443b1d42878fa685f9ebff01eb3dcff55370a6926e04a351b850d1351a9159ec53f46f5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minizlib"
        }
      ]
    },
    {
      "type": "library",
      "name": "yallist",
      "version": "3.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|yallist@3.1.1",
      "author": "Isaac Z. Schlueter",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/yallist@3.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/yallist#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/yallist/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/yallist/-/yallist-3.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6b850641a58f1f9f663975189c01b67b09dc412e22e05e374efdc9a0033eb365430264bd36c2bc1a90cc2eb0873e4b054fb8772ba4cea14367da96fb4685f1e2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/yallist"
        }
      ]
    },
    {
      "type": "library",
      "name": "compare-func",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|compare-func@2.0.0",
      "author": "Steve Mao",
      "description": "Get a compare function for array to sort",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/compare-func@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/compare-func.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/compare-func",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/compare-func/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/compare-func/-/compare-func-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cc78a0e4dfad3d6011a280676f4671d4c15c75fa7226b7d32776392fe205bd49bcaccef8847cfaeb3d20c34c78b628e1e42a2b2a42940a75bcd91daf9a978244"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/compare-func"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "dot-prop",
          "version": "5.3.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|compare-func@2.0.0|dot-prop@5.3.0",
          "author": "Sindre Sorhus",
          "description": "Get, set, or delete a property from a nested object using a dot path",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/dot-prop@5.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/dot-prop.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/dot-prop#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/dot-prop/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/dot-prop/-/dot-prop-5.3.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "40cf2adf30dee7c86a52a8eb6903a6cd9d4b207f525902539442821f8909da842f2d993b45b417bed0ccd9712addfc2457d082bef1f82c0d0057ea2016c04cd9"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/compare-func/node_modules/dot-prop"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-obj",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|compare-func@2.0.0|is-obj@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Check if a value is an object",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-obj@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/is-obj.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/is-obj#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/is-obj/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-obj/-/is-obj-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "76ba831b771b733c7110946839770e8ed769d49fe5ca9d66367d316b39d1b3cfa6b8186041cae76eca68c795f97cec341e73276df0f3be710c12da83109128f3"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/compare-func/node_modules/is-obj"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "q",
      "version": "1.5.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|q@1.5.1",
      "author": "Kris Kowal",
      "description": "A library for promises (CommonJS/Promises/A,B,D)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/q@1.5.1",
      "externalReferences": [
        {
          "url": "git://github.com/kriskowal/q.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kriskowal/q",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/kriskowal/q/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/q/-/q-1.5.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "915fc24e1917a3ac72144654ba0c3ffa920ecb05dc0db15881272de5c4f782a95b901135489770cba510a19be8762585fdc9102d9c8313f06ed4cea056ee6557"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/q"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-changelog-writer",
      "version": "4.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|conventional-changelog-writer@4.1.0",
      "author": "Steve Mao",
      "description": "Write logs based on conventional commits and templates",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-writer@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/conventional-changelog.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-changelog-writer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-changelog-writer/-/conventional-changelog-writer-4.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5b029c529ed6c9760642690bb17e10994e36019d65aa5bd15bd9aaa32890cdd0feac959b4dea5d5a8289bb05d34becaaefd5ca9d035af77feba1588f42b01083"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-changelog-writer"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "through2",
          "version": "4.0.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|conventional-changelog-writer@4.1.0|through2@4.0.2",
          "author": "Rod Vagg",
          "description": "A tiny wrapper around Node.js streams.Transform (Streams2/3) to avoid explicit subclassing noise",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/through2@4.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/rvagg/through2.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/rvagg/through2#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/rvagg/through2/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/through2/-/through2-4.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "88ea926afd34715c4410809e0fb4e32c1d6cb9e10bfbcd56a73a766d8d7bb998d9374a5664fba8e2cb99ffad55ba3c66a921857e039c36e4d9f39409c0d650a7"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/conventional-changelog-writer/node_modules/through2"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-commits-parser",
      "version": "3.2.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|conventional-commits-parser@3.2.4",
      "author": "Steve Mao",
      "description": "Parse raw conventional commits",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-commits-parser@3.2.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/conventional-changelog.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-commits-parser#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-commits-parser/-/conventional-commits-parser-3.2.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9caeec02d7e2f905dbc470987e1a59b1f46d6a2b592c803af3cf64148a2e2efcfaadea6ccd00e0c41bbbc1fd966d4f83728eec0273422581110b0b79e163c2d9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-commits-parser"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "through2",
          "version": "4.0.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|conventional-commits-parser@3.2.4|through2@4.0.2",
          "author": "Rod Vagg",
          "description": "A tiny wrapper around Node.js streams.Transform (Streams2/3) to avoid explicit subclassing noise",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/through2@4.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/rvagg/through2.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/rvagg/through2#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/rvagg/through2/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/through2/-/through2-4.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "88ea926afd34715c4410809e0fb4e32c1d6cb9e10bfbcd56a73a766d8d7bb998d9374a5664fba8e2cb99ffad55ba3c66a921857e039c36e4d9f39409c0d650a7"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/conventional-commits-parser/node_modules/through2"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "dateformat",
      "version": "3.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|dateformat@3.0.3",
      "author": "Steven Levithan",
      "description": "A node.js package for Steven Levithan's excellent dateFormat() function.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/dateformat@3.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/felixge/node-dateformat.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/felixge/node-dateformat",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/felixge/node-dateformat/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/dateformat/-/dateformat-3.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8f20844ed4a5dd5319316791a3b898d452f5f607acd6de7984ca39c9a6a6e09aec9b910f2fcf54424a10472888f987f893caf666976782457c86bd6521d8dbdd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/dateformat"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-pkg-repo",
      "version": "1.4.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0",
      "author": "Steve Mao",
      "description": "Get normalized repository from package json data",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-pkg-repo@1.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/get-pkg-repo.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/get-pkg-repo",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/get-pkg-repo/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-pkg-repo/-/get-pkg-repo-1.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c4f0b2bdc10ec42243c6105f5c3347fb303b9884466f6698d60214256b1992925ba7504b1e5fbf4b2720dba0eff996d900990eeb5b736c1b6a1d48b7d0d181be"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-pkg-repo"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "meow",
          "version": "3.7.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|meow@3.7.0",
          "author": "Sindre Sorhus",
          "description": "CLI app helper",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/meow@3.7.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/meow.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/meow#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/meow/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/meow/-/meow-3.7.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "4cd77066cd2c9119693e90942b6e52b42e151feb4fe4681e6351d038e18ffa5436c6d76437656d4ffe6d897f64dc85a99013d5f5bdcbb005979f81868bf3eb48"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/meow"
            }
          ]
        },
        {
          "type": "library",
          "name": "through2",
          "version": "2.0.5",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|through2@2.0.5",
          "author": "Rod Vagg",
          "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/through2@2.0.5",
          "externalReferences": [
            {
              "url": "git+https://github.com/rvagg/through2.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/rvagg/through2#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/rvagg/through2/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/through2/-/through2-2.0.5.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "fe6ad1a1df31aa903e20748bc86090dacf123c78820c47902527a9d63a8b61e1140a53851b642c87ee0553a1bd55eaa9667196fd2bbc2d019ce182a78b9ad849"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/through2"
            }
          ]
        },
        {
          "type": "library",
          "name": "camelcase-keys",
          "version": "2.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|camelcase-keys@2.1.0",
          "author": "Sindre Sorhus",
          "description": "Convert object keys to camelCase",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase-keys@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase-keys.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase-keys#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase-keys/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6c0fd9fc31111caaa810eae9faa7862b0d5096f1109066527345da63a5674f166bf8abf51b9cc5c2db698eff2ac59fec04f4f89ed87065a01cb0065326548a5d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/camelcase-keys"
            }
          ]
        },
        {
          "type": "library",
          "name": "map-obj",
          "version": "1.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|map-obj@1.0.1",
          "author": "Sindre Sorhus",
          "description": "Map object keys and values into a new object",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/map-obj@1.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/map-obj.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/map-obj#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/map-obj/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/map-obj/-/map-obj-1.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "ecdfeade5c99f8b542a7b3f3bb1ac9af828c6c1136856ec14fb60d89adf7d0e17121fe1ddebe7356989c3f6eb9d25ec23cde9133dcce251977346a6a4a2c3712"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/map-obj"
            }
          ]
        },
        {
          "type": "library",
          "name": "read-pkg-up",
          "version": "1.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|read-pkg-up@1.0.1",
          "author": "Sindre Sorhus",
          "description": "Read the closest package.json file",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/read-pkg-up@1.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/read-pkg-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-1.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "583f4c4e536d239e48c18512dbb88787db4add8a08561c62b3cc8a84ba53a96b6697bdfdb9773d3564e9c681e47d97f7f839020ac5e8c7de3f5566678ae666e8"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/read-pkg-up"
            }
          ]
        },
        {
          "type": "library",
          "name": "redent",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|redent@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Strip redundant indentation and indent the string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/redent@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/redent.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/redent#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/redent/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/redent/-/redent-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "aad5b984acc6419a8aa21e893520fee257e2b5f3ca1b3e367ba43089198f3399a62ad474378d406c9458bb4c498bb9e1389e160e04642af024eadc38588c11e2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/redent"
            }
          ]
        },
        {
          "type": "library",
          "name": "trim-newlines",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|trim-newlines@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Trim newlines from the start and/or end of a string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/trim-newlines@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/trim-newlines.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/trim-newlines#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/trim-newlines/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "366e1c17bf458524f3acb2860cc8b7238bad06d16ff2a2b2e2cab57a77ed7f680c769a88f285504c07f24a44f3e6be3d8225730e3f3c4956573f809e610c236b"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/trim-newlines"
            }
          ]
        },
        {
          "type": "library",
          "name": "readable-stream",
          "version": "2.3.8",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|readable-stream@2.3.8",
          "description": "Streams3, a user-land copy of the stream library from Node.js",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@2.3.8",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f29d00524e173838087b04a2d25f04a63b3e1159d688aecda03204194d07844efe67263c0f520c63ba1dbb9951ac55c683bd4bd79286f10acf9ae9b8e514ed74"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/readable-stream"
            }
          ]
        },
        {
          "type": "library",
          "name": "camelcase",
          "version": "2.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|camelcase@2.1.1",
          "author": "Sindre Sorhus",
          "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase@2.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/camelcase/-/camelcase-2.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "0cb22c473255050bbbda678028f91640e2dcba37574f7da1c1d7e7908d5fad289244c2b53287e32877fe304c74481e9f8c41572fc7c10efd5d2b298194ea7843"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/camelcase"
            }
          ]
        },
        {
          "type": "library",
          "name": "find-up",
          "version": "1.1.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|find-up@1.1.2",
          "author": "Sindre Sorhus",
          "description": "Find a file by walking up parent directories",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/find-up@1.1.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/find-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "8ef1254a3caea3810c406a13c28d6e254e6940cc135b9952d71d39cf37c9b932322d1df3c0edbb2d8af1360f9d96f2a918eb86cbf33305d5e1f34834bdee7e1c"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/find-up"
            }
          ]
        },
        {
          "type": "library",
          "name": "read-pkg",
          "version": "1.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|read-pkg@1.1.0",
          "author": "Sindre Sorhus",
          "description": "Read a package.json file",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/read-pkg@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/read-pkg.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/read-pkg/-/read-pkg-1.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "ec11b0447aade2cfee55bbb2a1e7a3467e189859d8662165e00b9a7971e58197f7b0e345d12386971b363f0f20ea108aba9a34f1169f20ee585c534e2937f0b1"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/read-pkg"
            }
          ]
        },
        {
          "type": "library",
          "name": "indent-string",
          "version": "2.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|indent-string@2.1.0",
          "author": "Sindre Sorhus",
          "description": "Indent each line in a string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/indent-string@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/indent-string.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/indent-string#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/indent-string/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/indent-string/-/indent-string-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6aac031564a04a07d1684c1aa39960e4a11c55dff66be0f5aefa06ecd762966633d0dc1193a4ad5a959dcff1e9937e0c28fa71eecf17c54aa299f7102ba80696"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/indent-string"
            }
          ]
        },
        {
          "type": "library",
          "name": "strip-indent",
          "version": "1.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|strip-indent@1.0.1",
          "author": "Sindre Sorhus",
          "description": "Strip leading whitespace from every line in a string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-indent@1.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/strip-indent.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-indent#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-indent/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/strip-indent/-/strip-indent-1.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "239890aba68530ceb67c1100201fe15f3c090fa104674c441825f6b7ba17a9a28f21182de16aee010dbce4121281d90ff872c65b278698d25ca48c0579161150"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/strip-indent"
            }
          ]
        },
        {
          "type": "library",
          "name": "isarray",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|isarray@1.0.0",
          "author": "Julian Gruber",
          "description": "Array#isArray for older browsers",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isarray@1.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/isarray.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/isarray",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/isarray/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "54b82121634ce842d0ce8ef3c26720d0d99357258a623bc878cf37ca3a74c110d39949eb33aefc7d06dc281a3a9f6089105d2cce81bfff2b60f932a56bcf402d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/isarray"
            }
          ]
        },
        {
          "type": "library",
          "name": "safe-buffer",
          "version": "5.1.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|safe-buffer@5.1.2",
          "author": "Feross Aboukhadijeh",
          "description": "Safer Node.js Buffer API",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/safe-buffer@5.1.2",
          "externalReferences": [
            {
              "url": "git://github.com/feross/safe-buffer.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/feross/safe-buffer",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/feross/safe-buffer/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/safe-buffer"
            }
          ]
        },
        {
          "type": "library",
          "name": "string_decoder",
          "version": "1.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|string_decoder@1.1.1",
          "description": "The string_decoder module from Node core",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string_decoder@1.1.1",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/string_decoder.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/string_decoder"
            }
          ]
        },
        {
          "type": "library",
          "name": "path-exists",
          "version": "2.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|path-exists@2.1.0",
          "author": "Sindre Sorhus",
          "description": "Check if a path exists",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/path-exists@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/path-exists.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/path-exists#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/path-exists/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "c9396db8aba1b4d78524a6b53e24737cb014e75f36ab5cb811be17089dcf06acb3103900651cc1aca28172debcda5b3dade0551dff6e7582cde4d77e2b507d05"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/path-exists"
            }
          ]
        },
        {
          "type": "library",
          "name": "load-json-file",
          "version": "1.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|load-json-file@1.1.0",
          "author": "Sindre Sorhus",
          "description": "Read and parse a JSON file",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/load-json-file@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/load-json-file.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/load-json-file#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/load-json-file/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "732ed974d45775a6e591760d234e3da6d85579716ead1c9bf7e840fdd6737ab674a464f1e36cfecbeb2cc4169557697bd2dd66baae4874a867e14b5ca06518f4"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/load-json-file"
            }
          ]
        },
        {
          "type": "library",
          "name": "path-type",
          "version": "1.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|path-type@1.1.0",
          "author": "Sindre Sorhus",
          "description": "Check if a path is a file, directory, or symlink",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/path-type@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/path-type.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/path-type#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/path-type/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/path-type/-/path-type-1.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "4b8784349cf5a648909fd667bf7dd0f9d79338a99b97e8e3d4597eaa23ffbd87b38fe4bcc7e277528d084abc7f42812f22539a0d62613da45dd5f949f475d9aa"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/path-type"
            }
          ]
        },
        {
          "type": "library",
          "name": "parse-json",
          "version": "2.2.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|parse-json@2.2.0",
          "author": "Sindre Sorhus",
          "description": "Parse JSON with more helpful errors",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/parse-json@2.2.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/parse-json.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/parse-json#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/parse-json/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "411fc619a282921c24d5e3d03580d12986779b053dca9b0a841d17c859cb41da26c84aa4ddef30a56dd5e49a7cf336f12b89f9493d67aa8fa0f63b93a68c2785"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/parse-json"
            }
          ]
        },
        {
          "type": "library",
          "name": "pify",
          "version": "2.3.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|pify@2.3.0",
          "author": "Sindre Sorhus",
          "description": "Promisify a callback-style function",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/pify@2.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/pify.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/pify#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/pify/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b9d82c018f9f4e7befee423b69ac5bab058d6f4007881d2a04ef3d3d928f9284e618e81d6eb1c3283fb40765f8b937c9fc54f5474f6bf604ec8d48cd268b6ea2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/pify"
            }
          ]
        },
        {
          "type": "library",
          "name": "strip-bom",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|strip-bom@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Strip UTF-8 byte order mark (BOM) from a string/buffer",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-bom@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/strip-bom.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-bom#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-bom/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "930ad7d72edcce9d44ebd9f66a36c6eb9988a3d76abc9fbc681417386571ab0bcd6ec5dd14ce8bab7edd2c06379a49d4c2bbbc09f7026df38b2ff80ca3e7e2de"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/get-pkg-repo/node_modules/strip-bom"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "git-raw-commits",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0",
      "author": "Steve Mao",
      "description": "Get raw git commits out of your repository using git-log(1)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/git-raw-commits@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/conventional-changelog.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/git-raw-commits#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/git-raw-commits/-/git-raw-commits-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c388c51091602973102741f48a4064d92fb828fd95123842bcb08da9b351402f018065a02ca3423bb6bd2bd2c8f93553ec67e89688dee74dac12772d89b7df82"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/git-raw-commits"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "meow",
          "version": "4.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|meow@4.0.1",
          "author": "Sindre Sorhus",
          "description": "CLI app helper",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/meow@4.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/meow.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/meow#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/meow/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/meow/-/meow-4.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "c5c4811c3e59f3acda39cfbbf352abba9b870337865d22ed8803a606c88b0e23d2698481ea175ec369e0f440409d9eb68da806f4c1c039dc690e2fe5581149fc"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-raw-commits/node_modules/meow"
            }
          ]
        },
        {
          "type": "library",
          "name": "split2",
          "version": "2.2.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|split2@2.2.0",
          "author": "Matteo Collina",
          "description": "split a Text Stream into a Line Stream, using Stream 3",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/split2@2.2.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/mcollina/split2.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mcollina/split2#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "http://github.com/mcollina/split2/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/split2/-/split2-2.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "4406f6d931b7f4b848df531bade06022e2a220a855b1ac1f4e0106a8a1d32bceda1beba5fcf07c4aaa22dc8ee455d4568827eb2b12b7ba8e3f61492936f84f6f"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-raw-commits/node_modules/split2"
            }
          ]
        },
        {
          "type": "library",
          "name": "through2",
          "version": "2.0.5",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|through2@2.0.5",
          "author": "Rod Vagg",
          "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/through2@2.0.5",
          "externalReferences": [
            {
              "url": "git+https://github.com/rvagg/through2.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/rvagg/through2#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/rvagg/through2/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/through2/-/through2-2.0.5.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "fe6ad1a1df31aa903e20748bc86090dacf123c78820c47902527a9d63a8b61e1140a53851b642c87ee0553a1bd55eaa9667196fd2bbc2d019ce182a78b9ad849"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-raw-commits/node_modules/through2"
            }
          ]
        },
        {
          "type": "library",
          "name": "camelcase-keys",
          "version": "4.2.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|camelcase-keys@4.2.0",
          "author": "Sindre Sorhus",
          "description": "Convert object keys to camelCase",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase-keys@4.2.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase-keys.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase-keys#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase-keys/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-4.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "123dfb60a61b15423c422625be3f581dbebf67ad1d6723c95b40acf2c16294c6ddda53f46f0df2940abdc8990ae257130367480f97c6f0b8e62586ceee459bed"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-raw-commits/node_modules/camelcase-keys"
            }
          ]
        },
        {
          "type": "library",
          "name": "minimist-options",
          "version": "3.0.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|minimist-options@3.0.2",
          "author": "Vadim Demedes",
          "description": "Pretty options for minimist",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/minimist-options@3.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/vadimdemedes/minimist-options.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/vadimdemedes/minimist-options#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/vadimdemedes/minimist-options/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/minimist-options/-/minimist-options-3.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "17206b4ff774778fae89945bab39cf5eac372296591b7825df0296897efce05c9c50a57006dd2e2c116442bb44e2d64eae0a3bf27669da39cacf72fae53e4b75"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-raw-commits/node_modules/minimist-options"
            }
          ]
        },
        {
          "type": "library",
          "name": "redent",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|redent@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Strip redundant indentation and indent the string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/redent@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/redent.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/redent#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/redent/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/redent/-/redent-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "5cdc2b4f1efb2500843174de6fc9a8bc12ae2bbe4c807d11664ba336e0ca09ecde9b1fefa1aa65f62da00928bc5969bcfa8c79c9c262d60c45db67d1edcd028b"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-raw-commits/node_modules/redent"
            }
          ]
        },
        {
          "type": "library",
          "name": "trim-newlines",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|trim-newlines@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Trim newlines from the start and/or end of a string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/trim-newlines@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/trim-newlines.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/trim-newlines#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/trim-newlines/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "313056bf78e15634d4ed74772101e595b889b3cb1cef96bcd0e12107aa2bfeaee92d35a04346cc1905d76104ab4ae5dee9688a583679b715d8e4fe7d6bf72854"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-raw-commits/node_modules/trim-newlines"
            }
          ]
        },
        {
          "type": "library",
          "name": "readable-stream",
          "version": "2.3.8",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|readable-stream@2.3.8",
          "description": "Streams3, a user-land copy of the stream library from Node.js",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@2.3.8",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f29d00524e173838087b04a2d25f04a63b3e1159d688aecda03204194d07844efe67263c0f520c63ba1dbb9951ac55c683bd4bd79286f10acf9ae9b8e514ed74"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-raw-commits/node_modules/readable-stream"
            }
          ]
        },
        {
          "type": "library",
          "name": "camelcase",
          "version": "4.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|camelcase@4.1.0",
          "author": "Sindre Sorhus",
          "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase@4.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/camelcase/-/camelcase-4.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "17102fec7a47ad76e1dda3e8e28daac476b2da590b637c79330dca784e0a404f32b157f3896791643c1c8dabafc01486102fe75d43f3672f337a1e07a24a8e9f"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-raw-commits/node_modules/camelcase"
            }
          ]
        },
        {
          "type": "library",
          "name": "map-obj",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|map-obj@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Map object keys and values into a new object",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/map-obj@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/map-obj.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/map-obj#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/map-obj/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/map-obj/-/map-obj-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "4f34125760e231882817947272778a554cc86bd6d0b23fc1ded4e0b04ddd386aa5cc79c6203682ed7044ee0ae703ef2464f9dfa921857bde551dcda873454551"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-raw-commits/node_modules/map-obj"
            }
          ]
        },
        {
          "type": "library",
          "name": "quick-lru",
          "version": "1.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|quick-lru@1.1.0",
          "author": "Sindre Sorhus",
          "description": "Simple \"Least Recently Used\" (LRU) cache",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/quick-lru@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/quick-lru.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/quick-lru#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/quick-lru/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/quick-lru/-/quick-lru-1.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b514bbb13832c4c5ed2ee9bc2fae5d6899c75217c35206e845d7165b66d1f6f05fae3dbe3b91d231b40e25f2498c85523c5a9b042177ec5a705971a2b43739b4"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-raw-commits/node_modules/quick-lru"
            }
          ]
        },
        {
          "type": "library",
          "name": "indent-string",
          "version": "3.2.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|indent-string@3.2.0",
          "author": "Sindre Sorhus",
          "description": "Indent each line in a string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/indent-string@3.2.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/indent-string.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/indent-string#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/indent-string/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/indent-string/-/indent-string-3.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "058a931d74c6508be0eedd6be2c24d29c6c36642fdda791703c62d4696e31474471832ff36d51e88124c784eb490814dfcc83c11269642f7ed69830627341909"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-raw-commits/node_modules/indent-string"
            }
          ]
        },
        {
          "type": "library",
          "name": "strip-indent",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|strip-indent@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Strip leading whitespace from each line in a string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-indent@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/strip-indent.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-indent#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-indent/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/strip-indent/-/strip-indent-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "46c48d3cba6ae9850bed0632e384673d54e7fe571566d6f8f14a1fdd7e492db178cc3fc6b3b6450efd875a897e95ea10376993f3a2c0cd2b2119f9139523a9b0"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-raw-commits/node_modules/strip-indent"
            }
          ]
        },
        {
          "type": "library",
          "name": "isarray",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|isarray@1.0.0",
          "author": "Julian Gruber",
          "description": "Array#isArray for older browsers",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isarray@1.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/isarray.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/isarray",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/isarray/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "54b82121634ce842d0ce8ef3c26720d0d99357258a623bc878cf37ca3a74c110d39949eb33aefc7d06dc281a3a9f6089105d2cce81bfff2b60f932a56bcf402d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-raw-commits/node_modules/isarray"
            }
          ]
        },
        {
          "type": "library",
          "name": "safe-buffer",
          "version": "5.1.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|safe-buffer@5.1.2",
          "author": "Feross Aboukhadijeh",
          "description": "Safer Node.js Buffer API",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/safe-buffer@5.1.2",
          "externalReferences": [
            {
              "url": "git://github.com/feross/safe-buffer.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/feross/safe-buffer",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/feross/safe-buffer/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-raw-commits/node_modules/safe-buffer"
            }
          ]
        },
        {
          "type": "library",
          "name": "string_decoder",
          "version": "1.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|string_decoder@1.1.1",
          "description": "The string_decoder module from Node core",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string_decoder@1.1.1",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/string_decoder.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-raw-commits/node_modules/string_decoder"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "git-remote-origin-url",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|git-remote-origin-url@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Get the remote origin url of a git repository",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/git-remote-origin-url@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/git-remote-origin-url.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/git-remote-origin-url#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/git-remote-origin-url/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/git-remote-origin-url/-/git-remote-origin-url-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "794f861ab66071c34972c0c7e4b9174773c1f4cf79f21c5ceec6c0f031498ebbfd8f82f63ff7997ca84cf900fac32ce98aff9bd41a4ad17ad80b1928bed8d22f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/git-remote-origin-url"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "pify",
          "version": "2.3.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-remote-origin-url@2.0.0|pify@2.3.0",
          "author": "Sindre Sorhus",
          "description": "Promisify a callback-style function",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/pify@2.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/pify.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/pify#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/pify/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b9d82c018f9f4e7befee423b69ac5bab058d6f4007881d2a04ef3d3d928f9284e618e81d6eb1c3283fb40765f8b937c9fc54f5474f6bf604ec8d48cd268b6ea2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-remote-origin-url/node_modules/pify"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "git-semver-tags",
      "version": "2.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3",
      "author": "Steve Mao",
      "description": "Get all git semver tags of your repository in reverse chronological order",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/git-semver-tags@2.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/conventional-changelog.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/git-semver-tags#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/git-semver-tags/-/git-semver-tags-2.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b63e050f8c30d915f669efff8d2ad7673ae87256bd75be61d15ee290f9753ff5b0a196abf5ea5d521c11ed71d74a073e66436aef604411eaea42e89ca0441fcc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/git-semver-tags"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "meow",
          "version": "4.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|meow@4.0.1",
          "author": "Sindre Sorhus",
          "description": "CLI app helper",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/meow@4.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/meow.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/meow#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/meow/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/meow/-/meow-4.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "c5c4811c3e59f3acda39cfbbf352abba9b870337865d22ed8803a606c88b0e23d2698481ea175ec369e0f440409d9eb68da806f4c1c039dc690e2fe5581149fc"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-semver-tags/node_modules/meow"
            }
          ]
        },
        {
          "type": "library",
          "name": "camelcase-keys",
          "version": "4.2.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|camelcase-keys@4.2.0",
          "author": "Sindre Sorhus",
          "description": "Convert object keys to camelCase",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase-keys@4.2.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase-keys.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase-keys#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase-keys/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-4.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "123dfb60a61b15423c422625be3f581dbebf67ad1d6723c95b40acf2c16294c6ddda53f46f0df2940abdc8990ae257130367480f97c6f0b8e62586ceee459bed"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-semver-tags/node_modules/camelcase-keys"
            }
          ]
        },
        {
          "type": "library",
          "name": "minimist-options",
          "version": "3.0.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|minimist-options@3.0.2",
          "author": "Vadim Demedes",
          "description": "Pretty options for minimist",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/minimist-options@3.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/vadimdemedes/minimist-options.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/vadimdemedes/minimist-options#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/vadimdemedes/minimist-options/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/minimist-options/-/minimist-options-3.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "17206b4ff774778fae89945bab39cf5eac372296591b7825df0296897efce05c9c50a57006dd2e2c116442bb44e2d64eae0a3bf27669da39cacf72fae53e4b75"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-semver-tags/node_modules/minimist-options"
            }
          ]
        },
        {
          "type": "library",
          "name": "redent",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|redent@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Strip redundant indentation and indent the string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/redent@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/redent.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/redent#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/redent/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/redent/-/redent-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "5cdc2b4f1efb2500843174de6fc9a8bc12ae2bbe4c807d11664ba336e0ca09ecde9b1fefa1aa65f62da00928bc5969bcfa8c79c9c262d60c45db67d1edcd028b"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-semver-tags/node_modules/redent"
            }
          ]
        },
        {
          "type": "library",
          "name": "trim-newlines",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|trim-newlines@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Trim newlines from the start and/or end of a string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/trim-newlines@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/trim-newlines.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/trim-newlines#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/trim-newlines/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "313056bf78e15634d4ed74772101e595b889b3cb1cef96bcd0e12107aa2bfeaee92d35a04346cc1905d76104ab4ae5dee9688a583679b715d8e4fe7d6bf72854"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-semver-tags/node_modules/trim-newlines"
            }
          ]
        },
        {
          "type": "library",
          "name": "camelcase",
          "version": "4.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|camelcase@4.1.0",
          "author": "Sindre Sorhus",
          "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase@4.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/camelcase/-/camelcase-4.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "17102fec7a47ad76e1dda3e8e28daac476b2da590b637c79330dca784e0a404f32b157f3896791643c1c8dabafc01486102fe75d43f3672f337a1e07a24a8e9f"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-semver-tags/node_modules/camelcase"
            }
          ]
        },
        {
          "type": "library",
          "name": "map-obj",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|map-obj@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Map object keys and values into a new object",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/map-obj@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/map-obj.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/map-obj#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/map-obj/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/map-obj/-/map-obj-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "4f34125760e231882817947272778a554cc86bd6d0b23fc1ded4e0b04ddd386aa5cc79c6203682ed7044ee0ae703ef2464f9dfa921857bde551dcda873454551"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-semver-tags/node_modules/map-obj"
            }
          ]
        },
        {
          "type": "library",
          "name": "quick-lru",
          "version": "1.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|quick-lru@1.1.0",
          "author": "Sindre Sorhus",
          "description": "Simple \"Least Recently Used\" (LRU) cache",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/quick-lru@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/quick-lru.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/quick-lru#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/quick-lru/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/quick-lru/-/quick-lru-1.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b514bbb13832c4c5ed2ee9bc2fae5d6899c75217c35206e845d7165b66d1f6f05fae3dbe3b91d231b40e25f2498c85523c5a9b042177ec5a705971a2b43739b4"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-semver-tags/node_modules/quick-lru"
            }
          ]
        },
        {
          "type": "library",
          "name": "indent-string",
          "version": "3.2.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|indent-string@3.2.0",
          "author": "Sindre Sorhus",
          "description": "Indent each line in a string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/indent-string@3.2.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/indent-string.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/indent-string#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/indent-string/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/indent-string/-/indent-string-3.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "058a931d74c6508be0eedd6be2c24d29c6c36642fdda791703c62d4696e31474471832ff36d51e88124c784eb490814dfcc83c11269642f7ed69830627341909"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-semver-tags/node_modules/indent-string"
            }
          ]
        },
        {
          "type": "library",
          "name": "strip-indent",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|strip-indent@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Strip leading whitespace from each line in a string",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-indent@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/strip-indent.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-indent#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-indent/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/strip-indent/-/strip-indent-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "46c48d3cba6ae9850bed0632e384673d54e7fe571566d6f8f14a1fdd7e492db178cc3fc6b3b6450efd875a897e95ea10376993f3a2c0cd2b2119f9139523a9b0"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/git-semver-tags/node_modules/strip-indent"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "read-pkg-up",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Read the closest package.json file",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/read-pkg-up@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/read-pkg-up.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/read-pkg-up#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/read-pkg-up/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "605cc5ad5be90ba7eb175b33f29b281c304617b7cb3dcfa596affc341e37a1a82a5a4c7c6abe7362db13391b4e8f0f56d911cba563fecd35b006f7f56c299c4b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/read-pkg-up"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "find-up",
          "version": "2.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0|find-up@2.1.0",
          "author": "Sindre Sorhus",
          "description": "Find a file by walking up parent directories",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/find-up@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/find-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/find-up/-/find-up-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "356ce49348d226d4edd3cf8504532f5e87999ce243fa34edb1198161b008cc9757ea5edd2e047b093b9b08ce7f78374f501bcb09e55ab0fd5badf551ffdfc465"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/read-pkg-up/node_modules/find-up"
            }
          ]
        },
        {
          "type": "library",
          "name": "locate-path",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0|locate-path@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Get the first path that exists on disk of multiple paths",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/locate-path@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/locate-path.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/locate-path#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/locate-path/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/locate-path/-/locate-path-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "3422369220e4c91ed57842a6dbb29d6bf8901f22897b506ed059536d8a770aa26efbd2057bd6cbc808ccc5fe590c36c483e88c3f3079cd8c944d29bcc154ca98"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/read-pkg-up/node_modules/locate-path"
            }
          ]
        },
        {
          "type": "library",
          "name": "p-locate",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0|p-locate@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Get the first fulfilled promise that satisfies the provided testing function",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-locate@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-locate.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-locate#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-locate/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/p-locate/-/p-locate-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "9d08daee6ee048ab9ec285517a7e390ad55f38347772b377828550d030d9f4ddf21f182992e06166ab1a8a8b52411ac00d4ae77b7e3aa5e63b913dd34800b292"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/read-pkg-up/node_modules/p-locate"
            }
          ]
        },
        {
          "type": "library",
          "name": "p-limit",
          "version": "1.3.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0|p-limit@1.3.0",
          "author": "Sindre Sorhus",
          "description": "Run multiple promise-returning & async functions with limited concurrency",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-limit@1.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-limit.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-limit#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-limit/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/p-limit/-/p-limit-1.3.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "bef717b0b009f43af9ad038f93bb68650649029065d8ae09e9d00d4ac12e87a408e3525872c4bfaa14c66bd12b2145202b758d428258bf2971be3aa68aa100f5"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/read-pkg-up/node_modules/p-limit"
            }
          ]
        },
        {
          "type": "library",
          "name": "p-try",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0|p-try@1.0.0",
          "author": "Sindre Sorhus",
          "description": "`Promise#try()` ponyfill - Starts a promise chain",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-try@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-try.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-try#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-try/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/p-try/-/p-try-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "5357ad358b8c268233dd95d2aebc92163b1741358ec76fe3762f3a2feda946fa61fea30a2fab1b70261d1f6ddfaac6e6f131f61a7d0ec9ba53e1e485942547c3"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/read-pkg-up/node_modules/p-try"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "read-pkg",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|read-pkg@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Read a package.json file",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/read-pkg@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/read-pkg.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/read-pkg#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/read-pkg/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/read-pkg/-/read-pkg-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "04babf7023bdb70a3e9418224d836a0fa19db4af2ce0da5a5ab97afeb08ef70d13512f28265edc993a0e65f45896529321263a9edd54ee3439ddbae62aa63a04"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/read-pkg"
        }
      ]
    },
    {
      "type": "library",
      "name": "through2",
      "version": "3.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|through2@3.0.2",
      "author": "Rod Vagg",
      "description": "A tiny wrapper around Node.js streams.Transform (Streams2/3) to avoid explicit subclassing noise",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/through2@3.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/rvagg/through2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/rvagg/through2#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/rvagg/through2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/through2/-/through2-3.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7a7683438314c8fd96e99c93e84b0ccea04f65a33f6af83c8aea3e976777402b3427ee916aa90757fdbf94ec034ee7811de27fd8b1bd96b2d6ddde6b58fb9cb9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/through2"
        }
      ]
    },
    {
      "type": "library",
      "name": "concat-stream",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|concat-stream@2.0.0",
      "author": "Max Ogden",
      "description": "writable stream that concatenates strings or binary data and calls a callback with the result",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/concat-stream@2.0.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/maxogden/concat-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/maxogden/concat-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/maxogden/concat-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/concat-stream/-/concat-stream-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "316b9f61d170e7771c1a3080f8e97b5c96290255bafe9ad2333b8f393467246706cee84b9f849caf3eea7faa3c6d1399e75e25b5acdc2052597af71f6e8d31ec"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/concat-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-changelog-preset-loader",
      "version": "2.3.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|conventional-changelog-preset-loader@2.3.4",
      "description": "Configuration preset loader for `conventional-changelog`.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-preset-loader@2.3.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/conventional-changelog.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-changelog-preset-loader#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-changelog-preset-loader/-/conventional-changelog-preset-loader-2.3.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1842915a4ad2019793ab9f988d464e631747abe722e1d3701efa5a042dfe10d6a5cc55ae0966bd1195d2b9906992bef6b0c74a07ed5fc83578b5a90ad4b7f9f2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-changelog-preset-loader"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-commits-filter",
      "version": "2.0.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|conventional-commits-filter@2.0.7",
      "author": "Steve Mao",
      "description": "Filter out reverted commits parsed by conventional-commits-parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-commits-filter@2.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/conventional-changelog.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-commits-filter#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-commits-filter/-/conventional-commits-filter-2.0.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0124bd49a98e3f84db08296c447c481d745f7060a722842a92f0330926d9cd314b7dc4ea255ba00746a0460b0410bb2a69e5a0b17bf9d77792d75eb09e54923c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-commits-filter"
        }
      ]
    },
    {
      "type": "library",
      "name": "pump",
      "version": "3.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|pump@3.0.3",
      "author": "Mathias Buus Madsen",
      "description": "pipe streams together and close all of them if one of them closes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pump@3.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/mafintosh/pump.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mafintosh/pump#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mafintosh/pump/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pump/-/pump-3.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b68770c4b318eff85e49c2a69edc101bc09756459439d63122f636b34556000321fe777c4a862245a2a396befe882b3df387f63fccefadf59c0c36156fbdcd7c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pump"
        }
      ]
    },
    {
      "type": "library",
      "name": "balanced-match",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|balanced-match@1.0.2",
      "author": "Julian Gruber",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/balanced-match.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/balanced-match",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/balanced-match/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "de849e50ed13315ebb84dd4099b5ec2b8c9aa94eed8e21e56f144364ea47d0a5bdf82797e1b440697d009f1b74b71d8cae94695b041a3f02252121098585393f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/balanced-match"
        }
      ]
    },
    {
      "type": "library",
      "name": "concat-map",
      "version": "0.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|concat-map@0.0.1",
      "author": "James Halliday",
      "description": "concatenative mapdashery",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/substack/node-concat-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-concat-map#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-concat-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/concat-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "fs-vacuum",
      "version": "1.2.10",
      "bom-ref": "pug@2.0.4-tuxcare.2|fs-vacuum@1.2.10",
      "author": "Forrest L Norvell",
      "description": "recursively remove empty directories -- to a point",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fs-vacuum@1.2.10",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/fs-vacuum.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/fs-vacuum",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/fs-vacuum/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fs-vacuum/-/fs-vacuum-1.2.10.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6f06efd45716630c4dd45d3c2354c737c9d2e107bfa46ab480cf1dcb5277e2fa71c69dea8192893cf6aa7b1dfa47264ed2c0f627eda87276f00b677f3a360809"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fs-vacuum"
        }
      ]
    },
    {
      "type": "library",
      "name": "iferr",
      "version": "0.1.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|iferr@0.1.5",
      "author": "Nadav Ivgi",
      "description": "Higher-order functions for easier error handling",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/iferr@0.1.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/shesek/iferr.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/shesek/iferr",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/shesek/iferr/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/iferr/-/iferr-0.1.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0d43453798fb4e59f40fe4f1ce5a148ca07e0ad56eea6ca7d091056a4e9d1b5f2636df58910ea5cc609d69fc287c8499d652c5df144727df152b2f729e470568"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/iferr"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-is-inside",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|path-is-inside@1.0.2",
      "author": "Domenic Denicola",
      "description": "Tests whether one path is inside another path",
      "licenses": [
        {
          "expression": "(WTFPL OR MIT)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/path-is-inside@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/domenic/path-is-inside.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/domenic/path-is-inside#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/domenic/path-is-inside/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0d4589af7f942e9e335e6a25fd266415fdc91ac4bdfd222ff98dd1b7ddff5233e90e99250797f57abe0edcf3886d4b9427715782ab5ed90ed2ad4eb302ac24f3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-is-inside"
        }
      ]
    },
    {
      "type": "library",
      "name": "nopt",
      "version": "3.0.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|nopt@3.0.6",
      "author": "Isaac Z. Schlueter",
      "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/nopt@3.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/nopt.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/nopt#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/nopt/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/nopt/-/nopt-3.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e0652dde4484626938213c7307f6fdbda2037d455637f325d45c25d752259c81b689a27d3ba59767d4ab60cf4d2c8f0e08189e37663c4960b6a09574450eea62"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/nopt"
        }
      ]
    },
    {
      "type": "library",
      "name": "isexe",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|isexe@2.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "Minimal module to check if a file is executable.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/isexe.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/isexe#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/isexe/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "447c4c2e9f659ca1c61d19e0f5016144231b600715a67ebdb2648672addfdfac638155564e18f8aaa2db4cb96aed2b23f01f9f210d44b8210623694ab3241e23"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/isexe"
        }
      ]
    },
    {
      "type": "library",
      "name": "os-homedir",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|os-homedir@1.0.2",
      "author": "Sindre Sorhus",
      "description": "Node.js 4 `os.homedir()` ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/os-homedir@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/os-homedir.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/os-homedir#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/os-homedir/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "079254ddc69bce4f1cebb99145ddc40a644e69f8d83176eece5c2da9d33c21b4bc92d9538b1f1a1466f66c018aad24489677cac28bc6514afbd8950fc8e6fa91"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/os-homedir"
        }
      ]
    },
    {
      "type": "library",
      "name": "os-tmpdir",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|os-tmpdir@1.0.2",
      "author": "Sindre Sorhus",
      "description": "Node.js os.tmpdir() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/os-tmpdir@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/os-tmpdir.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/os-tmpdir#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/os-tmpdir/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0f6151d37562afb148bb8e57058db49936fefd9496074d2c8d4f637505edf37803ac8e19b73e45b3bff2cbbe20d8de52550638c58d6a0ebe2b35d770611557d2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/os-tmpdir"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsonparse",
      "version": "1.3.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|jsonparse@1.3.1",
      "author": "Tim Caswell",
      "description": "This is a pure-js JSON streaming parser for node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsonparse@1.3.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/creationix/jsonparse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/creationix/jsonparse#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/creationix/jsonparse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsonparse/-/jsonparse-1.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3ce417be974bebdf8296e62c8a5949ed25212afcad6235bdbc6fc62a99dffb13fc51681810cfd168ccc71e87db00b0e229b6cfd56f141189a01a5dfd5a43d9b2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsonparse"
        }
      ]
    },
    {
      "type": "library",
      "name": "agentkeepalive",
      "version": "3.5.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|agentkeepalive@3.5.3",
      "author": "fengmk2",
      "description": "Missing keepalive http.Agent",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/agentkeepalive@3.5.3",
      "externalReferences": [
        {
          "url": "git://github.com/node-modules/agentkeepalive.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/node-modules/agentkeepalive#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/node-modules/agentkeepalive/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/agentkeepalive/-/agentkeepalive-3.5.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "caa5cbfa4e6bafcf994693809ed91a691816804e68f044808f90f2466553092a19c579aa7a66fd0dded3e22e54cf0b8445d2c0254cba5f347dcc556e7f493393"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/agentkeepalive"
        }
      ]
    },
    {
      "type": "library",
      "name": "cacache",
      "version": "11.3.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|cacache@11.3.3",
      "author": "Kat Marchán",
      "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cacache@11.3.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/zkat/cacache.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zkat/cacache#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zkat/cacache/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cacache/-/cacache-11.3.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a7c59c9de0b2b6fccfc610ef629df53c3d37f6f8bbec8d765befca7d1f52f0065b6a20111410a9b0f252fbdba159f7817de02d5bba3fe2fb77314a8b91b63a9c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cacache"
        }
      ]
    },
    {
      "type": "library",
      "name": "http-cache-semantics",
      "version": "3.8.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|http-cache-semantics@3.8.1",
      "author": "Kornel Lesiński",
      "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/http-cache-semantics@3.8.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/pornel/http-cache-semantics.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/pornel/http-cache-semantics#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/pornel/http-cache-semantics/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-3.8.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e5a8b68a4b3257c6579a76611c7e2b58fa31c62b2d11ec528b9f77eb3210d5b9cd4d6e559c0f3907a3ff5695e244cd35ec8811bdbda42a8d5afffcbed304a9df"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/http-cache-semantics"
        }
      ]
    },
    {
      "type": "library",
      "name": "http-proxy-agent",
      "version": "2.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0",
      "author": "Nathan Rajlich",
      "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/http-proxy-agent@2.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/TooTallNate/node-http-proxy-agent.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/TooTallNate/node-http-proxy-agent#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/TooTallNate/node-http-proxy-agent/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ab01db04b57b5af881974ad0b0ecc7ea8e65c32388bf0a7f05d167bd5c5739195dbb94e68c57e3cc17165164b9916019866bfe26d883852b900a9e2c05f6c882"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/http-proxy-agent"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "debug",
          "version": "3.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0|debug@3.1.0",
          "author": "TJ Holowaychuk",
          "description": "small debugging utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/debug@3.1.0",
          "externalReferences": [
            {
              "url": "git://github.com/visionmedia/debug.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/visionmedia/debug#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/visionmedia/debug/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/debug/-/debug-3.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "397f17a8feffd5af5caa4c58c36c97b2cd797f6e8d2960690d741dd3fb8afca3ea7508716cf6bdf78867ce3704d95a90a43b257f9e7bdb770a3d43864a6318de"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/http-proxy-agent/node_modules/debug"
            }
          ]
        },
        {
          "type": "library",
          "name": "ms",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0|ms@2.0.0",
          "description": "Tiny milisecond conversion utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ms@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/zeit/ms.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zeit/ms#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zeit/ms/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "4e9a7ad0fe885090d3b8eabfe59f1c76c93326e8dfc2a7ce4e4af02308fb211212a679099d3e92c89e0f08f9c63281630bd75d85a979295218b40b7dee2c74e4"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/http-proxy-agent/node_modules/ms"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "https-proxy-agent",
      "version": "2.2.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|https-proxy-agent@2.2.4",
      "author": "Nathan Rajlich",
      "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/https-proxy-agent@2.2.4",
      "externalReferences": [
        {
          "url": "git://github.com/TooTallNate/node-https-proxy-agent.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/TooTallNate/node-https-proxy-agent#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/TooTallNate/node-https-proxy-agent/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-2.2.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3a6bdfa10e7758b8ed03d1de60ff5136b58c273cc0cf524669216bd678a38343d547525a0ffc5b26ad667442089711a95e9f5e49efced8b814f432664cf77412"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/https-proxy-agent"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "debug",
          "version": "3.2.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|https-proxy-agent@2.2.4|debug@3.2.7",
          "author": "TJ Holowaychuk",
          "description": "small debugging utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/debug@3.2.7",
          "externalReferences": [
            {
              "url": "git://github.com/visionmedia/debug.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/visionmedia/debug#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/visionmedia/debug/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/debug/-/debug-3.2.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "0858f3618022e1385f890be2ceb1507af4d35c7b670aa59f7bbc75021804b1c4f3e996cb6dfa0b44b3ee81343206d87a7fc644455512c961c50ffed6bb8b755d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/https-proxy-agent/node_modules/debug"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "node-fetch-npm",
      "version": "2.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|node-fetch-npm@2.0.4",
      "author": "David Frank",
      "description": "An npm cli-oriented fork of the excellent node-fetch",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/node-fetch-npm@2.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/node-fetch-npm.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/node-fetch-npm",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/node-fetch-npm/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/node-fetch-npm/-/node-fetch-npm-2.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "88eb88403583ca386ff6a483ae3f5aabf925b7a17dcf5a76a2d077015eefdf304370bff1f8e7c6b2f19065909c3196d47f8523c35c46350923bc69d54f6d9c2a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/node-fetch-npm"
        }
      ]
    },
    {
      "type": "library",
      "name": "socks-proxy-agent",
      "version": "4.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|socks-proxy-agent@4.0.2",
      "author": "Nathan Rajlich",
      "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/socks-proxy-agent@4.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/TooTallNate/node-socks-proxy-agent.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/TooTallNate/node-socks-proxy-agent#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/TooTallNate/node-socks-proxy-agent/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/socks-proxy-agent/-/socks-proxy-agent-4.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "353eacc87848f4b9ae10c48ae8a77657b80dbf92856682c4ed5e6e7569a7d1d7bedcc923dd4300fc024f2f278d515984942bab487b5474cdc44e9477cfbef45a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/socks-proxy-agent"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "agent-base",
          "version": "4.2.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|socks-proxy-agent@4.0.2|agent-base@4.2.1",
          "author": "Nathan Rajlich",
          "description": "Turn a function into an `http.Agent` instance",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/agent-base@4.2.1",
          "externalReferences": [
            {
              "url": "git://github.com/TooTallNate/node-agent-base.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/TooTallNate/node-agent-base#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/TooTallNate/node-agent-base/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/agent-base/-/agent-base-4.2.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "255c1732bf671d84d45ec045294aa1270be571853f6e5ade38452484d476797648bf077e73ea395783200cf2969cc4bfe7a6b03774d1cc83fe2a83e7faba10b6"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/socks-proxy-agent/node_modules/agent-base"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "delegates",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|delegates@1.0.0",
      "description": "delegate methods and accessors to another property",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/delegates@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/visionmedia/node-delegates.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/visionmedia/node-delegates#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/visionmedia/node-delegates/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/delegates"
        }
      ]
    },
    {
      "type": "library",
      "name": "wide-align",
      "version": "1.1.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|wide-align@1.1.5",
      "author": "Rebecca Turner",
      "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/wide-align@1.1.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/iarna/wide-align.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/iarna/wide-align#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/iarna/wide-align/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "78330e45868f359e2c408bae60f0c7750bdfe20c8217dac4115ff23f119fc0f911a1dc048223145174f1fdd7b1f8c7b4c31c79dd2f8d8141da3fbcb73069439a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/wide-align"
        }
      ]
    },
    {
      "type": "library",
      "name": "move-concurrently",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|move-concurrently@1.0.1",
      "author": "Rebecca Turner",
      "description": "Promises of moves of files or directories with rename, falling back to recursive rename/copy on EXDEV errors, with configurable concurrency and win32 junction support.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/move-concurrently@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/move-concurrently.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://www.npmjs.com/package/move-concurrently",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/move-concurrently/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/move-concurrently/-/move-concurrently-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "85dac5c593b2703fe0e80e92a08d9b079340ff9344a83d39ebdf92e3b59984fbe6e3ab03e746477586859a7b9ae659dd75ef6b0871a399f2bb67c06e0adfcf71"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/move-concurrently"
        }
      ]
    },
    {
      "type": "library",
      "name": "duplexify",
      "version": "3.7.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|duplexify@3.7.1",
      "author": "Mathias Buus",
      "description": "Turn a writable and readable stream into a streams2 duplex stream with support for async initialization and streams1/streams2 input",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/duplexify@3.7.1",
      "externalReferences": [
        {
          "url": "git://github.com/mafintosh/duplexify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mafintosh/duplexify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mafintosh/duplexify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/duplexify/-/duplexify-3.7.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d3bcfcbafdb03324b9d642a10f52ac757260e5643ab7ddd19dea91c541e7b245d5b6561890ba8cd20a92b50677a63d3bde0ebcee33c21eba8d7c2cdac0b621e6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/duplexify"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "readable-stream",
          "version": "2.3.8",
          "bom-ref": "pug@2.0.4-tuxcare.2|duplexify@3.7.1|readable-stream@2.3.8",
          "description": "Streams3, a user-land copy of the stream library from Node.js",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@2.3.8",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f29d00524e173838087b04a2d25f04a63b3e1159d688aecda03204194d07844efe67263c0f520c63ba1dbb9951ac55c683bd4bd79286f10acf9ae9b8e514ed74"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/duplexify/node_modules/readable-stream"
            }
          ]
        },
        {
          "type": "library",
          "name": "isarray",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|duplexify@3.7.1|isarray@1.0.0",
          "author": "Julian Gruber",
          "description": "Array#isArray for older browsers",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isarray@1.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/isarray.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/isarray",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/isarray/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "54b82121634ce842d0ce8ef3c26720d0d99357258a623bc878cf37ca3a74c110d39949eb33aefc7d06dc281a3a9f6089105d2cce81bfff2b60f932a56bcf402d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/duplexify/node_modules/isarray"
            }
          ]
        },
        {
          "type": "library",
          "name": "safe-buffer",
          "version": "5.1.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|duplexify@3.7.1|safe-buffer@5.1.2",
          "author": "Feross Aboukhadijeh",
          "description": "Safer Node.js Buffer API",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/safe-buffer@5.1.2",
          "externalReferences": [
            {
              "url": "git://github.com/feross/safe-buffer.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/feross/safe-buffer",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/feross/safe-buffer/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/duplexify/node_modules/safe-buffer"
            }
          ]
        },
        {
          "type": "library",
          "name": "string_decoder",
          "version": "1.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|duplexify@3.7.1|string_decoder@1.1.1",
          "description": "The string_decoder module from Node core",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string_decoder@1.1.1",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/string_decoder.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/duplexify/node_modules/string_decoder"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "end-of-stream",
      "version": "1.4.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|end-of-stream@1.4.5",
      "author": "Mathias Buus",
      "description": "Call a callback when a readable/writable/duplex stream has completed or failed.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/end-of-stream@1.4.5",
      "externalReferences": [
        {
          "url": "git://github.com/mafintosh/end-of-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mafintosh/end-of-stream",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mafintosh/end-of-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a2810673a1cfdbac57abf37e18218e4f424a08b0c6aead9b41466b43b832ac989900d27ff180d3c53a5005718c9fe59b2105cd569c96ca69bb2985480909f23a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/end-of-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "flush-write-stream",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|flush-write-stream@1.1.1",
      "author": "Mathias Buus",
      "description": "A write stream constructor that supports a flush function that is called before finish is emitted",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/flush-write-stream@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/mafintosh/flush-write-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mafintosh/flush-write-stream",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mafintosh/flush-write-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/flush-write-stream/-/flush-write-stream-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dd9e17845677f7ddae22ad173aa6fd02b7a89ee792629844ea861ba6de7edeed3a2569256ec3e436fdd92a43fd073febfb531609a328490dbc3fce7ed5873bef"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/flush-write-stream"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "readable-stream",
          "version": "2.3.8",
          "bom-ref": "pug@2.0.4-tuxcare.2|flush-write-stream@1.1.1|readable-stream@2.3.8",
          "description": "Streams3, a user-land copy of the stream library from Node.js",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@2.3.8",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f29d00524e173838087b04a2d25f04a63b3e1159d688aecda03204194d07844efe67263c0f520c63ba1dbb9951ac55c683bd4bd79286f10acf9ae9b8e514ed74"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/flush-write-stream/node_modules/readable-stream"
            }
          ]
        },
        {
          "type": "library",
          "name": "isarray",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|flush-write-stream@1.1.1|isarray@1.0.0",
          "author": "Julian Gruber",
          "description": "Array#isArray for older browsers",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isarray@1.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/isarray.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/isarray",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/isarray/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "54b82121634ce842d0ce8ef3c26720d0d99357258a623bc878cf37ca3a74c110d39949eb33aefc7d06dc281a3a9f6089105d2cce81bfff2b60f932a56bcf402d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/flush-write-stream/node_modules/isarray"
            }
          ]
        },
        {
          "type": "library",
          "name": "safe-buffer",
          "version": "5.1.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|flush-write-stream@1.1.1|safe-buffer@5.1.2",
          "author": "Feross Aboukhadijeh",
          "description": "Safer Node.js Buffer API",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/safe-buffer@5.1.2",
          "externalReferences": [
            {
              "url": "git://github.com/feross/safe-buffer.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/feross/safe-buffer",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/feross/safe-buffer/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/flush-write-stream/node_modules/safe-buffer"
            }
          ]
        },
        {
          "type": "library",
          "name": "string_decoder",
          "version": "1.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|flush-write-stream@1.1.1|string_decoder@1.1.1",
          "description": "The string_decoder module from Node core",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string_decoder@1.1.1",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/string_decoder.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/flush-write-stream/node_modules/string_decoder"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "from2",
      "version": "2.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|from2@2.3.0",
      "author": "Hugh Kennedy",
      "description": "Convenience wrapper for ReadableStream, with an API lifted from \"from\" and \"through2\"",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/from2@2.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/hughsk/from2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hughsk/from2",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hughsk/from2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/from2/-/from2-2.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "38c717ff8202feea843d58067b27cddb62c993a019acc911647c5c1c1301bc749c0c68304e6d864f65a482da1cc9ddc97d97df8e3da46140d75c8234164f56d2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/from2"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "readable-stream",
          "version": "2.3.8",
          "bom-ref": "pug@2.0.4-tuxcare.2|from2@2.3.0|readable-stream@2.3.8",
          "description": "Streams3, a user-land copy of the stream library from Node.js",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@2.3.8",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f29d00524e173838087b04a2d25f04a63b3e1159d688aecda03204194d07844efe67263c0f520c63ba1dbb9951ac55c683bd4bd79286f10acf9ae9b8e514ed74"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/from2/node_modules/readable-stream"
            }
          ]
        },
        {
          "type": "library",
          "name": "isarray",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|from2@2.3.0|isarray@1.0.0",
          "author": "Julian Gruber",
          "description": "Array#isArray for older browsers",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isarray@1.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/isarray.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/isarray",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/isarray/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "54b82121634ce842d0ce8ef3c26720d0d99357258a623bc878cf37ca3a74c110d39949eb33aefc7d06dc281a3a9f6089105d2cce81bfff2b60f932a56bcf402d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/from2/node_modules/isarray"
            }
          ]
        },
        {
          "type": "library",
          "name": "safe-buffer",
          "version": "5.1.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|from2@2.3.0|safe-buffer@5.1.2",
          "author": "Feross Aboukhadijeh",
          "description": "Safer Node.js Buffer API",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/safe-buffer@5.1.2",
          "externalReferences": [
            {
              "url": "git://github.com/feross/safe-buffer.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/feross/safe-buffer",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/feross/safe-buffer/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/from2/node_modules/safe-buffer"
            }
          ]
        },
        {
          "type": "library",
          "name": "string_decoder",
          "version": "1.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|from2@2.3.0|string_decoder@1.1.1",
          "description": "The string_decoder module from Node core",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string_decoder@1.1.1",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/string_decoder.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/from2/node_modules/string_decoder"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "parallel-transform",
      "version": "1.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|parallel-transform@1.2.0",
      "author": "Mathias Buus Madsen",
      "description": "Transform stream that allows you to run your transforms in parallel without changing the order",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/parallel-transform@1.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/mafintosh/parallel-transform.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mafintosh/parallel-transform#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mafintosh/parallel-transform/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/parallel-transform/-/parallel-transform-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3f6bd2988bb7f2e225bdd714edf0e4cabc63df7813532fc004ee5951b1a8c31342a2906afcea03e366cfe1498cac9a0fca4e14a9fd26bb79ad5818470990fcca"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/parallel-transform"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "readable-stream",
          "version": "2.3.8",
          "bom-ref": "pug@2.0.4-tuxcare.2|parallel-transform@1.2.0|readable-stream@2.3.8",
          "description": "Streams3, a user-land copy of the stream library from Node.js",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@2.3.8",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f29d00524e173838087b04a2d25f04a63b3e1159d688aecda03204194d07844efe67263c0f520c63ba1dbb9951ac55c683bd4bd79286f10acf9ae9b8e514ed74"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/parallel-transform/node_modules/readable-stream"
            }
          ]
        },
        {
          "type": "library",
          "name": "isarray",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|parallel-transform@1.2.0|isarray@1.0.0",
          "author": "Julian Gruber",
          "description": "Array#isArray for older browsers",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isarray@1.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/isarray.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/isarray",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/isarray/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "54b82121634ce842d0ce8ef3c26720d0d99357258a623bc878cf37ca3a74c110d39949eb33aefc7d06dc281a3a9f6089105d2cce81bfff2b60f932a56bcf402d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/parallel-transform/node_modules/isarray"
            }
          ]
        },
        {
          "type": "library",
          "name": "safe-buffer",
          "version": "5.1.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|parallel-transform@1.2.0|safe-buffer@5.1.2",
          "author": "Feross Aboukhadijeh",
          "description": "Safer Node.js Buffer API",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/safe-buffer@5.1.2",
          "externalReferences": [
            {
              "url": "git://github.com/feross/safe-buffer.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/feross/safe-buffer",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/feross/safe-buffer/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/parallel-transform/node_modules/safe-buffer"
            }
          ]
        },
        {
          "type": "library",
          "name": "string_decoder",
          "version": "1.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|parallel-transform@1.2.0|string_decoder@1.1.1",
          "description": "The string_decoder module from Node core",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string_decoder@1.1.1",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/string_decoder.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/parallel-transform/node_modules/string_decoder"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "pumpify",
      "version": "1.5.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|pumpify@1.5.1",
      "author": "Mathias Buus",
      "description": "Combine an array of streams into a single duplex stream using pump and duplexify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pumpify@1.5.1",
      "externalReferences": [
        {
          "url": "git://github.com/mafintosh/pumpify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mafintosh/pumpify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mafintosh/pumpify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pumpify/-/pumpify-1.5.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a02959237ec7bee50927148a2ab0b5edb67d0aed1962110018fb0f532f4a94c526bfd74a5f6a3bed1526abb7f75e32316f0c86c18cdbcd0d4bd8ab3cb08ada75"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pumpify"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "pump",
          "version": "2.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|pumpify@1.5.1|pump@2.0.1",
          "author": "Mathias Buus Madsen",
          "description": "pipe streams together and close all of them if one of them closes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/pump@2.0.1",
          "externalReferences": [
            {
              "url": "git://github.com/mafintosh/pump.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mafintosh/pump#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mafintosh/pump/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/pump/-/pump-2.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "aee3cc35190ddcc1cfd5c58973d396afe4ffc433f48e15d808b7c9701b97e788617c806769098050c7c3706e0333950c581c816c963af504a9866de3b4328890"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/pumpify/node_modules/pump"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "stream-each",
      "version": "1.2.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|stream-each@1.2.3",
      "author": "Mathias Buus",
      "description": "Iterate all the data in a stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stream-each@1.2.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/mafintosh/stream-each.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mafintosh/stream-each",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mafintosh/stream-each/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stream-each/-/stream-each-1.2.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "be5302d9ff08daefdb646aa475f2d05bfd776628697a3ffb3e64a2310b1b61d771b93b09a7cbd17b6c7616f544c5983b15a39db38dd1380b852703d1e0c4d92f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stream-each"
        }
      ]
    },
    {
      "type": "library",
      "name": "err-code",
      "version": "1.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|err-code@1.1.2",
      "author": "IndigoUnited",
      "description": "Create an error with a code",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/err-code@1.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/IndigoUnited/js-err-code.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/IndigoUnited/js-err-code#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/IndigoUnited/js-err-code/issues/",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/err-code/-/err-code-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "08900df8ed3fc80d4229f467f525ce19cb52a4433b0c2a27febff9af679714c636cc208905ab0585c33923ed64877029d7516c4025febc61dc78d3efa562a1a0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/err-code"
        }
      ]
    },
    {
      "type": "library",
      "name": "retry",
      "version": "0.10.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|retry@0.10.1",
      "author": "Tim Koschützki",
      "description": "Abstraction for exponential and custom retry strategies for failed operations.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/retry@0.10.1",
      "externalReferences": [
        {
          "url": "git://github.com/tim-kos/node-retry.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tim-kos/node-retry",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tim-kos/node-retry/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/retry/-/retry-0.10.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6575124184c7765dee4bb22e09e8587ccccac880c136802e51b96fcb9a063b95094944e64ad51454f5db03d431775ef7060adee77c8241ccd0b8781158076f25"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/retry"
        }
      ]
    },
    {
      "type": "library",
      "name": "genfun",
      "version": "5.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|genfun@5.0.0",
      "author": "Kat Marchán",
      "description": "Fast, prototype-friendly multimethods.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/genfun@5.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/zkat/genfun.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/zkat/genfun",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zkat/genfun/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/genfun/-/genfun-5.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2860ce01159581aefeae7077cfd49dd8b7adc79d79a307e4d214b11c6baa8c035bd4cfb1d9b1991aa1cb8a8ccfb1831d3363ae6de3278bf1e9c268eaeaa21484"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/genfun"
        }
      ]
    },
    {
      "type": "library",
      "name": "unique-slug",
      "version": "2.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|unique-slug@2.0.2",
      "author": "Rebecca Turner",
      "description": "Generate a unique character string suitible for use in files and URLs.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/unique-slug@2.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/iarna/unique-slug.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/iarna/unique-slug#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/iarna/unique-slug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/unique-slug/-/unique-slug-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ce85abf4e6dac402c3dc338f7e33d2ab1b787e766259b9711c881e5aa5bcc7b52a0f312d1c440bce38b672e258405094e8a9a826290e600665ad31c779b8f1db"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/unique-slug"
        }
      ]
    },
    {
      "type": "library",
      "name": "core-js",
      "version": "2.6.12",
      "bom-ref": "pug@2.0.4-tuxcare.2|core-js@2.6.12",
      "description": "Standard library",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/core-js@2.6.12",
      "externalReferences": [
        {
          "url": "git+https://github.com/zloirock/core-js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zloirock/core-js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zloirock/core-js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/core-js/-/core-js-2.6.12.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "29bdb00b47efb167d0ae093c1d4e655ba53f2dcb3cfbd69a61ccb864573a0c3968e2767b9fbd1d120139aed474a06eae7ca0d49ebc1f58bd665d1e658c36adad"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/core-js"
        }
      ]
    },
    {
      "type": "library",
      "name": "regenerator-runtime",
      "version": "0.11.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|regenerator-runtime@0.11.1",
      "author": "Ben Newman",
      "description": "Runtime for Regenerator-compiled generator and async functions.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/regenerator-runtime@0.11.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/regenerator.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/facebook/regenerator/tree/master#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/regenerator/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.11.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "320b86f79a228f47c2dd05775117f8576483606261267246aaf20881d10278e0c24fdf304960c027de124ae5696105284dc19420be8be32341ee3d431451d206"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/regenerator-runtime"
        }
      ]
    },
    {
      "type": "library",
      "name": "call-bind-apply-helpers",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|call-bind-apply-helpers@1.0.2",
      "author": "Jordan Harband",
      "description": "Helper functions around Function call/apply/bind, for use in `call-bind`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/call-bind-apply-helpers.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/call-bind-apply-helpers#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/call-bind-apply-helpers/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4a9d5a6e52748af0e44b38dc68977112e9cde7f5ef92c149dac30115fabac74af285057fd9bfcac057b6d5c329987b4f3928a3f0af7dff049fa04b9339b9ae31"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/call-bind-apply-helpers"
        }
      ]
    },
    {
      "type": "library",
      "name": "function-bind",
      "version": "1.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|function-bind@1.1.2",
      "author": "Raynos",
      "description": "Implementation of Function.prototype.bind",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/Raynos/function-bind.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Raynos/function-bind",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Raynos/function-bind/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ed71cdc47eea5fdc46e66230c6486e993a31fcc21135c3a00ebc56b0cb76a40af6dd61e9e8cad194dec50521690a9afea153b417be38894811f369c931f1b648"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/function-bind"
        }
      ]
    },
    {
      "type": "library",
      "name": "align-text",
      "version": "0.1.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|align-text@0.1.4",
      "author": "Jon Schlinkert",
      "description": "Align the text in a string.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/align-text@0.1.4",
      "externalReferences": [
        {
          "url": "git://github.com/jonschlinkert/align-text.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/align-text",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/align-text/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/align-text/-/align-text-0.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1ab4d92d1a66a7ac080b6cedad65bd3238d381229c71f7e015a81b343397f79fdd72311c61989b61379a3a7b724902dc770d73b41a0592f8a252f4cc6dbf4c62"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/align-text"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "kind-of",
          "version": "3.2.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|align-text@0.1.4|kind-of@3.2.2",
          "author": "Jon Schlinkert",
          "description": "Get the native type of a value.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/kind-of@3.2.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/kind-of.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/kind-of",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/kind-of/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "34e5bd4105cca191a0fe8aa754da0d4d320510889dd7adbb5827df50124474cc58029abb98d13b0a9cee7083dcf99420db93e17a3ec8252997de13bea1b94eb5"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/align-text/node_modules/kind-of"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "lazy-cache",
      "version": "1.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|lazy-cache@1.0.4",
      "author": "Jon Schlinkert",
      "description": "Cache requires to be lazy-loaded when needed.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lazy-cache@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/lazy-cache.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/lazy-cache",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/lazy-cache/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "444da0d1be55199b0e08538280fee899345816ac9d999901c25e68367435943602e7bbb23bd2aa367355c53ec23921d3c6b44259570054e71b8e4fadbe1feb81"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lazy-cache"
        }
      ]
    },
    {
      "type": "library",
      "name": "core-util-is",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|core-util-is@1.0.2",
      "author": "Isaac Z. Schlueter",
      "description": "The `util.is*` functions introduced in Node v0.12.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/core-util-is.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/core-util-is#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/core-util-is/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/core-util-is"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-locate",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|p-locate@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Get the first fulfilled promise that satisfies the provided testing function",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-locate@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-locate.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-locate#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-locate/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c7ed76c3f4e8fb81857e0261044a620dc2e8cd12467a063e122effcf4b522e4326c4664dc9b54c49f5a3f5a267f19e4573b74150d24e39580fbf61fb230ba549"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-locate"
        }
      ]
    },
    {
      "type": "library",
      "name": "make-dir",
      "version": "2.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|make-dir@2.1.0",
      "author": "Sindre Sorhus",
      "description": "Make a directory and its parents if needed - Think `mkdir -p`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/make-dir@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/make-dir.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/make-dir#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/make-dir/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/make-dir/-/make-dir-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2d2f57f9d73c28bc5709bf1d9e2efd7cb208500e55c99a328d2302c1396e697034a36edc08ad1b857929830fac4d75693f2fe548ee7b8a5462c6a934bc39ad44"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/make-dir"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "pify",
          "version": "4.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|make-dir@2.1.0|pify@4.0.1",
          "author": "Sindre Sorhus",
          "description": "Promisify a callback-style function",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/pify@4.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/pify.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/pify#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/pify/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/pify/-/pify-4.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b81f3490115bfed7ddebc6d595e1bd4f9186b063e326b2c05294793d922b8419c86914d0463a9d252b082a438fe8e00815b8fb18eadcb9d739a4d8d9fa0795da"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/make-dir/node_modules/pify"
            }
          ]
        },
        {
          "type": "library",
          "name": "semver",
          "version": "5.7.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|make-dir@2.1.0|semver@5.7.2",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.7.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/make-dir/node_modules/semver"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "html-escaper",
      "version": "2.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|html-escaper@2.0.2",
      "author": "Andrea Giammarchi",
      "description": "fast and safe way to escape and unescape &<>'\" chars",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/html-escaper@2.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/WebReflection/html-escaper.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/WebReflection/html-escaper",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/WebReflection/html-escaper/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/html-escaper/-/html-escaper-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1f688cb5dd08e0cb7979889aa517480e3a7e5f37a55d0d2d144e094bb605c057af5d73263a9f66c8dad4bc28340fac2cf22aa444f05f28781bc228354a694b7e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/html-escaper"
        }
      ]
    },
    {
      "type": "library",
      "name": "merge-stream",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|merge-stream@2.0.0",
      "author": "Stephen Sugden",
      "description": "Create a stream that emits events from multiple other streams",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/merge-stream@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/grncdr/merge-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/grncdr/merge-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/grncdr/merge-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/merge-stream/-/merge-stream-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "69bbffa8e72e3df9375113df0f39995352ca9aec3c913fb49c81ef2ab2a016bc227e897f76859c740e19aac590f0436b14a91debb31fa68fcba2f6c852c6eddf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/merge-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "growly",
      "version": "1.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|growly@1.3.0",
      "author": "Ibrahim Al-Rajhi",
      "description": "Simple zero-dependency Growl notifications using GNTP.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/growly@1.3.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/theabraham/growly.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/theabraham/growly#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/theabraham/growly/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/growly/-/growly-1.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fb11906346320160a7ab2ec277efa173626a318ce59b4746df425dd1b79a03ae2c44eafc0b89edf1873d579468ddabe54940d3374ba5a8ffd504a8b5fe52f283"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/growly"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-wsl",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-wsl@1.1.0",
      "author": "Sindre Sorhus",
      "description": "Check if the process is running inside Windows Subsystem for Linux (Bash on Windows)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-wsl@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-wsl.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-wsl#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-wsl/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-wsl/-/is-wsl-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "81fca025867680b4c39666d6308d021363309c5cd237fd9265f90c948b42e0afc9065b165430746cee9786a718d7761713b88c700267cd30898cf89378927433"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-wsl"
        }
      ]
    },
    {
      "type": "library",
      "name": "shellwords",
      "version": "0.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|shellwords@0.1.1",
      "author": "Jimmy Cuadra",
      "description": "Manipulate strings according to the word parsing rules of the UNIX Bourne shell.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/shellwords@0.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/jimmycuadra/shellwords.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jimmycuadra/shellwords",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jimmycuadra/shellwords/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/shellwords/-/shellwords-0.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bc5c1251f42fab26e2202c19639f8301620f2cab163b7d50f752522a5dd462ff8ae5cd9044fce7d2acde73a40fbb541cf5e1d822d88fdcd749a8d56a7ad600c3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/shellwords"
        }
      ]
    },
    {
      "type": "library",
      "name": "astral-regex",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|astral-regex@1.0.0",
      "author": "Kevin Mårtensson",
      "description": "Regular expression for matching astral symbols",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/astral-regex@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/kevva/astral-regex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kevva/astral-regex#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kevva/astral-regex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/astral-regex/-/astral-regex-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f91c9fea0dc12a845cee37e9eda77cb4ce13b4c89a5af6c5ff5fec41c64f9244bb6a0dc3e6730109ed947ce4ce36d024686d2d3b48a3dc2e4bc267f5122ca31e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/astral-regex"
        }
      ]
    },
    {
      "type": "library",
      "name": "helper-plugin-utils",
      "group": "@babel",
      "version": "7.27.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/helper-plugin-utils@7.27.1",
      "author": "The Babel Team",
      "description": "General utilities for plugins to use",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-plugin-utils@7.27.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-helper-plugin-utils",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-helper-plugin-utils",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/helper-plugin-utils/-/helper-plugin-utils-7.27.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d609f5529e585e46b761800718aa5b89d790e588dfd6d0daf6a61c832b33f9c3425ee9322e5e838cf5e10f7551c126fc73427db40e1bdbeac7119b5ce91d2d97"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/helper-plugin-utils"
        }
      ]
    },
    {
      "type": "library",
      "name": "test-exclude",
      "version": "5.2.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|test-exclude@5.2.3",
      "author": "Ben Coe",
      "description": "test for inclusion or exclusion of paths using pkg-conf and globs",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/test-exclude@5.2.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/istanbuljs/istanbuljs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://istanbul.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/istanbuljs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/test-exclude/-/test-exclude-5.2.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "33ea31b6c78214edc40ed01a187ee289e8f70819335ea14c6f3a9800009dccaba2e1e640fa9ab7b591300a1bce74d7daef1c72f017db9a025222be37702ffeda"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/test-exclude"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "read-pkg-up",
          "version": "4.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|test-exclude@5.2.3|read-pkg-up@4.0.0",
          "author": "Sindre Sorhus",
          "description": "Read the closest package.json file",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/read-pkg-up@4.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/read-pkg-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-4.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "e9eb50487ee7246b0ad116c6ff64de0f36456bcb218d0d6e9be4b0410e5cc0acb476149774e9dc1216f508fa6f406e21ec5c8e57a101e98955d3226f65034090"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/test-exclude/node_modules/read-pkg-up"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "normalize-path",
      "version": "2.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|normalize-path@2.1.1",
      "author": "Jon Schlinkert",
      "description": "Normalize file path slashes to be unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes unless disabled.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/normalize-path@2.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/normalize-path.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/normalize-path",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/normalize-path/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/normalize-path/-/normalize-path-2.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "de9289c07d7ce17a3f9671faa323f5ab6a4c77b1dcca9aaa991b3dd7febf8b6086b56c082860a438e3139bfcd76e04c4587c35b8da4d8bf8a073778f3981dbeb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/normalize-path"
        }
      ]
    },
    {
      "type": "library",
      "name": "bser",
      "version": "2.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|bser@2.1.1",
      "author": "Wez Furlong",
      "description": "JavaScript implementation of the BSER Binary Serialization",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/bser@2.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/watchman.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://facebook.github.io/watchman/docs/bser.html",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/watchman/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/bser/-/bser-2.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "810c53344fc601f208ae61cb504de8272a7914ee874417e18e7c38ff032603add91832675819a063f972401a670d490698085b49edfdb71d9dfe24ce01f825c1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/bser"
        }
      ]
    },
    {
      "type": "library",
      "name": "loose-envify",
      "version": "1.4.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|loose-envify@1.4.0",
      "author": "Andres Suarez",
      "description": "Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/loose-envify@1.4.0",
      "externalReferences": [
        {
          "url": "git://github.com/zertosh/loose-envify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zertosh/loose-envify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zertosh/loose-envify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "972bb13c6aff59f86b95e9b608bfd472751cd7372a280226043cee918ed8e45ff242235d928ebe7d12debe5c351e03324b0edfeb5d54218e34f04b71452a0add"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/loose-envify"
        }
      ]
    },
    {
      "type": "library",
      "name": "watch",
      "group": "@cnakazawa",
      "version": "1.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|@cnakazawa/watch@1.0.4",
      "author": "Mikeal Rogers",
      "description": "Utilities for watching file trees.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40cnakazawa/watch@1.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/mikeal/watch.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mikeal/watch",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mikeal/watch/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@cnakazawa/watch/-/watch-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bfd90884ac237994e1896acb9a3d32d7b096a3275d0122e3f4edb2bdb6646efc3f377ad6398cbdce457aeaeaec02856bd26575e5b2fc834738419504e9c743a1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@cnakazawa/watch"
        }
      ]
    },
    {
      "type": "library",
      "name": "capture-exit",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|capture-exit@2.0.0",
      "author": "Stefan Penner",
      "description": "safely cleanup in signal handlers",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/capture-exit@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/stefanpenner/capture-exit.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stefanpenner/capture-exit#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stefanpenner/capture-exit/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/capture-exit/-/capture-exit-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3e24ff850993a271e197f1c518df8bc772495339eb558277f8042c9ed8677996ef5bbc7e7f4f1393bc8b2532c4394bc14db76e2de78193111a61750e52b46aea"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/capture-exit"
        }
      ]
    },
    {
      "type": "library",
      "name": "exec-sh",
      "version": "0.3.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|exec-sh@0.3.6",
      "author": "Aleksandr Tsertkov",
      "description": "Execute shell command forwarding all stdio.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/exec-sh@0.3.6",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/tsertkov/exec-sh.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tsertkov/exec-sh#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tsertkov/exec-sh/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/exec-sh/-/exec-sh-0.3.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9d09fe848df2a7ea03d21b9884ac2f608df6f8915eabe5e435c0f5180a3763f323c6c7d51a6aebceb9f38d688d63a7fea5408fe38d1f4e1b05879819ad1014ff"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/exec-sh"
        }
      ]
    },
    {
      "type": "library",
      "name": "makeerror",
      "version": "1.0.12",
      "bom-ref": "pug@2.0.4-tuxcare.2|makeerror@1.0.12",
      "author": "Naitik Shah",
      "description": "A library to make errors.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/makeerror@1.0.12",
      "externalReferences": [
        {
          "url": "git+https://github.com/daaku/nodejs-makeerror.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/daaku/nodejs-makeerror#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/daaku/nodejs-makeerror/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/makeerror/-/makeerror-1.0.12.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "266a82bd4866b78de669d9691731b8050cc6d99de6eadbd00cd29d0a56673b755b22e749626c6c4f414d24c7a2076f894d295341349b53c41d7ac566c097262e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/makeerror"
        }
      ]
    },
    {
      "type": "library",
      "name": "helper-validator-identifier",
      "group": "@babel",
      "version": "7.28.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/helper-validator-identifier@7.28.5",
      "author": "The Babel Team",
      "description": "Validate identifier/keywords name",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.28.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-helper-validator-identifier",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/babel/babel#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.28.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a92b3889fc33289495dfdb9c363b2f73a5951ece9bed2d37b0e87639c1c5f541df54fa965802d4b0d515ce1481888b63459a0b1f1ee721aad58ea295bac519d5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/helper-validator-identifier"
        }
      ]
    },
    {
      "type": "library",
      "name": "js-tokens",
      "version": "4.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|js-tokens@4.0.0",
      "author": "Simon Lydell",
      "description": "A regex that tokenizes JavaScript.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/js-tokens@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lydell/js-tokens.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lydell/js-tokens#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lydell/js-tokens/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "45d2547e5704ddc5332a232a420b02bb4e853eef5474824ed1b7986cf84737893a6a9809b627dca02b53f5b7313a9601b690f690233a49bce0e026aeb16fcf29"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/js-tokens"
        }
      ]
    },
    {
      "type": "library",
      "name": "picocolors",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|picocolors@1.1.1",
      "author": "Alexey Raspopov",
      "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/picocolors@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/alexeyraspopov/picocolors.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/alexeyraspopov/picocolors#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/alexeyraspopov/picocolors/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/picocolors/-/picocolors-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c5c787dac9e1b5be4cf658aa0ec984c39ea57b7efa993664117fe311bfd1c4d1727a036e97b78db250973fd1438ff2dcbb45fc284c8c71e3f69eda5a1eb0c454"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/picocolors"
        }
      ]
    },
    {
      "type": "library",
      "name": "detect-newline",
      "version": "2.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|detect-newline@2.1.0",
      "author": "Sindre Sorhus",
      "description": "Detect the dominant newline character of a string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/detect-newline@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/detect-newline.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/detect-newline#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/detect-newline/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/detect-newline/-/detect-newline-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0b07df645be525f7d483dcd9034baaae341ac944c2f286fde299ebe6c170695bf720e9a47d41dc587fa35da40addab24139d42a9ef3ff5097fd2e5cdc2a67c66"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/detect-newline"
        }
      ]
    },
    {
      "type": "library",
      "name": "buffer-from",
      "version": "1.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|buffer-from@1.1.2",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/buffer-from@1.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/LinusU/buffer-from.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/LinusU/buffer-from#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/LinusU/buffer-from/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "13e5d0091c126da6a20a1b6fea4e83c2073e6f1f81b3abee2891c7979928c7f05a29b8625f3a903b02b870edb6c84946a763829a3c15853dc79b18323c69c97d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/buffer-from"
        }
      ]
    },
    {
      "type": "library",
      "name": "helper-string-parser",
      "group": "@babel",
      "version": "7.27.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/helper-string-parser@7.27.1",
      "author": "The Babel Team",
      "description": "A utility package to parse strings",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-string-parser@7.27.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-helper-string-parser",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-helper-string-parser",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/helper-string-parser/-/helper-string-parser-7.27.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a8c952c4a6e946502b89d0c4c64f769d2a1bc837693e28d4ab60d6ea80e752a77488e1b19908f2aa13088a123dfb3bf82cfc997518ded9c6af58f6c26d69b778"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/helper-string-parser"
        }
      ]
    },
    {
      "type": "library",
      "name": "diff-sequences",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|diff-sequences@24.9.0",
      "description": "Compare items in two sequences to find a longest common subsequence",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/diff-sequences@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/diff-sequences",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/diff-sequences/-/diff-sequences-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0e3e96937b56c9313e168d6b5bcbf45e1c24f34ba6eb215829bb80c5cf5cdc46712071436306e2df8524e36bb509d9c8895a2bbede119a54838c83f2cc60b67b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/diff-sequences"
        }
      ]
    },
    {
      "type": "library",
      "name": "arr-flatten",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|arr-flatten@1.1.0",
      "author": "Jon Schlinkert",
      "description": "Recursively flatten an array or arrays.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/arr-flatten@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/arr-flatten.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/arr-flatten",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/arr-flatten/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2f784a57947fa79a3cd51eced362069f0a439a4a7a13df365e1b5bbb049edcee2a3ad30c32da1d89c0120350a7cb653e6825dc3699a5fa6e1d3ecbec2778dab6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/arr-flatten"
        }
      ]
    },
    {
      "type": "library",
      "name": "fill-range",
      "version": "4.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|fill-range@4.0.0",
      "author": "Jon Schlinkert",
      "description": "Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fill-range@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/fill-range.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/fill-range",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/fill-range/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fill-range/-/fill-range-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "55ca4b4d6a960e24deaee8238fc7b7f9eb1b83eb244b733d7b9e14b91de209e20331708b4ec007f214d2cc3414fd7ebfeaddde62438aa1949e7f63e553a5355d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fill-range"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "extend-shallow",
          "version": "2.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|fill-range@4.0.0|extend-shallow@2.0.1",
          "author": "Jon Schlinkert",
          "description": "Extend an object with the properties of additional objects. node.js/javascript util.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/extend-shallow@2.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/extend-shallow.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/extend-shallow",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/extend-shallow/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "cc29d3b65c4da0088373782a636698016171ed759689ab2e1762bc31ee566cdf28b4729350a0708cfb4da51b3fadb5199bb2b158068d8fb3f56bfa79d866d5ba"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/fill-range/node_modules/extend-shallow"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-extendable",
          "version": "0.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|fill-range@4.0.0|is-extendable@0.1.1",
          "author": "Jon Schlinkert",
          "description": "Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-extendable@0.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/is-extendable.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extendable",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extendable/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "e413142cda1bd6f8055fa123430e62cd60f1ade7162bd00cef6aee80daf44c595d30e8b47e3e8993ecde288b74c468f87047d0209b61e30dce296389e1ff8017"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/fill-range/node_modules/is-extendable"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "isobject",
      "version": "3.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|isobject@3.0.1",
      "author": "Jon Schlinkert",
      "description": "Returns true if the value is an object and not an array or null.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/isobject@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/isobject.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/isobject",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/isobject/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/isobject/-/isobject-3.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5a107dcc292eec41938ff1d0411cf969440451ea10647d9b59c96d444acea72989e1ba1813ac0bf536ebdb792b44f499f82e73a8d4ab4b0f8273bb196786fbbe"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/isobject"
        }
      ]
    },
    {
      "type": "library",
      "name": "repeat-element",
      "version": "1.1.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|repeat-element@1.1.4",
      "author": "Jon Schlinkert",
      "description": "Create an array by repeating the given value n times.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/repeat-element@1.1.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/repeat-element.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/repeat-element",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/repeat-element/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2c588d7d1712bbb28addebccc983ae0b3bf72f5d135bbc82d46dbff92b4c8caf18e95a9dd8c1bbaff423c38821b6e08e8c5be59e6b3f88c98baa9bd6fc44bf59"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/repeat-element"
        }
      ]
    },
    {
      "type": "library",
      "name": "snapdragon-node",
      "version": "2.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|snapdragon-node@2.1.1",
      "author": "Jon Schlinkert",
      "description": "Snapdragon utility for creating a new AST node in custom code, such as plugins.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/snapdragon-node@2.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/snapdragon-node.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/snapdragon-node",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/snapdragon-node/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/snapdragon-node/-/snapdragon-node-2.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3b6ee5e3168c62dfd1490e53477be9582001e4a6ff73321ca9414e33f0b87d870b9db6547353e48d300c8e87f6a4159a493c0e51deaa5077051951a3eda2309f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/snapdragon-node"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "define-property",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|snapdragon-node@2.1.1|define-property@1.0.0",
          "author": "Jon Schlinkert",
          "description": "Define a non-enumerable property on an object.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/define-property@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/define-property.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/define-property",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/define-property/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/define-property/-/define-property-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "7194d82855aca6df6366c32c716a3cb1cff995b3c2f50d0de6704b81bf9877dd7988bdee741d6e1604b707c602c7ae94547ab4d7c0c0545a1e7bbc7e83182078"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/snapdragon-node/node_modules/define-property"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "split-string",
      "version": "3.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|split-string@3.1.0",
      "author": "Jon Schlinkert",
      "description": "Split a string on a character except when the character is escaped.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/split-string@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/split-string.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/split-string",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/split-string/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/split-string/-/split-string-3.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3733558490d8a7071e5558a2f3f1eee8329f0f61be36b407952fd5fea82fefadc462e755c0470c40dc5dda587ed15ad40725cdfe826497982b3a1616bd05188b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/split-string"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-descriptor",
      "version": "1.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-descriptor@1.0.3",
      "author": "Jon Schlinkert",
      "description": "Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-descriptor@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-descriptor.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-descriptor",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-descriptor/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "24234d19bc1664455a48fb52e3999db6b9de456245a74ecb2e6ca4c5e155e45ea806f345f2f1d27c9b898284f8ef6a527e4f8c7fc56796bb2968504758cf0903"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-descriptor"
        }
      ]
    },
    {
      "type": "library",
      "name": "assign-symbols",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|assign-symbols@1.0.0",
      "author": "Jon Schlinkert",
      "description": "Assign the enumerable es6 Symbol properties from an object (or objects) to the first object passed on the arguments. Can be used as a supplement to other extend, assign or merge methods as a polyfill for the Symbols part of the es6 Object.assign method.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/assign-symbols@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/assign-symbols.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/assign-symbols",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/assign-symbols/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/assign-symbols/-/assign-symbols-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "43e242ed686ef078664dd06987f4eae7d22846da32e8a026e73ccfbf4d1676e8d7f3695b00bf0aed65639deeef742b0099b17801868338fc8ede4d2497ca88af"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/assign-symbols"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-extendable",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-extendable@1.0.1",
      "author": "Jon Schlinkert",
      "description": "Returns true if a value is a plain object, array or function.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-extendable@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/is-extendable.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-extendable",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-extendable/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6ab9d73314f5861a0aa3d9352d976694dc897430dfcb6bf47d78c5966a24e3e8bcba5ffa5a56d581ef5b84cef83a934f40f306513a03b73f8a5dad4f9de27138"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-extendable"
        }
      ]
    },
    {
      "type": "library",
      "name": "expand-brackets",
      "version": "2.1.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4",
      "author": "Jon Schlinkert",
      "description": "Expand POSIX bracket expressions (character classes) in glob patterns.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/expand-brackets@2.1.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/expand-brackets.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/expand-brackets",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/expand-brackets/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-2.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c3fa3338a47d39b937aa859e63f5838ba305b5af40a0c47ecee77ad267676e788c701c51b852720edd8b757ff5e00d540017aa93e524f8b0df529be818aa6964"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/expand-brackets"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "debug",
          "version": "2.6.9",
          "bom-ref": "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|debug@2.6.9",
          "author": "TJ Holowaychuk",
          "description": "small debugging utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/debug@2.6.9",
          "externalReferences": [
            {
              "url": "git://github.com/visionmedia/debug.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/visionmedia/debug#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/visionmedia/debug/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/expand-brackets/node_modules/debug"
            }
          ]
        },
        {
          "type": "library",
          "name": "define-property",
          "version": "0.2.5",
          "bom-ref": "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|define-property@0.2.5",
          "author": "Jon Schlinkert",
          "description": "Define a non-enumerable property on an object.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/define-property@0.2.5",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/define-property.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/define-property",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/define-property/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "46bec00e34197a771e54e00aa29e802e49110261f50381b1f6157fed9ba33d4376ae4013a853b42592d92276c08e9658a09d60531f0c44c4159187a671b3124c"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/expand-brackets/node_modules/define-property"
            }
          ]
        },
        {
          "type": "library",
          "name": "extend-shallow",
          "version": "2.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|extend-shallow@2.0.1",
          "author": "Jon Schlinkert",
          "description": "Extend an object with the properties of additional objects. node.js/javascript util.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/extend-shallow@2.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/extend-shallow.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/extend-shallow",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/extend-shallow/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "cc29d3b65c4da0088373782a636698016171ed759689ab2e1762bc31ee566cdf28b4729350a0708cfb4da51b3fadb5199bb2b158068d8fb3f56bfa79d866d5ba"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/expand-brackets/node_modules/extend-shallow"
            }
          ]
        },
        {
          "type": "library",
          "name": "ms",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|ms@2.0.0",
          "description": "Tiny milisecond conversion utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ms@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/zeit/ms.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zeit/ms#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zeit/ms/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "4e9a7ad0fe885090d3b8eabfe59f1c76c93326e8dfc2a7ce4e4af02308fb211212a679099d3e92c89e0f08f9c63281630bd75d85a979295218b40b7dee2c74e4"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/expand-brackets/node_modules/ms"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-descriptor",
          "version": "0.1.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|is-descriptor@0.1.7",
          "author": "Jon Schlinkert",
          "description": "Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-descriptor@0.1.7",
          "externalReferences": [
            {
              "url": "git+https://github.com/inspect-js/is-descriptor.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/inspect-js/is-descriptor",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/inspect-js/is-descriptor/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "0b782b653bce6de375c6e7787115a5dfae8e3176538f4f871b293886f7e9c78647b753dbeb400d497a822bba5d3937944294731020524e986abc3ed4fa5db612"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/expand-brackets/node_modules/is-descriptor"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-extendable",
          "version": "0.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|is-extendable@0.1.1",
          "author": "Jon Schlinkert",
          "description": "Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-extendable@0.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/is-extendable.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extendable",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extendable/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "e413142cda1bd6f8055fa123430e62cd60f1ade7162bd00cef6aee80daf44c595d30e8b47e3e8993ecde288b74c468f87047d0209b61e30dce296389e1ff8017"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/expand-brackets/node_modules/is-extendable"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "map-cache",
      "version": "0.2.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|map-cache@0.2.2",
      "author": "Jon Schlinkert",
      "description": "Basic cache object for storing key-value pairs.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/map-cache@0.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/map-cache.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/map-cache",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/map-cache/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/map-cache/-/map-cache-0.2.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f32fde57d4106428b29f54a9ad74ab0a6a89374c8d4404def8f3bccedc2aaefadb7512c0dde609174c9a47461ac8b5a431bb1048a592f4dda03dc18473852c66"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/map-cache"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-windows",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-windows@1.0.2",
      "author": "Jon Schlinkert",
      "description": "Returns true if the platform is windows. UMD module, works with node.js, commonjs, browser, AMD, electron, etc.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-windows@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/is-windows.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-windows",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-windows/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7972b55089ead9b3e68f25fa7b754723330ba1b73827de22e005a7f87a6adce5392a4ad10bde8e01c4773d127fa46bba9bc4d19c11cff5d917415b13fc239520"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-windows"
        }
      ]
    },
    {
      "type": "library",
      "name": "safe-regex",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|safe-regex@1.1.0",
      "author": "James Halliday",
      "description": "detect possibly catastrophic, exponential-time regular expressions",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/safe-regex@1.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/safe-regex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/safe-regex",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/safe-regex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/safe-regex/-/safe-regex-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6895dc89fe319da354cef52e0b981c6f8ea84d2ef3be0e23a4c4e7baab6b10f951def16be29c6d753c1a17542cdc49e39fd1caf9997042e8be6bbcf44b2c08ce"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/safe-regex"
        }
      ]
    },
    {
      "type": "library",
      "name": "base",
      "version": "0.11.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|base@0.11.2",
      "author": "Jon Schlinkert",
      "description": "base is the foundation for creating modular, unit testable and highly pluggable node.js applications, starting with a handful of common methods, like `set`, `get`, `del` and `use`.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/base@0.11.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/node-base/base.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/node-base/base",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/node-base/base/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/base/-/base-0.11.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e53e8fe313e0a69d180c5bd25b0119e0da04dda3384014170f39956eb6829058fccc733e99b6bc4b2a81e436d95b247b9981e8e98ec1750a373280389b44de42"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/base"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "define-property",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|base@0.11.2|define-property@1.0.0",
          "author": "Jon Schlinkert",
          "description": "Define a non-enumerable property on an object.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/define-property@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/define-property.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/define-property",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/define-property/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/define-property/-/define-property-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "7194d82855aca6df6366c32c716a3cb1cff995b3c2f50d0de6704b81bf9877dd7988bdee741d6e1604b707c602c7ae94547ab4d7c0c0545a1e7bbc7e83182078"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/base/node_modules/define-property"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "use",
      "version": "3.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|use@3.1.1",
      "author": "Jon Schlinkert",
      "description": "Easily add plugin support to your node.js application.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/use@3.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/use.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/use",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/use/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/use/-/use-3.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "73011255794edeeae5f585a5156fd303d72c842121b6eec8289fe9e6ca09fe01a98fbbdbbc5ac063f7888a843a0f0db72a3661620888a3c1ceb359d0dafaffa1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/use"
        }
      ]
    },
    {
      "type": "library",
      "name": "color-name",
      "version": "1.1.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|color-name@1.1.3",
      "author": "DY",
      "description": "A list of color names and its values",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/color-name@1.1.3",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/dfcreative/color-name.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/dfcreative/color-name",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dfcreative/color-name/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ef67d27a784cc361d931354778203d2829a91086f35a242c8cdf811dc05b4bdbebd66b6dfaf2633dd92c20135498a016f131540cf24ae52514dd0844f4d1170f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/color-name"
        }
      ]
    },
    {
      "type": "library",
      "name": "gen-mapping",
      "group": "@jridgewell",
      "version": "0.3.13",
      "bom-ref": "pug@2.0.4-tuxcare.2|@jridgewell/gen-mapping@0.3.13",
      "author": "Justin Ridgewell",
      "description": "Generate source maps",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.13",
      "externalReferences": [
        {
          "url": "git+https://github.com/jridgewell/sourcemaps.git#packages/gen-mapping",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/gen-mapping",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jridgewell/sourcemaps/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.13.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "da492dffb9e227a32010fc45d1b61d43a7ad65a03e7d0bc370b29c921cb5c8840ecdaa0a8c10634a3eb7fda2d58d8137aa146de5dbccfae5327c283a50a0816c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jridgewell/gen-mapping"
        }
      ]
    },
    {
      "type": "library",
      "name": "trace-mapping",
      "group": "@jridgewell",
      "version": "0.3.31",
      "bom-ref": "pug@2.0.4-tuxcare.2|@jridgewell/trace-mapping@0.3.31",
      "author": "Justin Ridgewell",
      "description": "Trace the original position through a source map",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31",
      "externalReferences": [
        {
          "url": "git+https://github.com/jridgewell/sourcemaps.git#packages/trace-mapping",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/trace-mapping",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jridgewell/sourcemaps/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cf3351f9275048327373c8e869e3fc410a0242bf0db98c76748232b65d507811191c9f6e5ba85e6ecad881bcfc849c1441aa374d608cb667d5f0dbb5b7038b03"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jridgewell/trace-mapping"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsesc",
      "version": "3.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|jsesc@3.1.0",
      "author": "Mathias Bynens",
      "description": "Given some data, jsesc returns the shortest possible stringified & ASCII-safe representation of that data.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsesc@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mathiasbynens/jsesc.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://mths.be/jsesc",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mathiasbynens/jsesc/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsesc/-/jsesc-3.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fec33774ed853b35e3290849ba8d10d7bdf07f628ea3cb7823cbc7cba945f69a14a7b6ca4f4fcd1c4f1f3d7db73f07e19f291faa70b6c51c4e9d5c395ee18868"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsesc"
        }
      ]
    },
    {
      "type": "library",
      "name": "compat-data",
      "group": "@babel",
      "version": "7.28.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/compat-data@7.28.5",
      "author": "The Babel Team",
      "description": "The compat-data to determine required Babel plugins",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/compat-data@7.28.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-compat-data",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/babel/babel#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/compat-data/-/compat-data-7.28.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "eae157c826b2a1c45baa164e07ee9772e65b90c3629b07d51858e2f024d99c2cce1d51af0eacef8adbb5aded805392d13a58b3ede40f841f02a4032f9f1f448c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/compat-data"
        }
      ]
    },
    {
      "type": "library",
      "name": "helper-validator-option",
      "group": "@babel",
      "version": "7.27.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/helper-validator-option@7.27.1",
      "author": "The Babel Team",
      "description": "Validate plugin/preset options",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-option@7.27.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-helper-validator-option",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/babel/babel#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/helper-validator-option/-/helper-validator-option-7.27.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "62f8c9a30f45c5b84514a0d2b859d509ed96c57935cd6736d9f15e3d5344696244bbc22b65595d6ba374b87c3366b50cd6297b342f4c969e0c68961b61df494a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/helper-validator-option"
        }
      ]
    },
    {
      "type": "library",
      "name": "browserslist",
      "version": "4.27.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|browserslist@4.27.0",
      "author": "Andrey Sitnik",
      "description": "Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-preset",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browserslist@4.27.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/browserslist/browserslist.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserslist/browserslist#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserslist/browserslist/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browserslist/-/browserslist-4.27.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "017550c1d868b757aa2e28706ac3c49615f6b4066206359d27d8bf65c8f64ba418223931eb638a49f9e86e4ae207cd42de5e30d2b572dcdb788da4c196d604a7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browserslist"
        }
      ]
    },
    {
      "type": "library",
      "name": "helper-module-imports",
      "group": "@babel",
      "version": "7.27.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/helper-module-imports@7.27.1",
      "author": "The Babel Team",
      "description": "Babel helper functions for inserting module loads",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-module-imports@7.27.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-helper-module-imports",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://babel.dev/docs/en/next/babel-helper-module-imports",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/helper-module-imports/-/helper-module-imports-7.27.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d204855943cd5cda29aad20f42f943e56817608e4663690fd9c0afa13f247338db7dc7ee2258d36dc5abba50f50883c85f682dd708216c3cb4f32135a7efebdf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/helper-module-imports"
        }
      ]
    },
    {
      "type": "library",
      "name": "helper-globals",
      "group": "@babel",
      "version": "7.28.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/helper-globals@7.28.0",
      "author": "The Babel Team",
      "description": "A collection of JavaScript globals for Babel internal usage",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-globals@7.28.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#packages/babel-helper-globals",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/babel/babel#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/helper-globals/-/helper-globals-7.28.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f96e9c21291715ad635ec0c475803c1de7af413fc550b871cd1f7da71a6196d65c55aba0a6ce774c709e89603c4a0bb1c694a9de028f8ae61f496a2990b43887"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/helper-globals"
        }
      ]
    },
    {
      "type": "library",
      "name": "ms",
      "version": "2.1.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|ms@2.1.3",
      "description": "Tiny millisecond conversion utility",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/vercel/ms.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/vercel/ms#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/vercel/ms/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e85973b9b4cb646dc9d9afcd542025784863ceae68c601f268253dc985ef70bb2fa1568726afece715c8ebf5d73fab73ed1f7100eb479d23bfb57b45dd645394"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ms"
        }
      ]
    },
    {
      "type": "library",
      "name": "babel__generator",
      "group": "@types",
      "version": "7.27.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@types/babel__generator@7.27.0",
      "description": "TypeScript definitions for @babel/generator",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40types/babel__generator@7.27.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/babel__generator",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/babel__generator",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@types/babel__generator/-/babel__generator-7.27.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b9f15dd978bdd8e0153d8b32f8fe27eff53b7baf1f7b1d3e11ef20486f4a5fb7a8d3ce025a2438b1dc64b6f765d1b38fba95ed5493d8d7dce4e84c16a9443c96"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@types/babel__generator"
        }
      ]
    },
    {
      "type": "library",
      "name": "babel__template",
      "group": "@types",
      "version": "7.4.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|@types/babel__template@7.4.4",
      "description": "TypeScript definitions for @babel/template",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40types/babel__template@7.4.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/babel__template",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/babel__template",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@types/babel__template/-/babel__template-7.4.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "87f354692c86e44cb1048a7c611c68e1131edbfa9082fca8c11c1533385884108e35b5bc3d4b20e2590532b86066151ee73dcbdcc88b0eebf227f09a3dad80f0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@types/babel__template"
        }
      ]
    },
    {
      "type": "library",
      "name": "babel__traverse",
      "group": "@types",
      "version": "7.28.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|@types/babel__traverse@7.28.0",
      "description": "TypeScript definitions for @babel/traverse",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40types/babel__traverse@7.28.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/babel__traverse",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/babel__traverse",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@types/babel__traverse/-/babel__traverse-7.28.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f0fbdc5dfef48130d9060b7da6dc49f1e9417818dc2ce01c3ada0efe63c98ed8e2d7e09d19b1e09bbee89b51abb0fc6c884fae5c8a4d48aeb8518688c105dde1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@types/babel__traverse"
        }
      ]
    },
    {
      "type": "library",
      "name": "plugin-syntax-object-rest-spread",
      "group": "@babel",
      "version": "7.8.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|@babel/plugin-syntax-object-rest-spread@7.8.3",
      "description": "Allow parsing of object rest/spread",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-object-rest-spread@7.8.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/babel/babel/tree/master#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@babel/plugin-syntax-object-rest-spread/-/plugin-syntax-object-rest-spread-7.8.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5e8a8c8a31996fdcb7cb65ec90df8fd70506895c16679266a03470c79fb71a612994dc95336b360e0f082c5426f2b58ce3ca2b1b2e58a48e4197c535cbbc9d94"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@babel/plugin-syntax-object-rest-spread"
        }
      ]
    },
    {
      "type": "library",
      "name": "babel-plugin-jest-hoist",
      "version": "24.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|babel-plugin-jest-hoist@24.9.0",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-jest-hoist@24.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/facebook/jest.git#packages/babel-plugin-jest-hoist",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/facebook/jest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/facebook/jest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/babel-plugin-jest-hoist/-/babel-plugin-jest-hoist-24.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d84300d8ff15a7b946d11033af81d7aad63069c7cc12b3aebf5537c2bbf11d7eab0f5b15eb14b75971b7afc4d1436afac3c3a1bd2756b7ecf8d6140dc0d9b75f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/babel-plugin-jest-hoist"
        }
      ]
    },
    {
      "type": "library",
      "name": "abab",
      "version": "2.0.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|abab@2.0.6",
      "author": "Jeff Carpenter",
      "description": "WHATWG spec-compliant implementations of window.atob and window.btoa.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/abab@2.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/jsdom/abab.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jsdom/abab#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jsdom/abab/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/abab/-/abab-2.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8f669f4ac68810dbc764dd81f063a9179ebabd9e56564e68a4088c4ef5a06904fc0e46ceaac4dfbcd02f1e8446536cf33fc70fa2acacfb11d3443596f0bfbf04"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/abab"
        }
      ]
    },
    {
      "type": "library",
      "name": "acorn-globals",
      "version": "4.3.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|acorn-globals@4.3.4",
      "author": "ForbesLindesay",
      "description": "Detect global variables in JavaScript using acorn",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/acorn-globals@4.3.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/ForbesLindesay/acorn-globals.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ForbesLindesay/acorn-globals#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ForbesLindesay/acorn-globals/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/acorn-globals/-/acorn-globals-4.3.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7257d0121db547e0f495e49b51d59fdce71fab268248043c472ab4d1ba1f49e91fafd5bcbb58f2619a3a8abd31bbd1ad71fec18dc1c9a676d91fb24e0a93fad0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/acorn-globals"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "acorn",
          "version": "6.4.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|acorn-globals@4.3.4|acorn@6.4.2",
          "description": "ECMAScript parser",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/acorn@6.4.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/acornjs/acorn.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/acornjs/acorn",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/acornjs/acorn/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/acorn/-/acorn-6.4.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "5ed188857c05f1833c6c9846c46e645e08e412e3462d392862a544f8a311f9ab29af828662629883bc947b72a087243dca178dc0b9e39b387fefe81f0c198709"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/acorn-globals/node_modules/acorn"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "acorn",
      "version": "5.7.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|acorn@5.7.4",
      "description": "ECMAScript parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/acorn@5.7.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/acornjs/acorn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/acornjs/acorn",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/acornjs/acorn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/acorn/-/acorn-5.7.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d43fbe546ec186bb6f42935b073a2f28d73514b186104fe819eedbf71266fd11473017946941a996e57d44b8d96b8ed815d3dc0c07a7118baaf6940f70c74b26"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/acorn"
        }
      ]
    },
    {
      "type": "library",
      "name": "array-equal",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|array-equal@1.0.2",
      "author": "Jonathan Ong",
      "description": "Check if two arrays are equal",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/array-equal@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/array-equal.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/array-equal#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/array-equal/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/array-equal/-/array-equal-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8141f1efa2ad9e11200771ceb856220a6dc521d12cea870cd9ab07bcd4e47eefd8d3da9056bad555a38a10d992d8a912686a3181736a0be655b51fe7d0c3a448"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/array-equal"
        }
      ]
    },
    {
      "type": "library",
      "name": "cssom",
      "version": "0.3.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|cssom@0.3.8",
      "author": "Nikita Vasilyev",
      "description": "CSS Object Model implementation and CSS parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cssom@0.3.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/NV/CSSOM.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/NV/CSSOM#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/NV/CSSOM/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cssom/-/cssom-0.3.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6f4b461db7de81b84f269c698813d4dac0a48a002ab4cf4ed76d657ba6db3a583257e3721b20a655f27a416f5e463cfc0a935f5843980483081916242f0b0862"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cssom"
        }
      ]
    },
    {
      "type": "library",
      "name": "cssstyle",
      "version": "1.4.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|cssstyle@1.4.0",
      "description": "CSSStyleDeclaration Object Model implementation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cssstyle@1.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jsakas/CSSStyleDeclaration.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jsakas/CSSStyleDeclaration",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jsakas/CSSStyleDeclaration/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cssstyle/-/cssstyle-1.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "181acb6586785f8c7afd012806722ba9bf01fdfe65e3ef267b6764a26fe3d46b5bc72d2406fe8e1b32ae02c18cef96e41b0180164b79e88c20dbc4b75d366048"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cssstyle"
        }
      ]
    },
    {
      "type": "library",
      "name": "data-urls",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|data-urls@1.1.0",
      "author": "Domenic Denicola",
      "description": "Parses data: URLs",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/data-urls@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jsdom/data-urls.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jsdom/data-urls#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jsdom/data-urls/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/data-urls/-/data-urls-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "61359823db1ed4fe79bb9f202f91a44075b83fa549049e62053f81e5aee2d938da761bf9da96891b4a875f8034391ebfb79da8748eb828fd98bc5a640ce8b779"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/data-urls"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "whatwg-url",
          "version": "7.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|data-urls@1.1.0|whatwg-url@7.1.0",
          "author": "Sebastian Mayr",
          "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/whatwg-url@7.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/jsdom/whatwg-url.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jsdom/whatwg-url#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jsdom/whatwg-url/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-7.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "594bbb460d43ae833ba10bc659f3a200adb59fbe0683e4f87a55c441890e86dc8b7968891683862d73ca23ff60cc889ef42b7054b9bcc2dc3a60974acb14a37a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/data-urls/node_modules/whatwg-url"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "domexception",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|domexception@1.0.1",
      "author": "Domenic Denicola",
      "description": "An implementation of the DOMException class from browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/domexception@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jsdom/domexception.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jsdom/domexception#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jsdom/domexception/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/domexception/-/domexception-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ada8a03249fb08934da3a221ae8d5fcc6ef0af77c7b98572b73aae64a5f99f4ca2cc6b137188337485308f55fda4ad15be37a2855f9789c94ff838f06ec48aba"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/domexception"
        }
      ]
    },
    {
      "type": "library",
      "name": "escodegen",
      "version": "1.14.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|escodegen@1.14.3",
      "description": "ECMAScript code generator",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/escodegen@1.14.3",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/estools/escodegen.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/estools/escodegen",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/estools/escodegen/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/escodegen/-/escodegen-1.14.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a85717d17264760f8f077c636591bfc0a4ae4f53e7416c79efe4d54a320c9882dddb20bfe81c981253f0267b250ecb96b92029e00c091ae99aac002625c8792b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/escodegen"
        }
      ]
    },
    {
      "type": "library",
      "name": "html-encoding-sniffer",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|html-encoding-sniffer@1.0.2",
      "author": "Domenic Denicola",
      "description": "Sniff the encoding from a HTML byte stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/html-encoding-sniffer@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jsdom/html-encoding-sniffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jsdom/html-encoding-sniffer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jsdom/html-encoding-sniffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ef5959ce28839ecb9a6df7588947967425722aeab05a2db72fc61e22057d8d24991c2b5beb007504a5a8a07ecbded9f8fc5b9924c556c8d6880ebe111a669263"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/html-encoding-sniffer"
        }
      ]
    },
    {
      "type": "library",
      "name": "left-pad",
      "version": "1.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|left-pad@1.3.0",
      "author": "azer",
      "description": "String left pad",
      "licenses": [
        {
          "license": {
            "id": "WTFPL",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/left-pad@1.3.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/stevemao/left-pad.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/left-pad#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/left-pad/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/left-pad/-/left-pad-1.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5c8e4c3f354d0298c0ca1433a615fc06498ab0a5310f82ddc8adb88997901a29c137dc93413ddb165081cbf695c761eb35ca901ac768b7c821ae3cabbcc0a810"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/left-pad"
        }
      ]
    },
    {
      "type": "library",
      "name": "nwsapi",
      "version": "2.2.22",
      "bom-ref": "pug@2.0.4-tuxcare.2|nwsapi@2.2.22",
      "author": "Diego Perini",
      "description": "Fast CSS Selectors API Engine",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        },
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://javascript.nwbox.com/nwsapi/MIT-LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/nwsapi@2.2.22",
      "externalReferences": [
        {
          "url": "git://github.com/dperini/nwsapi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://javascript.nwbox.com/nwsapi/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dperini/nwsapi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/nwsapi/-/nwsapi-2.2.22.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ba348c7b5396567e797ae4f58a1c0223565c01a014de7c54883c1f0d095d739d595da07d9b60323a7ebf8e1d412dedadfc6f3177ab8a1b550117669925e83649"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/nwsapi"
        }
      ]
    },
    {
      "type": "library",
      "name": "parse5",
      "version": "4.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|parse5@4.0.0",
      "author": "Ivan Nikulin",
      "description": "HTML parsing/serialization toolset for Node.js. WHATWG HTML Living Standard (aka HTML5)-compliant.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/parse5@4.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/inikulin/parse5.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inikulin/parse5",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inikulin/parse5/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/parse5/-/parse5-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "56b67b78e7774f5164e1758d5cc8221812bfcf4306e3c0561b6b90354e08ef67e442e2944d9a65faef64f82c441b4b70315cd2997104cf5db3e459f0d6321014"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/parse5"
        }
      ]
    },
    {
      "type": "library",
      "name": "pn",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|pn@1.1.0",
      "author": "C. Scott Ananian",
      "description": "Promisify the node standard library.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pn@1.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/cscott/node-pn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/cscott/node-pn#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/cscott/node-pn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pn/-/pn-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "daa1da210af654b445a317b69c04b3b15e9e7f8c8e387f858bd1413951fa72a7928149e8cb248f664c732eecddf9160e41346944e034ced4ccab144e2926ff9c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pn"
        }
      ]
    },
    {
      "type": "library",
      "name": "request-promise-native",
      "version": "1.0.9",
      "bom-ref": "pug@2.0.4-tuxcare.2|request-promise-native@1.0.9",
      "author": "Nicolai Kamenzky",
      "description": "The simplified HTTP request client 'request' with Promise support. Powered by native ES6 promises.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/request-promise-native@1.0.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/request/request-promise-native.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/request/request-promise-native#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/request/request-promise-native/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/request-promise-native/-/request-promise-native-1.0.9.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c1c5beb085225a72a0358d1da82a4e66451b17f23e60f8be7f4f496480dadfd11cfaaf360a94989e20e9f884a04d36ca9a7a4958049e2413d99a8c47f38c2dde"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/request-promise-native"
        }
      ]
    },
    {
      "type": "library",
      "name": "sax",
      "version": "1.4.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|sax@1.4.3",
      "author": "Isaac Z. Schlueter",
      "description": "An evented streaming XML parser in JavaScript",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/sax@1.4.3",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/sax-js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/sax-js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/sax-js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/sax/-/sax-1.4.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "caa627d4984f7338a017de03312fac8620cc8c3a3060eeb2f7ec01ff85a03b4635f63598934950e2db86e4a23b923e054e9d70c4f8f92057dcaf3fecd5cde38d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/sax"
        }
      ]
    },
    {
      "type": "library",
      "name": "symbol-tree",
      "version": "3.2.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|symbol-tree@3.2.4",
      "author": "Joris van der Wel",
      "description": "Turn any collection of objects into its own efficient tree or linked list using Symbol",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/symbol-tree@3.2.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/jsdom/js-symbol-tree.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jsdom/js-symbol-tree#symbol-tree",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jsdom/js-symbol-tree/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f50364e4ac0317e06fcfe3f239b9264988c8e64b15518b635bb014db6af634a71f2c9717a7dea1903594dfe5e774eb146fe010f5085fcdf093d8ef823564f94f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/symbol-tree"
        }
      ]
    },
    {
      "type": "library",
      "name": "w3c-hr-time",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|w3c-hr-time@1.0.2",
      "author": "Timothy Gu",
      "description": "An implementation of the W3C High Resolution Time Level 2 specification.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/w3c-hr-time@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jsdom/w3c-hr-time.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jsdom/w3c-hr-time#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jsdom/w3c-hr-time/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/w3c-hr-time/-/w3c-hr-time-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cfc3f90ef0cd8ca0e81481caeeaf2bf2569c913ea5fa3a3f61edc73a57bb97d9c808ff657f50a2db97f2f6f1ddd093967b09081735c81228374dd293ec94397d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/w3c-hr-time"
        }
      ]
    },
    {
      "type": "library",
      "name": "whatwg-encoding",
      "version": "1.0.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|whatwg-encoding@1.0.5",
      "author": "Domenic Denicola",
      "description": "Decode strings according to the WHATWG Encoding Standard",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/whatwg-encoding@1.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/jsdom/whatwg-encoding.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jsdom/whatwg-encoding#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jsdom/whatwg-encoding/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/whatwg-encoding/-/whatwg-encoding-1.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6f99629b9e0938f37d1edcef2bd1c55ef0666bfae77c57aab22734852a63b436d5c51ddd24a2dcf8a07857a1a08863af97b098fca361f2bc52a3d0ca42b9d413"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/whatwg-encoding"
        }
      ]
    },
    {
      "type": "library",
      "name": "whatwg-mimetype",
      "version": "2.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|whatwg-mimetype@2.3.0",
      "author": "Domenic Denicola",
      "description": "Parses, serializes, and manipulates MIME types, according to the WHATWG MIME Sniffing Standard",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/whatwg-mimetype@2.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jsdom/whatwg-mimetype.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jsdom/whatwg-mimetype#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jsdom/whatwg-mimetype/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/whatwg-mimetype/-/whatwg-mimetype-2.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "338c8cc2bea6027433efa4db266f75e3e80fa41fe70b0bd96c9536f1c503e9d474d38480c432ce39251a07524346a2ed68e57fbe2d080b9944006160ae31affe"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/whatwg-mimetype"
        }
      ]
    },
    {
      "type": "library",
      "name": "whatwg-url",
      "version": "6.5.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|whatwg-url@6.5.0",
      "author": "Sebastian Mayr",
      "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/whatwg-url@6.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jsdom/whatwg-url.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jsdom/whatwg-url#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jsdom/whatwg-url/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-6.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ae145946ac7f4cb250594a50e9b9abb76515e1fd07090e3adf242e38d26a0ba7ced95a046f5a5361d75b7b9f52918abcedaa0ce40ddb761319894895c2cf9fcd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/whatwg-url"
        }
      ]
    },
    {
      "type": "library",
      "name": "ws",
      "version": "5.2.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|ws@5.2.4",
      "author": "Einar Otto Stangvik",
      "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ws@5.2.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/websockets/ws.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/websockets/ws",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/websockets/ws/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ws/-/ws-5.2.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7c509e8ecb82f1ff64392bbd15868ec3c09d3baf0ede1e6fd25838a7be28f09a96a704dff6d9e2383fa7381efc696a15492e96a6d554983ae9fca3ec31505615"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ws"
        }
      ]
    },
    {
      "type": "library",
      "name": "xml-name-validator",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|xml-name-validator@3.0.0",
      "author": "Domenic Denicola",
      "description": "Validates whether a string matches the production for an XML name or qualified name",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/xml-name-validator@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jsdom/xml-name-validator.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jsdom/xml-name-validator#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jsdom/xml-name-validator/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/xml-name-validator/-/xml-name-validator-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "039094a6dc43b2fc4a244537c8ee83b96052273fea8b3ab324a38c21f5091c44db070fec15a0f181de9fc66d5ec1468cd23678e3815ce6f0b944e62eae0ff83f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/xml-name-validator"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-define-property",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|es-define-property@1.0.1",
      "author": "Jordan Harband",
      "description": "`Object.defineProperty`, but not IE 8's broken one.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-define-property@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/es-define-property.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/es-define-property#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/es-define-property/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7b79d17e07d4678acd18bdb7da05205f4e90372c9ecf4e0a76316b17e2d34683979ab3a014a0e0e0109db235bc1274faf5ea9d606991a49c223d560dac2696de"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-define-property"
        }
      ]
    },
    {
      "type": "library",
      "name": "set-function-length",
      "version": "1.2.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|set-function-length@1.2.2",
      "author": "Jordan Harband",
      "description": "Set a function's length property",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/set-function-length@1.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/set-function-length.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/set-function-length#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/set-function-length/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/set-function-length/-/set-function-length-1.2.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a6045ce21278fec363582492f409a74b8d31ddb34c0d39271e02f951a3014ccc899d4f741205a1d51cfe302f5e16ee01b8dfd4c198ca42e63fd6fdeb33b1cc7e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/set-function-length"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-property-descriptors",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|has-property-descriptors@1.0.2",
      "author": "Jordan Harband",
      "description": "Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-property-descriptors@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/has-property-descriptors.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/has-property-descriptors#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/has-property-descriptors/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-property-descriptors/-/has-property-descriptors-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e7924d2ae216fafab829ed418ce4e333661cb5022f093ec61731f099f64f1a8e709eb82489dd1842d9c095e152aae9999b86b3de7d814be7ab6f2e62a49760ae"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-property-descriptors"
        }
      ]
    },
    {
      "type": "library",
      "name": "object-keys",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|object-keys@1.1.1",
      "author": "Jordan Harband",
      "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/object-keys@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/object-keys.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/object-keys#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/object-keys/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/object-keys/-/object-keys-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "36e00449439432b9485ce7c72b30fa6e93eeded62ddf1be335d44843e15e4f494d6f82bc591ef409a0f186e360b92d971be1a39323303b3b0de5992d2267e12c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/object-keys"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-callable",
      "version": "1.2.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-callable@1.2.7",
      "author": "Jordan Harband",
      "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-callable@1.2.7",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-callable.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-callable#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-callable/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-callable/-/is-callable-1.2.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d410b40551614bfa74aadc3a7a7a7c7bef0e0f452b2b4a052f3b528cdce170a037583b89c7100f5f33ee3ed2a48c463d514a045a55fff1f80a7aed92f22f494c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-callable"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-proto",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|get-proto@1.0.1",
      "author": "Jordan Harband",
      "description": "Robustly get the [[Prototype]] of an object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-proto@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/get-proto.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/get-proto#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/get-proto/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b1349f063a17069f3d26f20a21e7eac3b53608279bb1cef892263a6b0886a202ada1219b823604fc6ffe97db05dcc5853cd73d21ca0e0b83837ca1dfc459a9d2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-proto"
        }
      ]
    },
    {
      "type": "library",
      "name": "math-intrinsics",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|math-intrinsics@1.1.0",
      "author": "Jordan Harband",
      "description": "ES Math-related intrinsics and helpers, robustly cached.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/math-intrinsics@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/es-shims/math-intrinsics.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/math-intrinsics#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/math-intrinsics/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fc85ed6f0124e474cfc84c32297ea11a4617c4cf676e3eb807e8a55499c2fd1e81d291f91b85776f4a556cbec3063e2d921040a696d05257fa17a5e5f4b1eed6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/math-intrinsics"
        }
      ]
    },
    {
      "type": "library",
      "name": "dunder-proto",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|dunder-proto@1.0.1",
      "author": "Jordan Harband",
      "description": "If available, the `Object.prototype.__proto__` accessor and mutator, call-bound",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/dunder-proto@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/es-shims/dunder-proto.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/dunder-proto#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/dunder-proto/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "28837f9c3241411717c3430b561644f62407986ebca80548060f42aa65188e64088608a3f54e4c16faea9142f915bb72cb366e39e3add3375e45ee1463b72df8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/dunder-proto"
        }
      ]
    },
    {
      "type": "library",
      "name": "array.prototype.reduce",
      "version": "1.0.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|array.prototype.reduce@1.0.8",
      "author": "Jordan Harband",
      "description": "An ES5 spec-compliant `Array.prototype.reduce` shim/polyfill/replacement that works as far down as ES3.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/array.prototype.reduce@1.0.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/es-shims/Array.prototype.reduce.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/Array.prototype.reduce#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/Array.prototype.reduce/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/array.prototype.reduce/-/array.prototype.reduce-1.0.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0f0b84aa05c50706e665246ab77069422816354a2ac3d325d9d4d6745dc1db3425417e0e794134cf2bb35f47d7d086d3be376465b7014d4de2760a4eefcaa44f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/array.prototype.reduce"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-abstract",
      "version": "1.24.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|es-abstract@1.24.0",
      "author": "Jordan Harband",
      "description": "ECMAScript spec abstract operations.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-abstract@1.24.0",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/es-abstract.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/es-abstract#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/es-abstract/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.24.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "592ccf82c74bb53710c26e0244e7d2e63bb659ad5041c55e4f7ee3163633745cf5afd6a169d0bc07cfdae2ac49c4cfb4f45d7c8ae9827519a5afde9962442f12"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-abstract"
        }
      ]
    },
    {
      "type": "library",
      "name": "isarray",
      "version": "2.0.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|isarray@2.0.5",
      "author": "Julian Gruber",
      "description": "Array#isArray for older browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/isarray@2.0.5",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/isarray.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/isarray",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/isarray/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/isarray/-/isarray-2.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c478e10ebddc3412b40737542523d7667b50531fe6c0c4b9470e00ee53c9f745c600ee8848ffde3c336ea34be1a8e654f940f9268a1dc02000a1941ddc57802b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/isarray"
        }
      ]
    },
    {
      "type": "library",
      "name": "json-stable-stringify",
      "version": "1.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|json-stable-stringify@1.3.0",
      "author": "James Halliday",
      "description": "deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/json-stable-stringify@1.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/json-stable-stringify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/json-stable-stringify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/json-stable-stringify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-1.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "aad622492165c28b7d5c7b45f5b0fd73baf02a3afe45e7164fffd99cfbd29848e95799a63ce08de23f148d8e616e33643b067f8d0bf727a475fe92fb47080cb2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/json-stable-stringify"
        }
      ]
    },
    {
      "type": "library",
      "name": "atob",
      "version": "2.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|atob@2.1.2",
      "author": "AJ ONeal",
      "description": "atob for Node.JS and Linux / Mac / Windows CLI (it's a one-liner)",
      "licenses": [
        {
          "expression": "(MIT OR Apache-2.0)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/atob@2.1.2",
      "externalReferences": [
        {
          "url": "git://git.coolaj86.com/coolaj86/atob.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://git.coolaj86.com/coolaj86/atob.js.git",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://registry.npmjs.org/atob/-/atob-2.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5a6eae92868e1898bfef7a7f725d86bcb8d323924cd64fced788ac0fbdd830bf12b6b1ffeff9511609a0f272026600f76d966f8f0086c6d30e0f7c16340bbc72"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/atob"
        }
      ]
    },
    {
      "type": "library",
      "name": "decode-uri-component",
      "version": "0.2.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|decode-uri-component@0.2.2",
      "author": "Sam Verschueren",
      "description": "A better decodeURIComponent",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/decode-uri-component@0.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/SamVerschueren/decode-uri-component.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/SamVerschueren/decode-uri-component#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/SamVerschueren/decode-uri-component/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/decode-uri-component/-/decode-uri-component-0.2.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "16a51843ef28d79f06c864eb305266b3daa1dc2a932af02a82ab139e42c8f2c2aed34dbca2ba8187134c16415e9f4cc6ca0e9ea40083df6a63564e7c9e0204ad"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/decode-uri-component"
        }
      ]
    },
    {
      "type": "library",
      "name": "resolve-url",
      "version": "0.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|resolve-url@0.2.1",
      "author": "Simon Lydell",
      "description": "Like Node.js’ `path.resolve`/`url.resolve` for the browser.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/resolve-url@0.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/lydell/resolve-url.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lydell/resolve-url#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lydell/resolve-url/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/resolve-url/-/resolve-url-0.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "66e179e6155441a69cce0388c2a5b390470489d9a50ffc65e38c755199e1397718b853764bafab731a46f82d4ddd2a34c2f348dc39892025057eed92c61066be"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/resolve-url"
        }
      ]
    },
    {
      "type": "library",
      "name": "source-map-url",
      "version": "0.4.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|source-map-url@0.4.1",
      "author": "Simon Lydell",
      "description": "Tools for working with sourceMappingURL comments.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/source-map-url@0.4.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/lydell/source-map-url.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lydell/source-map-url#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lydell/source-map-url/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/source-map-url/-/source-map-url-0.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "70f8853932d42af245220e1229549ccb88a53cf5baac580c81fb9924f3680ee32cde70b51db314c9c068270efbc45229eb3d5425024e7f1e82f46307f340e24f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/source-map-url"
        }
      ]
    },
    {
      "type": "library",
      "name": "import-fresh",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|import-fresh@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Import a module while bypassing the cache",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/import-fresh@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/import-fresh.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/import-fresh#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/import-fresh/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/import-fresh/-/import-fresh-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "799e47f2b72061acc76ca0b73c6e029473729024b1b4087149210cfb699bfbb7af0f608a17957b73474dba6ec07690e1d197480b0658f6c4529fc7fe287f7ab2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/import-fresh"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "resolve-from",
          "version": "3.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|import-fresh@2.0.0|resolve-from@3.0.0",
          "author": "Sindre Sorhus",
          "description": "Resolve the path of a module like `require.resolve()` but from a given path",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/resolve-from@3.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/resolve-from.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/resolve-from#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/resolve-from/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/resolve-from/-/resolve-from-3.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "1a7947eafc4bca65c934c068ed73f57c92330456dd62de3d0ae4f0981ffa379dedfa430f44c14acfbf372e5438b6fdbc5e841f3168a70095fa58219fd8895a23"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/import-fresh/node_modules/resolve-from"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "is-directory",
      "version": "0.3.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-directory@0.3.1",
      "author": "Jon Schlinkert",
      "description": "Returns true if a filepath exists on the file system and it's directory.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-directory@0.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/is-directory.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-directory",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-directory/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-directory/-/is-directory-0.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c950a11b36a1445bdb92c727d8c9701a2b263ced768bdfb39cdaee0b9815127b46deabb4c50333b0683f2456ebb2a0ce1ed1c53dc8be57968fe53f48fb278aab"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-directory"
        }
      ]
    },
    {
      "type": "library",
      "name": "parse-json",
      "version": "4.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|parse-json@4.0.0",
      "author": "Sindre Sorhus",
      "description": "Parse JSON with more helpful errors",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/parse-json@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/parse-json.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/parse-json#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/parse-json/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/parse-json/-/parse-json-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "68e228b3c6ee8c637ddfff0ec7f8cf2e1ed1c159cf132b329d5144f9f419ca0ea32842c41f0ce029d2d11475205c92fa9329628d54810b806f37d3a6b01e3c47"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/parse-json"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-obj",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-obj@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Check if a value is an object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-obj@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-obj.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-obj#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-obj/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-obj/-/is-obj-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9784721e046a18de18dfef491d5acda8efad374ad5e4ccbbeae5b9fe7b8ee0ad5beafc391bc77f7261633fdb517c4b1d85936dd0815d66e2bf73656be0d6fe42"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-obj"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-glob",
      "version": "3.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-glob@3.1.0",
      "author": "Jon Schlinkert",
      "description": "Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-glob@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/is-glob.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-glob",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-glob/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-3.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "505a430eb3e033aaa99c5348fab87fa776d46aaf6128b64df1b3145b3c667276554b7a267f820f2be06b7b09675a33b55a652c318b928ca878509b95e3e2ea9b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-glob"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-dirname",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|path-dirname@1.0.2",
      "author": "Elan Shanker",
      "description": "Node.js path.dirname() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-dirname@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/es128/path-dirname.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es128/path-dirname#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es128/path-dirname/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-dirname/-/path-dirname-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "00bccd3e9c8dabd02a5cc0637b29888c50c0900147d3a987247fdc4811c0814d2ce2f7e9067e9bda77fcb6244bbda80a0fc45b4e9ab614a4c183b725f65ddced"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-dirname"
        }
      ]
    },
    {
      "type": "library",
      "name": "nice-try",
      "version": "1.0.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|nice-try@1.0.5",
      "description": "Tries to execute a function and discards any error that occurs",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/nice-try@1.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/electerious/nice-try.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/electerious/nice-try",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/electerious/nice-try/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/nice-try/-/nice-try-1.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d67878e5d79e6f9a25358ede5fcd8190f3bb492c51e524982623d3ad3745515630025f0228c03937d3e34d89078918e2b15731710d475dd2e1c76ab1c49ccb35"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/nice-try"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-key",
      "version": "2.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|path-key@2.0.1",
      "author": "Sindre Sorhus",
      "description": "Get the PATH environment variable key cross-platform",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-key@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/path-key.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/path-key#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/path-key/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-key/-/path-key-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7c41c62824a65120cfbf8ba88fc0250fe8e83e5ab7a5e343f87458cb1173e0a3f0e33f76e92fdbf2b22e16cd85609837070b3125fe80f7fdde21d2da602fbd0f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-key"
        }
      ]
    },
    {
      "type": "library",
      "name": "shebang-command",
      "version": "1.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|shebang-command@1.2.0",
      "author": "Kevin Martensson",
      "description": "Get the command from a shebang",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/shebang-command@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/kevva/shebang-command.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kevva/shebang-command#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kevva/shebang-command/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "115dcbd7e510586a2bdb53a69efa232b7ea6860f93c8828387788504a06886be71797221341731f2859d8244c4110f8110515874b46ea8c7dde4bf3837557956"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/shebang-command"
        }
      ]
    },
    {
      "type": "library",
      "name": "defaults",
      "version": "1.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|defaults@1.0.4",
      "author": "Elijah Insua",
      "description": "merge single level defaults over a config object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/defaults@1.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/sindresorhus/node-defaults.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/node-defaults#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/node-defaults/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/defaults/-/defaults-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "785b9a2e8cbf4716a5bf692bfa5a8c9549eb0d657ede3e299633882602c8848d39f0841f589eef5e1c84207bbe1ed0bbdfc9251802d8c4e2833b46d03f7b60f0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/defaults"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "clone",
          "version": "1.0.4",
          "bom-ref": "pug@2.0.4-tuxcare.2|defaults@1.0.4|clone@1.0.4",
          "author": "Paul Vorbach",
          "description": "deep cloning of objects and arrays",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/clone@1.0.4",
          "externalReferences": [
            {
              "url": "git://github.com/pvorb/node-clone.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/pvorb/node-clone#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/pvorb/node-clone/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/clone/-/clone-1.0.4.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "2501d9d90316ea5dda1ff8fac42a904e163ff4e1f80fff65b37e1c8245018847a87114d4d38b477ca3c1b142b53ea64251033b1a20342085c94ae5c723ae0a6e"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/defaults/node_modules/clone"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "restore-cursor",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|restore-cursor@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Gracefully restore the CLI cursor on exit",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/restore-cursor@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/restore-cursor.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/restore-cursor#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/restore-cursor/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/restore-cursor/-/restore-cursor-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e88cc92ee1a2e3e475e2fc1a8031d7f89ad798f56d3e99f899f7c327551d47bfc4766f3b7e5eb28bc98c04856f16d25a35352f8ee821996e21c0b8511bb802d5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/restore-cursor"
        }
      ]
    },
    {
      "type": "library",
      "name": "chardet",
      "version": "0.7.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|chardet@0.7.0",
      "author": "Dmitry Shirokov",
      "description": "Character detector",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/chardet@0.7.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/runk/node-chardet.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/runk/node-chardet",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/runk/node-chardet/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/chardet/-/chardet-0.7.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "993f220dcae1d37a83191466a00da1981267c69965311fb4ff4aa5ce3a99112e8d762583719902340938acf159f50f39af6eee9e488d360f193a2c195c11f070"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/chardet"
        }
      ]
    },
    {
      "type": "library",
      "name": "iconv-lite",
      "version": "0.4.24",
      "bom-ref": "pug@2.0.4-tuxcare.2|iconv-lite@0.4.24",
      "author": "Alexander Shtuchkin",
      "description": "Convert character encodings in pure javascript.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.24",
      "externalReferences": [
        {
          "url": "git://github.com/ashtuchkin/iconv-lite.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ashtuchkin/iconv-lite",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ashtuchkin/iconv-lite/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bf73179d901cbe7cb091350466898801cb657bb4575de79d391df5c3097b565ca85cee108bd6abbd27a73505a77b54dc4708422f51f02c8db56c4a9da63f3fac"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/iconv-lite"
        }
      ]
    },
    {
      "type": "library",
      "name": "tmp",
      "version": "0.0.33",
      "bom-ref": "pug@2.0.4-tuxcare.2|tmp@0.0.33",
      "author": "KARASZI István",
      "description": "Temporary file and directory creator",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tmp@0.0.33",
      "externalReferences": [
        {
          "url": "git+https://github.com/raszi/node-tmp.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/raszi/node-tmp",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/raszi/node-tmp/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tmp/-/tmp-0.0.33.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8d10899688ca9d9dda75db533a3748aa846e3c4281bcd5dc198ab33bacd6657f0a7ca1299c66398df820250dc48cabaef03e1b251af4cbe7182459986c89971b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tmp"
        }
      ]
    },
    {
      "type": "library",
      "name": "tslib",
      "version": "1.14.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|tslib@1.14.1",
      "author": "Microsoft Corp.",
      "description": "Runtime library for TypeScript helper functions",
      "licenses": [
        {
          "license": {
            "id": "0BSD",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tslib@1.14.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/Microsoft/tslib.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://www.typescriptlang.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Microsoft/TypeScript/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tslib/-/tslib-1.14.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5e78b7e4d2b38e032bc1ebf2b074c202bb4b0e93efc9ef3357fd04e04c989f8dcfeffeeabd0c0f87d0469077b06ccba5567b5b8a099c4fbadd5f704da3dc1126"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tslib"
        }
      ]
    },
    {
      "type": "library",
      "name": "invert-kv",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|invert-kv@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Invert the key/value of an object. Example: `{foo: 'bar'}` → `{bar: 'foo'}`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/invert-kv@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/invert-kv.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/invert-kv#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/invert-kv/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/invert-kv/-/invert-kv-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c0f56fff2fd043f5228ab8ffbe1de83fed56c3e0167a19a2d60e5f15618f17a22908108356b8601d132facb7dd61cc038774096c65c35b8240bb3c4494b4aa28"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/invert-kv"
        }
      ]
    },
    {
      "type": "library",
      "name": "map-age-cleaner",
      "version": "0.1.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|map-age-cleaner@0.1.3",
      "author": "Sam Verschueren",
      "description": "Automatically cleanup expired items in a Map",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/map-age-cleaner@0.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/SamVerschueren/map-age-cleaner.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/SamVerschueren/map-age-cleaner#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/SamVerschueren/map-age-cleaner/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/map-age-cleaner/-/map-age-cleaner-0.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6c9cf1ea73283fa3c32cf0459a0efec5129e159bc56e832b1a5c66363f4296f5f9dcaae6bcce5b5c55c45a36f3e1ccf50059fe8d627dcff0c94b3ee1aecd30df"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/map-age-cleaner"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-is-promise",
      "version": "2.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|p-is-promise@2.1.0",
      "author": "Sindre Sorhus",
      "description": "Check if something is a promise",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-is-promise@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-is-promise.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-is-promise#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-is-promise/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-is-promise/-/p-is-promise-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6375b4c2544f2bc64c45b36af7b978339a2d8a8780e659b5cfb6e4364c4291af0748f8d1d314569a90a673dbad89a2cff496f5783f0181e2314d6e00205e393e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-is-promise"
        }
      ]
    },
    {
      "type": "library",
      "name": "call-me-maybe",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|call-me-maybe@1.0.2",
      "author": "Eric McCarthy",
      "description": "Let your JS API users either give you a callback or receive a promise",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/call-me-maybe@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/limulus/call-me-maybe.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/limulus/call-me-maybe#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/limulus/call-me-maybe/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/call-me-maybe/-/call-me-maybe-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1e95fae68d479ebf471f6e688c2d581acec70902ead0608e89b49a58447478da6027f675319bf699373bfb187a58e3f16d155c9a06efe21194fae490ff6c4565"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/call-me-maybe"
        }
      ]
    },
    {
      "type": "library",
      "name": "glob-to-regexp",
      "version": "0.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|glob-to-regexp@0.3.0",
      "author": "Nick Fitzgerald",
      "description": "Convert globs to regular expressions",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/glob-to-regexp@0.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/fitzgen/glob-to-regexp.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/fitzgen/glob-to-regexp#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/fitzgen/glob-to-regexp/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/glob-to-regexp/-/glob-to-regexp-0.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "228ce6b5baafd27a23d2e0c3aa82f4ccdab454111f2b6605a0c019a3125ee1cc2986f2d1f89b247c5df44215c7391e26dcaac4e8d2d1630f94f4c457be27f28a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/glob-to-regexp"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-extglob",
      "version": "2.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-extglob@2.1.1",
      "author": "Jon Schlinkert",
      "description": "Returns true if a string has an extglob.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/is-extglob.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-extglob",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-extglob/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "49b29b00d90deb4dd58b88c466fe3d2de549327e321b0b1bcd9c28ac4a32122badb0dde725875b3b7eb37e1189e90103a4e6481640ed9eae494719af9778eca1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-extglob"
        }
      ]
    },
    {
      "type": "library",
      "name": "array-ify",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|array-ify@1.0.0",
      "author": "Steve Mao",
      "description": "Turn anything into an array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/array-ify@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/array-ify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/array-ify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/array-ify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/array-ify/-/array-ify-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "73900c7f7e1b29dbcf850eed04686a92028d53332be1652cf960ed0b665418e52771bc4a313beac5872d8ac796dfe2f86c0f1e73e19c67afc0fc55b89bcba49e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/array-ify"
        }
      ]
    },
    {
      "type": "library",
      "name": "handlebars",
      "version": "4.7.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|handlebars@4.7.8",
      "author": "Yehuda Katz",
      "description": "Handlebars provides the power necessary to let you build semantic templates effectively with no frustration",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/handlebars@4.7.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/handlebars-lang/handlebars.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://www.handlebarsjs.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/handlebars-lang/handlebars.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bda7da16ab3c319911ad25fbb05554768ddaa7f78d88b9dbe086a4b21cef3f9e97e4daf588628022a757ead3259ba1dc351224afa0313b98c5128273ce94fc69"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/handlebars"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "uglify-js",
          "version": "3.19.3",
          "bom-ref": "pug@2.0.4-tuxcare.2|handlebars@4.7.8|uglify-js@3.19.3",
          "author": "Mihai Bazon",
          "description": "JavaScript parser, mangler/compressor and beautifier toolkit",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "BSD-2-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/uglify-js@3.19.3",
          "externalReferences": [
            {
              "url": "git+https://github.com/mishoo/UglifyJS.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mishoo/UglifyJS#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mishoo/UglifyJS/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.19.3.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "bf75eefb2bb00578aca7a4184dc1f851b1fec58257aa7ab69bf2ed41558a5b361cd627a16272e2c6840337d147ebf8fdfe8c9b7dde96f46870925f3e50c29329"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/handlebars/node_modules/uglify-js"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "meow",
      "version": "8.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2",
      "author": "Sindre Sorhus",
      "description": "CLI app helper",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/meow@8.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/meow.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/meow#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/meow/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/meow/-/meow-8.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "afce44dcd759fa6a589350ba4633c510c484facd6264cb87b6c1c0a98d034f78d973397476259467c83aa14ee1d0cf5c0f610bf8fcda62086108bcd1d19367e5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/meow"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "normalize-package-data",
          "version": "3.0.3",
          "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|normalize-package-data@3.0.3",
          "author": "Meryn Stol",
          "description": "Normalizes data that can be found in package.json files.",
          "licenses": [
            {
              "license": {
                "id": "BSD-2-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/normalize-package-data@3.0.3",
          "externalReferences": [
            {
              "url": "git://github.com/npm/normalize-package-data.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/normalize-package-data#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/normalize-package-data/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-3.0.3.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "a765b5b20aa28f7ccc332442d3aec3835e9b7f3547fb0ee1c9e826a48bd9e09363aad18e54022f2e68c1c77c8fed84def6f289824a0d38f8f0406a200e831714"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/meow/node_modules/normalize-package-data"
            }
          ]
        },
        {
          "type": "library",
          "name": "read-pkg-up",
          "version": "7.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg-up@7.0.1",
          "author": "Sindre Sorhus",
          "description": "Read the closest package.json file",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/read-pkg-up@7.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/read-pkg-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-7.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "ccad1307b5dde89a422e694b9ae7eaca4184fbf4e539e3c3eaa28294d5bb8470ca161fc9effee0096191ee3a044045b56caab76b7c9465239b3a858b150e2886"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/meow/node_modules/read-pkg-up"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "type-fest",
              "version": "0.8.1",
              "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg-up@7.0.1|type-fest@0.8.1",
              "author": "Sindre Sorhus",
              "description": "A collection of essential TypeScript types",
              "licenses": [
                {
                  "expression": "(MIT OR CC0-1.0)",
                  "acknowledgement": "declared"
                }
              ],
              "purl": "pkg:npm/type-fest@0.8.1",
              "externalReferences": [
                {
                  "url": "git+https://github.com/sindresorhus/type-fest.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/sindresorhus/type-fest#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/sindresorhus/type-fest/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/type-fest/-/type-fest-0.8.1.tgz",
                  "type": "distribution",
                  "hashes": [
                    {
                      "alg": "SHA-512",
                      "content": "e1d6f3233aaf8ed822339af0d64e6b107b4100d2a676e7611b20446a3374d5f13285a00886ca0a372eb2efe20df7721fa45b7063d8aa8bb903fb1c0a850b0d24"
                    }
                  ],
                  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/meow/node_modules/read-pkg-up/node_modules/type-fest"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "hosted-git-info",
          "version": "4.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|hosted-git-info@4.1.0",
          "author": "Rebecca Turner",
          "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/hosted-git-info@4.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/hosted-git-info.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/hosted-git-info",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/hosted-git-info/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-4.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "9320ae10e5a326a66e0db447ccbf15f77373421c0807bd681564b2cd5a3e28f648fa99d03cfc6e71d92b399be42d19eb7f9511b1033e209d3d0f0dbd71100b20"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/meow/node_modules/hosted-git-info"
            }
          ]
        },
        {
          "type": "library",
          "name": "semver",
          "version": "7.7.3",
          "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|semver@7.7.3",
          "author": "GitHub Inc.",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@7.7.3",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/semver/-/semver-7.7.3.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "49db0a32b23d4dd823770794491f4cc1e1c0e0427c6311e7f0315a0e2b2f85595439ee01175b4b0fb1808f4948a96565f9d3dbfeb131af406d6f2e65a109b6d1"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/meow/node_modules/semver"
            }
          ]
        },
        {
          "type": "library",
          "name": "find-up",
          "version": "4.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|find-up@4.1.0",
          "author": "Sindre Sorhus",
          "description": "Find a file or directory by walking up parent directories",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/find-up@4.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/find-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "3e93b001d43f6255d0daf8fc6b787c222a43b98462df071e550406616c4d20d71cab8d009f0ec196c11708c6edd59b7e38b03a16af6cb88a48583d0eb2721297"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/meow/node_modules/find-up"
            }
          ]
        },
        {
          "type": "library",
          "name": "read-pkg",
          "version": "5.2.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg@5.2.0",
          "author": "Sindre Sorhus",
          "description": "Read a package.json file",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/read-pkg@5.2.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/read-pkg.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/read-pkg/-/read-pkg-5.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "520ebd98d3a97ef28301cd90f034693238f376dae7bfd1dc48c5fee15b19c43d5a67a673ac813bae5cd706d593ca150b48c2a0d3be805ba591e626690f42623a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/meow/node_modules/read-pkg"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "normalize-package-data",
              "version": "2.5.0",
              "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg@5.2.0|normalize-package-data@2.5.0",
              "author": "Meryn Stol",
              "description": "Normalizes data that can be found in package.json files.",
              "licenses": [
                {
                  "license": {
                    "id": "BSD-2-Clause",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/normalize-package-data@2.5.0",
              "externalReferences": [
                {
                  "url": "git://github.com/npm/normalize-package-data.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/npm/normalize-package-data#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/npm/normalize-package-data/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.5.0.tgz",
                  "type": "distribution",
                  "hashes": [
                    {
                      "alg": "SHA-512",
                      "content": "ff908c3774f44785d38f80dc19a7b1a3eae8652752156ff400e39344eae3c73086d70ad65c4b066d129ebe39482fe643138b19949af9103e185b4caa9a42be78"
                    }
                  ],
                  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/meow/node_modules/read-pkg/node_modules/normalize-package-data"
                }
              ]
            },
            {
              "type": "library",
              "name": "type-fest",
              "version": "0.6.0",
              "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg@5.2.0|type-fest@0.6.0",
              "author": "Sindre Sorhus",
              "description": "A collection of essential TypeScript types",
              "licenses": [
                {
                  "expression": "(MIT OR CC0-1.0)",
                  "acknowledgement": "declared"
                }
              ],
              "purl": "pkg:npm/type-fest@0.6.0",
              "externalReferences": [
                {
                  "url": "git+https://github.com/sindresorhus/type-fest.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/sindresorhus/type-fest#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/sindresorhus/type-fest/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/type-fest/-/type-fest-0.6.0.tgz",
                  "type": "distribution",
                  "hashes": [
                    {
                      "alg": "SHA-512",
                      "content": "abe301f27611d4a0cbae0af81b9c9e99fb69302eff40ba959dd06610476ace6363e5d70538ee0ea3caa5c1913750b4f7f998a6d45f0aab87019e290d86508c96"
                    }
                  ],
                  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/meow/node_modules/read-pkg/node_modules/type-fest"
                }
              ]
            },
            {
              "type": "library",
              "name": "hosted-git-info",
              "version": "2.8.9",
              "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg@5.2.0|hosted-git-info@2.8.9",
              "author": "Rebecca Turner",
              "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab",
              "licenses": [
                {
                  "license": {
                    "id": "ISC",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/hosted-git-info@2.8.9",
              "externalReferences": [
                {
                  "url": "git+https://github.com/npm/hosted-git-info.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/npm/hosted-git-info",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/npm/hosted-git-info/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.8.9.tgz",
                  "type": "distribution",
                  "hashes": [
                    {
                      "alg": "SHA-512",
                      "content": "9b120301bf4bb26e83a0e27bc47fb9f97e32d4b53fe078b9d0bf42e6c22cc0adc9cd42d2e1bc24d45be374182f611e1bcd3e2db944220b5e451367f91db2ef63"
                    }
                  ],
                  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/meow/node_modules/read-pkg/node_modules/hosted-git-info"
                }
              ]
            },
            {
              "type": "library",
              "name": "semver",
              "version": "5.7.2",
              "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg@5.2.0|semver@5.7.2",
              "author": "GitHub Inc.",
              "description": "The semantic version parser used by npm.",
              "licenses": [
                {
                  "license": {
                    "id": "ISC",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/semver@5.7.2",
              "externalReferences": [
                {
                  "url": "git+https://github.com/npm/node-semver.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/npm/node-semver#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/npm/node-semver/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/semver/-/semver-5.7.2.tgz",
                  "type": "distribution",
                  "hashes": [
                    {
                      "alg": "SHA-512",
                      "content": "701ce79d0f4a8c9a94ebb079d91302eb908c6ab2b6eb4d161676e471a8b05aadf1cbfe61685265b21827a63a2f31527e1df7f8f5df06127d1bf3b0b9a43435d2"
                    }
                  ],
                  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/meow/node_modules/read-pkg/node_modules/semver"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "lru-cache",
          "version": "6.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|lru-cache@6.0.0",
          "author": "Isaac Z. Schlueter",
          "description": "A cache object that deletes the least-recently-used items.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/lru-cache@6.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/node-lru-cache.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/node-lru-cache#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/node-lru-cache/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "268e9d274e029928eece7c09492de951e5a677f1f47df4e59175e0c198be7aad540a6a90c0287e78bb183980b063df758b615a878875044302c78a938466ec88"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/meow/node_modules/lru-cache"
            }
          ]
        },
        {
          "type": "library",
          "name": "locate-path",
          "version": "5.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|locate-path@5.0.0",
          "author": "Sindre Sorhus",
          "description": "Get the first path that exists on disk of multiple paths",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/locate-path@5.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/locate-path.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/locate-path#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/locate-path/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "b7b870f6923e5afbb03495f0939cd51e9ca122ace0daa4e592524e7f4995c4649b7b7169d9589e65c76e3588da2c3a32ea9f6e1a94041961bced6a4c2a536af2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/meow/node_modules/locate-path"
            }
          ]
        },
        {
          "type": "library",
          "name": "path-exists",
          "version": "4.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|path-exists@4.0.0",
          "author": "Sindre Sorhus",
          "description": "Check if a path exists",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/path-exists@4.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/path-exists.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/path-exists#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/path-exists/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6a4f50cb943b8d86f65b071ecb9169be0d8aa0073f64884b48b392066466ca03ec1b091556dd1f65ad2aaed333fa6ead2530077d943c167981e0c1b82d6cbbff"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/meow/node_modules/path-exists"
            }
          ]
        },
        {
          "type": "library",
          "name": "parse-json",
          "version": "5.2.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|parse-json@5.2.0",
          "author": "Sindre Sorhus",
          "description": "Parse JSON with more helpful errors",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/parse-json@5.2.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/parse-json.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/parse-json#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/parse-json/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/parse-json/-/parse-json-5.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "6b208abe6fe98421b13a461148233cda20f072df3f1289d2120092c56c43eef7ba8c7820b059787d955004f44d810a0a8ae57fa1d845ac6cd05d9c1b89f0bc46"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/meow/node_modules/parse-json"
            }
          ]
        },
        {
          "type": "library",
          "name": "yallist",
          "version": "4.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|yallist@4.0.0",
          "author": "Isaac Z. Schlueter",
          "description": "Yet Another Linked List",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/yallist@4.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/isaacs/yallist.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/yallist#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/yallist/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "df074689d672ab93c1d3ce172c44b94e9392440df08d7025216321ba6da445cbffe354a7d9e990d1dc9c416e2e6572de8f02af83a12cbdb76554bf8560472dec"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/meow/node_modules/yallist"
            }
          ]
        },
        {
          "type": "library",
          "name": "p-locate",
          "version": "4.1.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|p-locate@4.1.0",
          "author": "Sindre Sorhus",
          "description": "Get the first fulfilled promise that satisfies the provided testing function",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-locate@4.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-locate.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-locate#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-locate/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "47bf5967fd30031286bb7a18325cfc8f2fe46e1b0dad2ed2299ecfc441c1809e7e1769ad156d9f2b670eb4187570762442c6f3155ec8f84a1129ee98b74a0aec"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/meow/node_modules/p-locate"
            }
          ]
        },
        {
          "type": "library",
          "name": "resolve",
          "version": "1.22.11",
          "bom-ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|resolve@1.22.11",
          "author": "James Halliday",
          "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/resolve@1.22.11",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/browserify/resolve.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/browserify/resolve#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/browserify/resolve/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/resolve/-/resolve-1.22.11.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "45fa80bcb9cc977d77afb73da1c941d478541007b37292e3cfde70147e0b56e864f4917faf6daa9953fd00c98e538bcc5fb43ca4df23c0d83f092a5d1673234d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/meow/node_modules/resolve"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "split",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|split@1.0.1",
      "author": "Dominic Tarr",
      "description": "split a Text Stream into a Line Stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/split@1.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/dominictarr/split.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/dominictarr/split",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dominictarr/split/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/split/-/split-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "993c8ea0f6eb8afb579f09c8c59445611acf36d1052a5a41d9fbe34a7090522000eaa019ceac276b97a7bcae2e93a38878fd7b0ac745deb481198541b14d1392"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/split"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-text-path",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-text-path@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Check if a filepath is a text file",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-text-path@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-text-path.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-text-path#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-text-path/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-text-path/-/is-text-path-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c45b89a677bda05cf9a836a87709a61b4f1edc26b01ffd9957c42acdad4aa3b4a4f0f3966e445dc08a0059586abead17794cc034484aa369f4217506066ec0ff"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-text-path"
        }
      ]
    },
    {
      "type": "library",
      "name": "split2",
      "version": "3.2.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|split2@3.2.2",
      "author": "Matteo Collina",
      "description": "split a Text Stream into a Line Stream, using Stream 3",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/split2@3.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/mcollina/split2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mcollina/split2#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/mcollina/split2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/split2/-/split2-3.2.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f4d4e18e98199e27d3909a734d9ec4b9ef394b8f50c29361653aba19127039b6fa8e72c534607b426ef75791dec1344e3f2c43d02dbdc6a99a23af1b42d57e86"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/split2"
        }
      ]
    },
    {
      "type": "library",
      "name": "parse-github-repo-url",
      "version": "1.4.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|parse-github-repo-url@1.4.1",
      "author": "Jonathan Ong",
      "description": "Parse a GitHub URL for user/project@version",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/parse-github-repo-url@1.4.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/repo-utils/parse-github-repo-url.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/repo-utils/parse-github-repo-url#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/repo-utils/parse-github-repo-url/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/parse-github-repo-url/-/parse-github-repo-url-1.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6d25b2cc12aa7122f846b9dc4e91ac10aa09ec7f1ae0bdfefa27d301b4c578c1f2ab6c1157ee360c699070722b248bdd71a72320ec44b8a1ffc38b6d845d7b82"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/parse-github-repo-url"
        }
      ]
    },
    {
      "type": "library",
      "name": "dargs",
      "version": "4.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|dargs@4.1.0",
      "author": "Sindre Sorhus",
      "description": "Reverse minimist. Convert an object of options into an array of command-line arguments.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/dargs@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/dargs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/dargs#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/dargs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/dargs/-/dargs-4.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8f2c1e57f934adbbf658ae2bf4a2dacae06b4a1d8fcb4b4d995ecb06848c1f884c432ac6f0e3f220e581d95131e0324a5d698ae25a2960c56f391943b764bc03"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/dargs"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.template",
      "version": "4.5.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|lodash.template@4.5.0",
      "author": "John-David Dalton",
      "description": "The Lodash method `_.template` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.template@4.5.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.template/-/lodash.template-4.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f38bd81712249a2754885c62740fca8e31fda40c9ca96fa1f7cd23ec5bb3e6ac51b4ef69801ecc0c54ddcacd4dec0e6672e711883c84ab87eeb258c8b51d53fc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.template"
        }
      ]
    },
    {
      "type": "library",
      "name": "gitconfiglocal",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|gitconfiglocal@1.0.0",
      "author": "Ryan Day",
      "description": "parse the .git/config file into a useful data structure",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/gitconfiglocal@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/soldair/node-gitconfiglocal.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/soldair/node-gitconfiglocal#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/soldair/node-gitconfiglocal/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/gitconfiglocal/-/gitconfiglocal-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b292d45de4c0547c43b4ab0973c164155805b4c74437da8f1a92f6dd57d21f1e1f3f8f83b34f7b2172efca66e70c7f059e6c57e4dafd6cfc3703e010ea658469"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/gitconfiglocal"
        }
      ]
    },
    {
      "type": "library",
      "name": "readable-stream",
      "version": "3.6.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|readable-stream@3.6.2",
      "description": "Streams3, a user-land copy of the stream library from Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@3.6.2",
      "externalReferences": [
        {
          "url": "git://github.com/nodejs/readable-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodejs/readable-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodejs/readable-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f6efec9e20ab6370f959db04447cc71381b66025eaa06e454c7522082e1221bafa5dc2d9058d39c9af442a361e93d3b9c4e0308c6abed497460404bb43d49ca0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/readable-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "typedarray",
      "version": "0.0.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|typedarray@0.0.6",
      "author": "James Halliday",
      "description": "TypedArray polyfill for old browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/typedarray@0.0.6",
      "externalReferences": [
        {
          "url": "git://github.com/substack/typedarray.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/typedarray",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/typedarray/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fda0831066ad1af67604893e1e62dfe227c2245c2f28535bf7f25e64f32e95f805ada727f5015c01fe463bc07f9b07948d2a1b952e489f471686aa5fb3fe4f40"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/typedarray"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.ismatch",
      "version": "4.4.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|lodash.ismatch@4.4.0",
      "author": "John-David Dalton",
      "description": "The lodash method `_.isMatch` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.ismatch@4.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.ismatch/-/lodash.ismatch-4.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7cf31f5e3190115f57b2affc3134a051fdb9e606b06116e3c0cc836dcbc3857815ede9d2640d21ca7cfabcc3e7a406f988e344cc11c13ec4fed337ace59df4d6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.ismatch"
        }
      ]
    },
    {
      "type": "library",
      "name": "modify-values",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|modify-values@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Modify the values of an object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/modify-values@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/modify-values.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/modify-values#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/modify-values/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/modify-values/-/modify-values-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c55d9bc5e37a17ba188d95937bf60f032e8c37633eb0be2efd1966d801c221519fa36a75c869811d0eaf1de865e1b453641747bb74d2916758824c296330064b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/modify-values"
        }
      ]
    },
    {
      "type": "library",
      "name": "decamelize-keys",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|decamelize-keys@1.1.1",
      "author": "Sindre Sorhus",
      "description": "Convert object keys from camelCase to lowercase with a custom separator",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/decamelize-keys@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/decamelize-keys.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/decamelize-keys#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/decamelize-keys/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/decamelize-keys/-/decamelize-keys-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5a23f18048ab215d3f78838c727141037fc8259019a8a9f00305b2bef762e25b2bd5608ddb69e175fff775bdc3a197148d35764aa7f3230372a7acb6c6cde79a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/decamelize-keys"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "map-obj",
          "version": "1.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|decamelize-keys@1.1.1|map-obj@1.0.1",
          "author": "Sindre Sorhus",
          "description": "Map object keys and values into a new object",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/map-obj@1.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/map-obj.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/map-obj#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/map-obj/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/map-obj/-/map-obj-1.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "ecdfeade5c99f8b542a7b3f3bb1ac9af828c6c1136856ec14fb60d89adf7d0e17121fe1ddebe7356989c3f6eb9d25ec23cde9133dcce251977346a6a4a2c3712"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/decamelize-keys/node_modules/map-obj"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "loud-rejection",
      "version": "1.6.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|loud-rejection@1.6.0",
      "author": "Sindre Sorhus",
      "description": "Make unhandled promise rejections fail loudly instead of the default silent fail",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/loud-rejection@1.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/loud-rejection.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/loud-rejection#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/loud-rejection/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/loud-rejection/-/loud-rejection-1.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "44f36589938592a16e98386f62a39a358e14cfda093362bdb42e895ac249b0d761b8e356e0b407441a5bd2a7f8a4902955f7c8e4ddfd4b0cd6649b8485f77b79"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/loud-rejection"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-core-module",
      "version": "2.16.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-core-module@2.16.1",
      "author": "Jordan Harband",
      "description": "Is this specifier a node.js core module?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-core-module@2.16.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-core-module.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-core-module",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-core-module/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.16.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "51fa1e300e9f209f304d81445237a59da188ebbbfaf8deea5c912f42e2066bdf65e31b02aee498395490d2e3c0367e1d0339bc96460f68a2ebae28cbabbc76df"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-core-module"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-parse",
      "version": "1.0.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|path-parse@1.0.7",
      "author": "Javier Blanco",
      "description": "Node.js path.parse() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/jbgutierrez/path-parse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jbgutierrez/path-parse#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jbgutierrez/path-parse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2c32733d510410f47ecb8f33f7703411dd325dbf29001c865a8fe4e5861d620a58dbfd84b0eb24b09aeaee5387c6bcab54e9f57a31baa00a7c6a1bce2100fcb3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-parse"
        }
      ]
    },
    {
      "type": "library",
      "name": "supports-preserve-symlinks-flag",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|supports-preserve-symlinks-flag@1.0.0",
      "author": "Jordan Harband",
      "description": "Determine if the current node version supports the `--preserve-symlinks` flag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/node-supports-preserve-symlinks-flag.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/node-supports-preserve-symlinks-flag/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a2dd169d74bd7e076480871e3dee911cd935580f3e9ae3dae9c4a3791dd5f0adbbabd041d6b4c4dd1d69ec7bf4cf567201cf2ce95beff0323259febcd4c02dd3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/supports-preserve-symlinks-flag"
        }
      ]
    },
    {
      "type": "library",
      "name": "abbrev",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|abbrev@1.1.1",
      "author": "Isaac Z. Schlueter",
      "description": "Like ruby's abbrev module, but in js",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/abbrev@1.1.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/isaacs/abbrev-js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/abbrev-js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/abbrev-js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9e77bdfc8890fe1cc8858ea97439db06dcfb0e33d32ab634d0fff3bcf4a6e69385925eb1b86ac69d79ff56d4cd35f36d01f67dff546d7a192ccd4f6a7138a2d1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/abbrev"
        }
      ]
    },
    {
      "type": "library",
      "name": "humanize-ms",
      "version": "1.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|humanize-ms@1.2.1",
      "author": "dead-horse",
      "description": "transform humanize time to ms",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/humanize-ms@1.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/node-modules/humanize-ms.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/node-modules/humanize-ms#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/node-modules/humanize-ms/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/humanize-ms/-/humanize-ms-1.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "165ef4bd8b6c0056ff0b4e8f4d2f5d641a3b8a16aef93bbf0cd0a4fcec8785e6b4ed2f9a78c5a914591469745af1f23e49c65b108f1d7d2c7063b83167d48055"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/humanize-ms"
        }
      ]
    },
    {
      "type": "library",
      "name": "agent-base",
      "version": "4.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|agent-base@4.3.0",
      "author": "Nathan Rajlich",
      "description": "Turn a function into an `http.Agent` instance",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/agent-base@4.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/TooTallNate/node-agent-base.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/TooTallNate/node-agent-base#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/TooTallNate/node-agent-base/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/agent-base/-/agent-base-4.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b1a95c1a78a75749cfaf0a46367e154d705bd523ae5d0062a9bacd5e87a2cc9b07aec2fa11114cd8d7b725448159113a69e34923644e3ff5841080d48837b772"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/agent-base"
        }
      ]
    },
    {
      "type": "library",
      "name": "encoding",
      "version": "0.1.13",
      "bom-ref": "pug@2.0.4-tuxcare.2|encoding@0.1.13",
      "author": "Andris Reinman",
      "description": "Convert encodings, uses iconv-lite",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/encoding@0.1.13",
      "externalReferences": [
        {
          "url": "git+https://github.com/andris9/encoding.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/andris9/encoding#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/andris9/encoding/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/encoding/-/encoding-0.1.13.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "11305aba8c354f7e58fd664c922a3d8e2334679c631c7989e179a364eab597f757cf796bdac467f3b9c9cb6d11ba9a928751769b71c73d2a7c4a120f409ac9dc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/encoding"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "iconv-lite",
          "version": "0.6.3",
          "bom-ref": "pug@2.0.4-tuxcare.2|encoding@0.1.13|iconv-lite@0.6.3",
          "author": "Alexander Shtuchkin",
          "description": "Convert character encodings in pure javascript.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/iconv-lite@0.6.3",
          "externalReferences": [
            {
              "url": "git://github.com/ashtuchkin/iconv-lite.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/ashtuchkin/iconv-lite",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/ashtuchkin/iconv-lite/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "e1f0a4efdc2c84c773329dab1f4eaa5ab244e22a25a8b842507f8e8ae22053ef91074fbde0d9432fcd5ab4eec65f9e6e50ab9ea34b711cdb6f13223a0fb59d33"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/encoding/node_modules/iconv-lite"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "json-parse-better-errors",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|json-parse-better-errors@1.0.2",
      "author": "Kat Marchán",
      "description": "JSON.parse with context information on error",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/json-parse-better-errors@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/zkat/json-parse-better-errors.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zkat/json-parse-better-errors#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zkat/json-parse-better-errors/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/json-parse-better-errors/-/json-parse-better-errors-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9abab264a7d7e4484bee1bea715e961b5c988e78deb980f30e185c00052babc3e8f3934140124ff990d44fbe6a650f7c22452806a76413192e90e53b4ecdb0af"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/json-parse-better-errors"
        }
      ]
    },
    {
      "type": "library",
      "name": "socks",
      "version": "2.3.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|socks@2.3.3",
      "author": "Josh Glazebrook",
      "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/socks@2.3.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/JoshGlazebrook/socks.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/JoshGlazebrook/socks/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/JoshGlazebrook/socks/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/socks/-/socks-2.3.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a39b79d8f08db557623afcccaf2ef053868ea9858bd0f7825d1581122268c38fe2ff0afec29b0943d6b012ed44a272c8aac7c6779a9280377110ebc2766044a4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/socks"
        }
      ]
    },
    {
      "type": "library",
      "name": "process-nextick-args",
      "version": "2.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|process-nextick-args@2.0.1",
      "description": "process.nextTick but always with args",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/process-nextick-args@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/calvinmetcalf/process-nextick-args.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/calvinmetcalf/process-nextick-args",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/calvinmetcalf/process-nextick-args/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "de8b943a9421b60adb39ad7b27bfaec4e4e92136166863fbfc0868477f80fbfd5ef6c92bcde9468bf757cc4632bdbc6e6c417a5a7db2a6c7132a22891459f56a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/process-nextick-args"
        }
      ]
    },
    {
      "type": "library",
      "name": "util-deprecate",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|util-deprecate@1.0.2",
      "author": "Nathan Rajlich",
      "description": "The Node.js `util.deprecate()` function with browser support",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/TooTallNate/util-deprecate.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/TooTallNate/util-deprecate",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/TooTallNate/util-deprecate/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/util-deprecate"
        }
      ]
    },
    {
      "type": "library",
      "name": "code-point-at",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|code-point-at@1.1.0",
      "author": "Sindre Sorhus",
      "description": "ES2015 `String#codePointAt()` ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/code-point-at@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/code-point-at.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/code-point-at#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/code-point-at/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/code-point-at/-/code-point-at-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4690152900394fadf1123ebf82221b504b59c09e1414873766dbc4922694111ca5a9ef316f922fa9c80ebab64b6a1bfddc22ca7f1730e5823e0d9714051c8b5c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/code-point-at"
        }
      ]
    },
    {
      "type": "library",
      "name": "copy-concurrently",
      "version": "1.0.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|copy-concurrently@1.0.5",
      "author": "Rebecca Turner",
      "description": "Promises of copies of files, directories and symlinks, with concurrency controls and win32 junction fallback.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/copy-concurrently@1.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/copy-concurrently.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://www.npmjs.com/package/copy-concurrently",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/copy-concurrently/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/copy-concurrently/-/copy-concurrently-1.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7f676899df5fb150c5b5a15c6da459b985f0b5d9a7cea6c00d2c21496631601fd0f33b1d51414c5d54705c60cc5a66c4cc09f591d46bb48d53fca4c538be17d8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/copy-concurrently"
        }
      ]
    },
    {
      "type": "library",
      "name": "fs-write-stream-atomic",
      "version": "1.0.10",
      "bom-ref": "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10",
      "author": "Isaac Z. Schlueter",
      "description": "Like `fs.createWriteStream(...)`, but atomic.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fs-write-stream-atomic@1.0.10",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/fs-write-stream-atomic.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/fs-write-stream-atomic",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/fs-write-stream-atomic/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fs-write-stream-atomic/-/fs-write-stream-atomic-1.0.10.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "81e844ce63e7da7030af7f5e6b2fb1dd7df845af8cd909555132e19173e359d78ef1117d92cce4d75e9abe00493376723478075c1371f9598f6850b7ea4d0fcc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fs-write-stream-atomic"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "readable-stream",
          "version": "2.3.8",
          "bom-ref": "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10|readable-stream@2.3.8",
          "description": "Streams3, a user-land copy of the stream library from Node.js",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@2.3.8",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "f29d00524e173838087b04a2d25f04a63b3e1159d688aecda03204194d07844efe67263c0f520c63ba1dbb9951ac55c683bd4bd79286f10acf9ae9b8e514ed74"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/fs-write-stream-atomic/node_modules/readable-stream"
            }
          ]
        },
        {
          "type": "library",
          "name": "isarray",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10|isarray@1.0.0",
          "author": "Julian Gruber",
          "description": "Array#isArray for older browsers",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isarray@1.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/isarray.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/isarray",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/isarray/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "54b82121634ce842d0ce8ef3c26720d0d99357258a623bc878cf37ca3a74c110d39949eb33aefc7d06dc281a3a9f6089105d2cce81bfff2b60f932a56bcf402d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/fs-write-stream-atomic/node_modules/isarray"
            }
          ]
        },
        {
          "type": "library",
          "name": "safe-buffer",
          "version": "5.1.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10|safe-buffer@5.1.2",
          "author": "Feross Aboukhadijeh",
          "description": "Safer Node.js Buffer API",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/safe-buffer@5.1.2",
          "externalReferences": [
            {
              "url": "git://github.com/feross/safe-buffer.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/feross/safe-buffer",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/feross/safe-buffer/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/fs-write-stream-atomic/node_modules/safe-buffer"
            }
          ]
        },
        {
          "type": "library",
          "name": "string_decoder",
          "version": "1.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10|string_decoder@1.1.1",
          "description": "The string_decoder module from Node core",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string_decoder@1.1.1",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/string_decoder.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/fs-write-stream-atomic/node_modules/string_decoder"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "run-queue",
      "version": "1.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|run-queue@1.0.3",
      "author": "Rebecca Turner",
      "description": "A promise based, dynamic priority queue runner, with concurrency limiting.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/run-queue@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/iarna/run-queue.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://npmjs.com/package/run-queue",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/iarna/run-queue/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/run-queue/-/run-queue-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9edca6cb8f3da34fd04299540e7a5801852c3b9d0af5206b21568a0960ce273609b6cd1ff561fd445264c9a81e6e4c39fb2d688b4d11ef29cd5bf775d8606e9a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/run-queue"
        }
      ]
    },
    {
      "type": "library",
      "name": "stream-shift",
      "version": "1.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|stream-shift@1.0.3",
      "author": "Mathias Buus",
      "description": "Returns the next buffer/object in a stream's readable queue",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stream-shift@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/mafintosh/stream-shift.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mafintosh/stream-shift",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mafintosh/stream-shift/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stream-shift/-/stream-shift-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "efa3914740ced68d6194ac136e2fc33371175867f764960ef1c5d7e512709ee9760c4836a32a19ca32cda1033c5acbd988528245f0b53b427b882be27b745999"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stream-shift"
        }
      ]
    },
    {
      "type": "library",
      "name": "cyclist",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|cyclist@1.0.2",
      "author": "Mathias Buus Madsen",
      "description": "Cyclist is an efficient cyclic list implemention.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cyclist@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/mafintosh/cyclist.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mafintosh/cyclist",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mafintosh/cyclist/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cyclist/-/cyclist-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d2c5572288537cba95216de46ffd27e8889617721f8f99e6d97692acbab60c8e9f28819ad9f60065d93dd7bad49de69e2d5a587c57325c4d9fb747dedeb7a6b0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cyclist"
        }
      ]
    },
    {
      "type": "library",
      "name": "xtend",
      "version": "4.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|xtend@4.0.2",
      "author": "Raynos",
      "description": "extend like a boss",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/xtend@4.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/Raynos/xtend.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Raynos/xtend",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Raynos/xtend/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2ca614d620172575200179fd5118e2bbe3168725171ecbdfa7b99cb989bd75250a2b4fc28edad4c050310fcdbf98259bb4bb068c521a774c08b28778ceb4c011"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/xtend"
        }
      ]
    },
    {
      "type": "library",
      "name": "longest",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|longest@1.0.1",
      "author": "Jon Schlinkert",
      "description": "Get the longest item in an array.",
      "purl": "pkg:npm/longest@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/longest.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/longest",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/longest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "93ecade67de5e3c254e24f1fb67286e95eeedf6c321f635f2b378cb68f45fd0444d1a9b1cbf2dacb1c25be38e4644233a91fb5f48aed14ef29e6407d41a61416"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/longest"
        }
      ]
    },
    {
      "type": "library",
      "name": "repeat-string",
      "version": "1.6.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|repeat-string@1.6.1",
      "author": "Jon Schlinkert",
      "description": "Repeat the given string n times. Fastest implementation for repeating a string.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/repeat-string@1.6.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/repeat-string.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/repeat-string",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/repeat-string/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3d5d1dcc260335f462d630836c9ce95bb8cd34346e08e1bf8c8e5cb507062adfdc9590fe61c3d2df22255ae4c93261120bc69ebc2166589cb9c2300580da8deb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/repeat-string"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-limit",
      "version": "2.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|p-limit@2.3.0",
      "author": "Sindre Sorhus",
      "description": "Run multiple promise-returning & async functions with limited concurrency",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-limit@2.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-limit.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-limit#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-limit/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ffff3c985592271f25c42cf07400014c92f6332581d76f9e218ecc0cbd92a8b98091e294f6ac51bd6b92c938e6dc5526a4110cb857dc90022a11a546503c5beb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-limit"
        }
      ]
    },
    {
      "type": "library",
      "name": "remove-trailing-separator",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|remove-trailing-separator@1.1.0",
      "author": "darsain",
      "description": "Removes separators from the end of the string.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/remove-trailing-separator@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/darsain/remove-trailing-separator.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/darsain/remove-trailing-separator#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/darsain/remove-trailing-separator/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fe14be634bb768e7c811389a8a2ad41700c10f39973ef3be8c07ca4e2b549e020fcdd29ce99d0ba058ccfc22b93cbe02f9e2b01e88651c06fa1f45457e6994b3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/remove-trailing-separator"
        }
      ]
    },
    {
      "type": "library",
      "name": "node-int64",
      "version": "0.4.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|node-int64@0.4.0",
      "author": "Robert Kieffer",
      "description": "Support for representing 64-bit integers in JavaScript",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/node-int64@0.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/broofa/node-int64.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/broofa/node-int64#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/broofa/node-int64/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/node-int64/-/node-int64-0.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3b9973f75c5239ea173fa0ee9721df965a6af84834d0c5a2b5921bb4f7e8484bea207765e607dc63a858cc35a78f4a83e6dcf9d8f234f2ef6a52f49579405e1f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/node-int64"
        }
      ]
    },
    {
      "type": "library",
      "name": "rsvp",
      "version": "4.8.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|rsvp@4.8.5",
      "author": "Tilde, Inc. & Stefan Penner",
      "description": "A lightweight library that provides tools for organizing asynchronous code",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/rsvp@4.8.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/tildeio/rsvp.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tildeio/rsvp.js",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tildeio/rsvp.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/rsvp/-/rsvp-4.8.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9df30e9404aef4e9d1268d666c4936733d03e7a6b530136b27ba2b8d16501b5d170f2bafc24b0a6ee5cda7aa9afa46e7f37f47c23c2107384599db1a1007dab8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/rsvp"
        }
      ]
    },
    {
      "type": "library",
      "name": "tmpl",
      "version": "1.0.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|tmpl@1.0.5",
      "author": "Naitik Shah",
      "description": "JavaScript micro templates.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tmpl@1.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/daaku/nodejs-tmpl.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/daaku/nodejs-tmpl",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/daaku/nodejs-tmpl/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tmpl/-/tmpl-1.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ddfd2e384010c08a86b965b6315cd883c7d5fd036773f229b89346f37eeb2ee73301a2d51ec9561d9423e081a2125e47b379246e1c0bf406fb1ebb26ba3f929b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tmpl"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-number",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-number@3.0.0",
      "author": "Jon Schlinkert",
      "description": "Returns true if the value is a number. comprehensive tests.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-number@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/is-number.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-number",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-number/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e1c6e80aa2299621fe980bc535e823650e2480a73765485056bdc7bd66d2879ab7587daff3672df93d98d61754e4676da2bc7f70b89f423a826cbedba739cb4e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-number"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "kind-of",
          "version": "3.2.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|is-number@3.0.0|kind-of@3.2.2",
          "author": "Jon Schlinkert",
          "description": "Get the native type of a value.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/kind-of@3.2.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/kind-of.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/kind-of",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/kind-of/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "34e5bd4105cca191a0fe8aa754da0d4d320510889dd7adbb5827df50124474cc58029abb98d13b0a9cee7083dcf99420db93e17a3ec8252997de13bea1b94eb5"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/is-number/node_modules/kind-of"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "to-regex-range",
      "version": "2.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|to-regex-range@2.1.1",
      "author": "Jon Schlinkert",
      "description": "Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/to-regex-range@2.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/micromatch/to-regex-range.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/micromatch/to-regex-range",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/micromatch/to-regex-range/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/to-regex-range/-/to-regex-range-2.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "65958d7c28d4a245d70c65c5a597a1248919aaaf7505c50b16afcf8bb3398b8267c5776130a00aebcdb3f1b096de8f078f5c2ebb3a0a716dc37d5cda3fa56e36"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/to-regex-range"
        }
      ]
    },
    {
      "type": "library",
      "name": "snapdragon-util",
      "version": "3.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|snapdragon-util@3.0.1",
      "author": "Jon Schlinkert",
      "description": "Utilities for the snapdragon parser/compiler.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/snapdragon-util@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/snapdragon-util.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/snapdragon-util",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/snapdragon-util/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/snapdragon-util/-/snapdragon-util-3.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "99b2a431d40ab235f80402f86d16138f6d5e74e7fc70ded71dd6142447be667f7d85511870cbca3dcb7522a35eefe0193e2ae7f01083390047419927aa62a565"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/snapdragon-util"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "kind-of",
          "version": "3.2.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|snapdragon-util@3.0.1|kind-of@3.2.2",
          "author": "Jon Schlinkert",
          "description": "Get the native type of a value.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/kind-of@3.2.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/kind-of.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/kind-of",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/kind-of/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "34e5bd4105cca191a0fe8aa754da0d4d320510889dd7adbb5827df50124474cc58029abb98d13b0a9cee7083dcf99420db93e17a3ec8252997de13bea1b94eb5"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/snapdragon-util/node_modules/kind-of"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "is-accessor-descriptor",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-accessor-descriptor@1.0.1",
      "author": "Jon Schlinkert",
      "description": "Returns true if a value has the characteristics of a valid JavaScript accessor descriptor.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-accessor-descriptor@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-accessor-descriptor.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-accessor-descriptor",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-accessor-descriptor/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-accessor-descriptor/-/is-accessor-descriptor-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "60151a9cb23c6288a1c3ddb761e1544b97ecd1f1767f94d21533626000338610ec7036b7944a98bb3d690ce10fe4abd7f7823d7b2defb2a8c970b545554fb740"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-accessor-descriptor"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-data-descriptor",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-data-descriptor@1.0.1",
      "author": "Jon Schlinkert",
      "description": "Returns true if a value has the characteristics of a valid JavaScript data descriptor.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-data-descriptor@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-data-descriptor.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-data-descriptor",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-data-descriptor/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-data-descriptor/-/is-data-descriptor-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6dce0d9420e20abdbc538684b10dd0b36e3dd6056ae15f06ecc432c2cf7af089aa8cab98b53257ae5ed5abb8ec37b2f2fc2df18f929616b63bb0735e0e40335f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-data-descriptor"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-plain-object",
      "version": "2.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-plain-object@2.0.4",
      "author": "Jon Schlinkert",
      "description": "Returns true if an object was created by the `Object` constructor.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-plain-object@2.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/is-plain-object.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-plain-object",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/is-plain-object/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-plain-object/-/is-plain-object-2.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8793e98179168ad737f0104c61ac1360c5891c564956706ab85139ef11698c1f29245885ea067e6d4f96c88ff2a9788547999d2ec81835a3def2e6a8e94bfd3a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-plain-object"
        }
      ]
    },
    {
      "type": "library",
      "name": "posix-character-classes",
      "version": "0.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|posix-character-classes@0.1.1",
      "author": "Jon Schlinkert",
      "description": "POSIX character classes for creating regular expressions.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/posix-character-classes@0.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/posix-character-classes.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/posix-character-classes",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/posix-character-classes/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/posix-character-classes/-/posix-character-classes-0.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c5381805cddfba8ed8b7b25b8ae171498193a0ca33f1f2e813a4c2f56c753ffbbe2df79384c380aa6bb21029e505a6896febb59bd847897504b705b83b37d426"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/posix-character-classes"
        }
      ]
    },
    {
      "type": "library",
      "name": "ret",
      "version": "0.1.15",
      "bom-ref": "pug@2.0.4-tuxcare.2|ret@0.1.15",
      "author": "Roly Fentanes",
      "description": "Tokenizes a string that represents a regular expression.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ret@0.1.15",
      "externalReferences": [
        {
          "url": "git://github.com/fent/ret.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/fent/ret.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/fent/ret.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ret/-/ret-0.1.15.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4d3958a5af8e2febcc30d1b6e314a5406109dc1fd1cc47d494b72dedbe46ff2b5abfec0fae9942a55305bb0cd76e479c26b6fa218a358856f44bdbf7efbe789a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ret"
        }
      ]
    },
    {
      "type": "library",
      "name": "cache-base",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|cache-base@1.0.1",
      "author": "Jon Schlinkert",
      "description": "Basic object cache with `get`, `set`, `del`, and `has` methods for node.js/javascript projects.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cache-base@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/cache-base.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/cache-base",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/cache-base/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cache-base/-/cache-base-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "00a71d4e71525804dde7f1823d1c6bd82870209f3909ecab1328d11e52b1439e9de1724c1b29b4b8088a9f4c5b2ce18e977fb24693938b8f38755084739014cd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cache-base"
        }
      ]
    },
    {
      "type": "library",
      "name": "class-utils",
      "version": "0.3.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|class-utils@0.3.6",
      "author": "Jon Schlinkert",
      "description": "Utils for working with JavaScript classes and prototype methods.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/class-utils@0.3.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/class-utils.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/class-utils",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/class-utils/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/class-utils/-/class-utils-0.3.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a8e84f6bf163eece9363c1fc7ac1aee5036930c431cfbf61faeaf3acd60dea69fef419f194319fe5067e5de083b314a33eab12479e973993899a97aeae72cc7a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/class-utils"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "define-property",
          "version": "0.2.5",
          "bom-ref": "pug@2.0.4-tuxcare.2|class-utils@0.3.6|define-property@0.2.5",
          "author": "Jon Schlinkert",
          "description": "Define a non-enumerable property on an object.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/define-property@0.2.5",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/define-property.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/define-property",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/define-property/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "46bec00e34197a771e54e00aa29e802e49110261f50381b1f6157fed9ba33d4376ae4013a853b42592d92276c08e9658a09d60531f0c44c4159187a671b3124c"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/class-utils/node_modules/define-property"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-descriptor",
          "version": "0.1.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|class-utils@0.3.6|is-descriptor@0.1.7",
          "author": "Jon Schlinkert",
          "description": "Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-descriptor@0.1.7",
          "externalReferences": [
            {
              "url": "git+https://github.com/inspect-js/is-descriptor.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/inspect-js/is-descriptor",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/inspect-js/is-descriptor/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "0b782b653bce6de375c6e7787115a5dfae8e3176538f4f871b293886f7e9c78647b753dbeb400d497a822bba5d3937944294731020524e986abc3ed4fa5db612"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/class-utils/node_modules/is-descriptor"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "component-emitter",
      "version": "1.3.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|component-emitter@1.3.1",
      "description": "Event emitter",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/component-emitter@1.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/component-emitter.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/component-emitter#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/component-emitter/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4f4f9b6ab5124114d44004a1f1bc74d9d97e0e1179e06b480d8d776379bda164e494a6dbdd6bfdef899e469799de5a752692d51025963470b8bda1b65c75e8b9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/component-emitter"
        }
      ]
    },
    {
      "type": "library",
      "name": "mixin-deep",
      "version": "1.3.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|mixin-deep@1.3.2",
      "author": "Jon Schlinkert",
      "description": "Deeply mix the properties of objects into the first object. Like merge-deep, but doesn't clone.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mixin-deep@1.3.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/mixin-deep.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/mixin-deep",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/mixin-deep/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mixin-deep/-/mixin-deep-1.3.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "591a039fffe65c1889d47e34aea6b7bc7d2da1e3f04ac19be398889d6953c926be52ee24ded6144b16b6bf52aa0222edbe5ad2cda131a92d60b64f7a03dcef10"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mixin-deep"
        }
      ]
    },
    {
      "type": "library",
      "name": "pascalcase",
      "version": "0.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|pascalcase@0.1.1",
      "author": "Jon Schlinkert",
      "description": "Convert a string to pascal-case.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pascalcase@0.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/pascalcase.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/pascalcase",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/pascalcase/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pascalcase/-/pascalcase-0.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5c75dfbbfc8e411cbdbd83ad50354c37ad0e1098d6d35dc6a0e6c6d68fb1c104e907d798257fc18d732c756d776433ebb85858627d001b6db0d3181033097737"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pascalcase"
        }
      ]
    },
    {
      "type": "library",
      "name": "sourcemap-codec",
      "group": "@jridgewell",
      "version": "1.5.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|@jridgewell/sourcemap-codec@1.5.5",
      "author": "Justin Ridgewell",
      "description": "Encode/decode sourcemap mappings",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/jridgewell/sourcemaps.git#packages/sourcemap-codec",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/sourcemap-codec",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jridgewell/sourcemaps/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "71843ddf5d20aeac6e7966e5f96b885086a251a0dc8fb58eab97d58449633558117ce52163d7f2db34ef7e8a96b2779b87c4a5ef45527056c80af2672ca0743a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jridgewell/sourcemap-codec"
        }
      ]
    },
    {
      "type": "library",
      "name": "resolve-uri",
      "group": "@jridgewell",
      "version": "3.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|@jridgewell/resolve-uri@3.1.2",
      "author": "Justin Ridgewell",
      "description": "Resolve a URI relative to an optional base URI",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jridgewell/resolve-uri.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jridgewell/resolve-uri#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jridgewell/resolve-uri/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6d12128022233f6d3fb5b5923d63048b9e1054f45913192e0fd9492fe508c542adc15240f305b54eb6f58ccb354455e8d42053359ff98690bd42f98a59da292b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@jridgewell/resolve-uri"
        }
      ]
    },
    {
      "type": "library",
      "name": "baseline-browser-mapping",
      "version": "2.8.25",
      "bom-ref": "pug@2.0.4-tuxcare.2|baseline-browser-mapping@2.8.25",
      "description": "A library for obtaining browser versions with their maximum supported Baseline feature set and Widely Available status.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/baseline-browser-mapping@2.8.25",
      "externalReferences": [
        {
          "url": "git+https://github.com/web-platform-dx/baseline-browser-mapping.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/web-platform-dx/baseline-browser-mapping#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/web-platform-dx/baseline-browser-mapping/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/baseline-browser-mapping/-/baseline-browser-mapping-2.8.25.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d8da2f1d57ac545e535de7ec197d72cf1d7182befe9bd2507a7bf3e85418dea77e61790a9188affaf4c273b3ab88ff667036694c2e6600e60de2871ddbdf9eac"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/baseline-browser-mapping"
        }
      ]
    },
    {
      "type": "library",
      "name": "caniuse-lite",
      "version": "1.0.30001754",
      "bom-ref": "pug@2.0.4-tuxcare.2|caniuse-lite@1.0.30001754",
      "author": "Ben Briggs",
      "description": "A smaller version of caniuse-db, with only the essentials!",
      "licenses": [
        {
          "license": {
            "id": "CC-BY-4.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/caniuse-lite@1.0.30001754",
      "externalReferences": [
        {
          "url": "git+https://github.com/browserslist/caniuse-lite.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserslist/caniuse-lite#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserslist/caniuse-lite/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30001754.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c7a39e057b9ea0071e3a6a2dcf1dcf3b8669b78af3a5e205b12afa00078f4d9c529178980d49a9ca9125ededbef0d09df5b0fb6d78eac9e7fc08960f0b58dfc6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/caniuse-lite"
        }
      ]
    },
    {
      "type": "library",
      "name": "electron-to-chromium",
      "version": "1.5.245",
      "bom-ref": "pug@2.0.4-tuxcare.2|electron-to-chromium@1.5.245",
      "author": "Kilian Valkhof",
      "description": "Provides a list of electron-to-chromium version mappings",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/electron-to-chromium@1.5.245",
      "externalReferences": [
        {
          "url": "git+https://github.com/kilian/electron-to-chromium.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kilian/electron-to-chromium#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kilian/electron-to-chromium/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.5.245.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "add9867d6e3b6612ffa16109018e2ac51b5d972d81f7ca284c9d297442388e154b67ab4d7fc7cfb68bf6c12d4844ac05253f7695edf1e0a9f18b0ce5edc3cfa5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/electron-to-chromium"
        }
      ]
    },
    {
      "type": "library",
      "name": "node-releases",
      "version": "2.0.27",
      "bom-ref": "pug@2.0.4-tuxcare.2|node-releases@2.0.27",
      "author": "Sergey Rubanov",
      "description": "Node.js releases data",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/node-releases@2.0.27",
      "externalReferences": [
        {
          "url": "git+https://github.com/chicoxyzzy/node-releases.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chicoxyzzy/node-releases#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chicoxyzzy/node-releases/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/node-releases/-/node-releases-2.0.27.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9e687794291867782b66fa9c087f9f8e643b5fe1f439e6603f8d0e89eac4680a6d5f85e87cc87993035b5a1ee505db94cc2715ffc919f8d0cb0b09b68a8ac894"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/node-releases"
        }
      ]
    },
    {
      "type": "library",
      "name": "update-browserslist-db",
      "version": "1.1.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|update-browserslist-db@1.1.4",
      "author": "Andrey Sitnik",
      "description": "CLI tool to update caniuse-lite to refresh target browsers from Browserslist config",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/update-browserslist-db@1.1.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/browserslist/update-db.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserslist/update-db#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserslist/update-db/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/update-browserslist-db/-/update-browserslist-db-1.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ab448f4f8c7253ce2c6945feb689b3d562e4c546ee6899d1d715add7b33b7c9b4426280979650d194aab6ae157b079ea7aff72f494d11b0935ded141b8a6f2e0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/update-browserslist-db"
        }
      ]
    },
    {
      "type": "library",
      "name": "acorn-walk",
      "version": "6.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|acorn-walk@6.2.0",
      "description": "ECMAScript (ESTree) AST walker",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/acorn-walk@6.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/acornjs/acorn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/acornjs/acorn",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/acornjs/acorn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-6.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "edebecc9f1f570b382740cd901de370a2734e322b274dc74705fbbb62035f69d579cb2cf5387690903aaa63ab0a2415efffbd2d10a9faaa8c24b6264888b3470"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/acorn-walk"
        }
      ]
    },
    {
      "type": "library",
      "name": "estraverse",
      "version": "4.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|estraverse@4.3.0",
      "description": "ECMAScript JS AST traversal functions",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/estraverse@4.3.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/estools/estraverse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/estools/estraverse",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/estools/estraverse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-4.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dfd9e729f7d6cfcc4dd4153fd9cefd9fd9c1f470f3a349e2614ab1eb1caa527ca8027432c96a4e4dd6447a209c87c041bb9d79b78c29f599a055f5619fd101a7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/estraverse"
        }
      ]
    },
    {
      "type": "library",
      "name": "optionator",
      "version": "0.8.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|optionator@0.8.3",
      "author": "George Zahariev",
      "description": "option parsing and help generation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/optionator@0.8.3",
      "externalReferences": [
        {
          "url": "git://github.com/gkz/optionator.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/gkz/optionator",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/gkz/optionator/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/optionator/-/optionator-0.8.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f885bda4009d9375d69a64d71bc9b7ba919426cb795d11b3c4c4635f302e2755e720536f7e18e322e6240efcac9cf43bab3a95ccbb7bf010abba7b6a4615906c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/optionator"
        }
      ]
    },
    {
      "type": "library",
      "name": "request-promise-core",
      "version": "1.1.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|request-promise-core@1.1.4",
      "author": "Nicolai Kamenzky",
      "description": "Core Promise support implementation for the simplified HTTP request client 'request'.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/request-promise-core@1.1.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/request/promise-core.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/request/promise-core#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/request/promise-core/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/request-promise-core/-/request-promise-core-1.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4d36c07c10517560fb68d34ea153811f8a4dfca8a057a2f26a960d36500f03c2706e8bd1b62d44f3c9b7b18030b0b8b9af284f2ac13d00fc278c54e07548d3a7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/request-promise-core"
        }
      ]
    },
    {
      "type": "library",
      "name": "stealthy-require",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|stealthy-require@1.1.1",
      "author": "Nicolai Kamenzky",
      "description": "The closest you can get to require something with bypassing the require cache",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stealthy-require@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/analog-nico/stealthy-require.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/analog-nico/stealthy-require#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/analog-nico/stealthy-require/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stealthy-require/-/stealthy-require-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6675a962762e822395118e4691cb892b58a8e55f1098d602846eb68128adf69415184ad7b6b2ae3c2e792136954ae92632d6b9aa9314eefa8bb762e79e2e1ffe"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stealthy-require"
        }
      ]
    },
    {
      "type": "library",
      "name": "browser-process-hrtime",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|browser-process-hrtime@1.0.0",
      "author": "kumavis",
      "description": "Shim for process.hrtime in the browser",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browser-process-hrtime@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/kumavis/browser-process-hrtime.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kumavis/browser-process-hrtime#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kumavis/browser-process-hrtime/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browser-process-hrtime/-/browser-process-hrtime-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f68e5479c2371a192933a0eb5ebebd3db948b96c4f2a4f58d231c1461768719db2ed81020450ac1e6efd3ebdcec91d80be384391a6c525a0c931845acc782ca3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browser-process-hrtime"
        }
      ]
    },
    {
      "type": "library",
      "name": "async-limiter",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|async-limiter@1.0.1",
      "author": "Samuel Reed",
      "description": "asynchronous function queue with adjustable concurrency",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/async-limiter@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/strml/async-limiter.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/strml/async-limiter#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/strml/async-limiter/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/async-limiter/-/async-limiter-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "72c3a558601c44525a23a9be17658a76730aaf81e1761155064d07fd06c914c0abfae3b6930a21c1740fc70ffd382c69d39af9821541152ca2a22c71de07e435"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/async-limiter"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-array-method-boxes-properly",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|es-array-method-boxes-properly@1.0.0",
      "author": "Jordan Harband",
      "description": "Utility package to determine if an `Array.prototype` method properly boxes the callback's receiver and third argument.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-array-method-boxes-properly@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/es-array-method-boxes-properly.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/es-array-method-boxes-properly#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/es-array-method-boxes-properly/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-array-method-boxes-properly/-/es-array-method-boxes-properly-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c1de895d49b21e6b7c4f96b6c6b794c0a7063eae9fd5ff96c082648a352a886709cf5aaa9d980fe9720af90c88594e654fb8a678dc54965e3c6f3886f9349870"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-array-method-boxes-properly"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-string",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-string@1.1.1",
      "author": "Jordan Harband",
      "description": "Is this value a JS String object or primitive? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-string@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-string.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-string#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-string/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-string/-/is-string-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "06d11e4aca1a4239523c17a631022b635318d2e33abe74b58397e6b9f60eb67c4b19464cdb5efc3ca6e1b24ec57efe7c217f99b5cbe81b071c62c8743e096400"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-string"
        }
      ]
    },
    {
      "type": "library",
      "name": "array-buffer-byte-length",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|array-buffer-byte-length@1.0.2",
      "author": "Jordan Harband",
      "description": "Get the byte length of an ArrayBuffer, even in engines without a `.byteLength` method.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/array-buffer-byte-length@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/array-buffer-byte-length.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/array-buffer-byte-length#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/array-buffer-byte-length/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/array-buffer-byte-length/-/array-buffer-byte-length-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2c713ef01b91ed16060cabe7ae672e4aaded0dc2aff4e1445d0b7f1e96d9858ed5ea1d339545eeb67003f361a2171f6b76278232392fb5cb0fa81c20525d488b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/array-buffer-byte-length"
        }
      ]
    },
    {
      "type": "library",
      "name": "arraybuffer.prototype.slice",
      "version": "1.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|arraybuffer.prototype.slice@1.0.4",
      "author": "Jordan Harband",
      "description": "ES spec-compliant shim for ArrayBuffer.prototype.slice",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/arraybuffer.prototype.slice@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/es-shims/ArrayBuffer.prototype.slice.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/ArrayBuffer.prototype.slice#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/ArrayBuffer.prototype.slice/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/arraybuffer.prototype.slice/-/arraybuffer.prototype.slice-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "04da0263a4975cf43b805da8a483f818113e5f0ed4fa91cc60abb38e008ddc6c22688474f5451e29f85ec88af2efb42dac20650b428ad2ae7f4c447fb588773d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/arraybuffer.prototype.slice"
        }
      ]
    },
    {
      "type": "library",
      "name": "available-typed-arrays",
      "version": "1.0.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|available-typed-arrays@1.0.7",
      "author": "Jordan Harband",
      "description": "Returns an array of Typed Array names that are available in the current environment",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/available-typed-arrays@1.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/available-typed-arrays.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/available-typed-arrays#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/available-typed-arrays/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/available-typed-arrays/-/available-typed-arrays-1.0.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c2f52306d48637bfbb4a3369abff4cd93837e745190f7abad881592db4404756d23250a8d5969e5be049f83d3dd1ee2120864b05c4c359ee0c8788ef5036a3cd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/available-typed-arrays"
        }
      ]
    },
    {
      "type": "library",
      "name": "data-view-buffer",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|data-view-buffer@1.0.2",
      "author": "Jordan Harband",
      "description": "Get the ArrayBuffer out of a DataView, robustly.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/data-view-buffer@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/data-view-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/data-view-buffer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/data-view-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/data-view-buffer/-/data-view-buffer-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "12628ee55dce2d7875aed2b6c205d16a7b1a2b5fe6b557535048842345bc464be04f4e647f1687dbd3e588b9e92cfef7c983bad78d90ef640d6bc5b1fc0e42a9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/data-view-buffer"
        }
      ]
    },
    {
      "type": "library",
      "name": "data-view-byte-length",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|data-view-byte-length@1.0.2",
      "author": "Jordan Harband",
      "description": "Get the byteLength out of a DataView, robustly.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/data-view-byte-length@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/data-view-byte-length.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/data-view-byte-length#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/data-view-byte-length/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/data-view-byte-length/-/data-view-byte-length-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b6e8466c4e827d333dfb900d19ffa841bef62b2ff4facdf1294a47bd285f8b3d91c4c16014f8ec5ee44b05532dbccb35e5ac1ee394916fcdc3eb01f87b0eb095"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/data-view-byte-length"
        }
      ]
    },
    {
      "type": "library",
      "name": "data-view-byte-offset",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|data-view-byte-offset@1.0.1",
      "author": "Jordan Harband",
      "description": "Get the byteOffset out of a DataView, robustly.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/data-view-byte-offset@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/data-view-byte-offset.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/data-view-byte-offset#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/data-view-byte-offset/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/data-view-byte-offset/-/data-view-byte-offset-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "052f0f7e6b431a7ae061d3a89c665074b66c95621e08614ff6da5a9f4862d42a3666bd8d2800ecbc6600f17c6e1bfe145a027a0a3b6ff9826707a30cebd40695"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/data-view-byte-offset"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-set-tostringtag",
      "version": "2.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|es-set-tostringtag@2.1.0",
      "author": "Jordan Harband",
      "description": "A helper to optimistically set Symbol.toStringTag, when possible.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-set-tostringtag@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/es-shims/es-set-tostringtag.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/es-set-tostringtag#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/es-set-tostringtag/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-set-tostringtag/-/es-set-tostringtag-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8fabd6cdfac655fc97c607be3b4c79b21e9cbf10288346bfe1175dd8adfacc2315e5e27effeb4e0278113bc70e0cc3566d545d5659866502f6612df247c6c850"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-set-tostringtag"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-to-primitive",
      "version": "1.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|es-to-primitive@1.3.0",
      "author": "Jordan Harband",
      "description": "ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-to-primitive@1.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/es-to-primitive.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/es-to-primitive#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/es-to-primitive/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c3ee662771ae14bf8d8d5b4996fc9d4a1a84d5e3778773db23bff92c0b1824fff6aadb8c5e37cbd8ba47491aa8e1be1e485e4afc31f5257294007481d945b9d2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-to-primitive"
        }
      ]
    },
    {
      "type": "library",
      "name": "function.prototype.name",
      "version": "1.1.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|function.prototype.name@1.1.8",
      "author": "Jordan Harband",
      "description": "An ES2015 spec-compliant `Function.prototype.name` shim",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/function.prototype.name@1.1.8",
      "externalReferences": [
        {
          "url": "git://github.com/es-shims/Function.prototype.name.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/Function.prototype.name#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/Function.prototype.name/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/function.prototype.name/-/function.prototype.name-1.1.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7b98b0ca874e1e16ccaffc8dadcedf0d81b8aa56c8bc8e606a3cb33e76f94c2c32863029ce7421d41305a2ef5bdf449ebd8e3780224a5f27280818cc6ecb96d1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/function.prototype.name"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-symbol-description",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|get-symbol-description@1.1.0",
      "author": "Jordan Harband",
      "description": "Gets the description of a Symbol. Handles `Symbol()` vs `Symbol('')` properly when possible.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-symbol-description@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/get-symbol-description.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/get-symbol-description#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/get-symbol-description/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-symbol-description/-/get-symbol-description-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c3d50ca96c09c4734ebe8373489da83c5e70bd872f3fb8d4bd8ce1a7aef21214e2d7b6430410b5cfda53746bb38c3f84148a8b4984707998ea7e23f3434e846e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-symbol-description"
        }
      ]
    },
    {
      "type": "library",
      "name": "globalthis",
      "version": "1.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|globalthis@1.0.4",
      "author": "Jordan Harband",
      "description": "ECMAScript spec-compliant polyfill/shim for `globalThis`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/globalthis@1.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/System.global.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/System.global#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/System.global/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/globalthis/-/globalthis-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0e92ca6cd5385b2969c49ca442e8df09cc185a257f2619b9d06a28d30ad520b02fe633abf5df87f944773e14820f6ac2084220d2e73e1be9ae053c03e782610d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/globalthis"
        }
      ]
    },
    {
      "type": "library",
      "name": "internal-slot",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|internal-slot@1.1.0",
      "author": "Jordan Harband",
      "description": "ES spec-like internal slots",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/internal-slot@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/internal-slot.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/internal-slot#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/internal-slot/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/internal-slot/-/internal-slot-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e2077b56958d40d07850a28214555ca75015bfe14c3a0b3d34ace31cabac73c8d332177978bd4da90a8ea44d0accc76cf34e3fc87960969deec6096e3aa00f2f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/internal-slot"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-array-buffer",
      "version": "3.0.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-array-buffer@3.0.5",
      "author": "Jordan Harband",
      "description": "Is this value a JS ArrayBuffer?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-array-buffer@3.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-array-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-array-buffer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-array-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-array-buffer/-/is-array-buffer-3.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0c37c03548a21b6c02d6a6b03faeaa953ba025e2f91f2ccca5fafc94b2be8cc422ac6ccda1dd01d7670507ff6af37f11bb6eec0707f0efcfeb76853b444473e8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-array-buffer"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-data-view",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-data-view@1.0.2",
      "author": "Jordan Harband",
      "description": "Is this value a JS DataView? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-data-view@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-data-view.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-data-view#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-data-view/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-data-view/-/is-data-view-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "44ab5617ca46992f3b8b60fa82a42efe5ec461195575fcde98224dfcfdd43acfffc75404ee67e1bf31c802905345fedac6f4fa0cc1b04b00576024f49df07dc7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-data-view"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-negative-zero",
      "version": "2.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-negative-zero@2.0.3",
      "author": "Jordan Harband",
      "description": "Is this value negative zero? === will lie to you",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-negative-zero@2.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-negative-zero.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-negative-zero",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-negative-zero/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-negative-zero/-/is-negative-zero-2.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e4aa08bb6360a727a4ef98d7a1d16f9da7c1e83260af7bbcbae2b42c46498eb535f43acc0f7115111691f2c8f3f0208682966fc4f97d4ae13518c54f147c759b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-negative-zero"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-set",
      "version": "2.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-set@2.0.3",
      "author": "Jordan Harband",
      "description": "Is this value a JS Set? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-set@2.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-set.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-set#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-set/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-set/-/is-set-2.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "88f0237abaec7b6effca018bc70f84051f5a82ff58eae2de61524cbbe40d0a8a2e275ff5ae2d261ab716a5f0aa159bb3cf1dd68edc311b4f7c5fe9f83ae4643e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-set"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-shared-array-buffer",
      "version": "1.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-shared-array-buffer@1.0.4",
      "author": "Jordan Harband",
      "description": "Is this value a JS SharedArrayBuffer?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-shared-array-buffer@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-shared-array-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-shared-array-buffer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-shared-array-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-shared-array-buffer/-/is-shared-array-buffer-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "21259a73c76bbf86467f02a5e6c9691c6f4ec0f36dcb88ce58f448841a713a80fe86a2138b0ba2a4e4366cdb61033c00dc1e1f2233b83659fbe0dd12f5bcaaf0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-shared-array-buffer"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-typed-array",
      "version": "1.1.15",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-typed-array@1.1.15",
      "author": "Jordan Harband",
      "description": "Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-typed-array@1.1.15",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-typed-array.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-typed-array#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-typed-array/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-typed-array/-/is-typed-array-1.1.15.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a7711cb227178e2b7b49ab245c7b35840f75431813c38e85bfa10528a192e434452c3f322a7a218c5de1c688eef786ff39c319a10ba4ce93e9044f6e2d52b381"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-typed-array"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-weakref",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-weakref@1.1.1",
      "author": "Jordan Harband",
      "description": "Is this value a JS WeakRef? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-weakref@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-weakref.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-weakref#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-weakref/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-weakref/-/is-weakref-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ea2f661964a5ab334c12aa42a7ddcac114b5b943a8764d8e27a6feb2aed93c34b2d96b88e4d148c69ff6e784f2b51f1fb5e7dec645a7e713621d43693ce7d27b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-weakref"
        }
      ]
    },
    {
      "type": "library",
      "name": "object-inspect",
      "version": "1.13.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|object-inspect@1.13.4",
      "author": "James Halliday",
      "description": "string representations of objects in node and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/object-inspect@1.13.4",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/object-inspect.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/object-inspect",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/object-inspect/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5baee22e5e09d845c41936df78709f7eb8c37e2b6f2c0360d14957df01545124f1f762974457a0307515812a84fb0be101b8b85aa8c683d733cac4d5d84a5b7b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/object-inspect"
        }
      ]
    },
    {
      "type": "library",
      "name": "object.assign",
      "version": "4.1.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|object.assign@4.1.7",
      "author": "Jordan Harband",
      "description": "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/object.assign@4.1.7",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/object.assign.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/object.assign#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/object.assign/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9cadbc58ea3e4088c190376e4c8344e09905fd42492b27f6109c6f24a7db943a7283443ea643873532f4430cba34fe85844fc49f357bdc1c71a9c25a5d8f5a9f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/object.assign"
        }
      ]
    },
    {
      "type": "library",
      "name": "own-keys",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|own-keys@1.0.1",
      "author": "Jordan Harband",
      "description": "Robustly get an object's own property keys (strings and symbols), including non-enumerables when possible",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/own-keys@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/own-keys.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/own-keys#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/own-keys/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/own-keys/-/own-keys-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a853b22b93e389665df9040887ed6385d6fd2e9c53174aacecf9bca39407619d0cdef2aa4aacec65a101ea85a5c59faadac241308fcab607763796704284477e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/own-keys"
        }
      ]
    },
    {
      "type": "library",
      "name": "regexp.prototype.flags",
      "version": "1.5.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|regexp.prototype.flags@1.5.4",
      "author": "Jordan Harband",
      "description": "ES6 spec-compliant RegExp.prototype.flags shim.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/regexp.prototype.flags@1.5.4",
      "externalReferences": [
        {
          "url": "git://github.com/es-shims/RegExp.prototype.flags.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/RegExp.prototype.flags#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/RegExp.prototype.flags/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/regexp.prototype.flags/-/regexp.prototype.flags-1.5.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "758aa035265b0f091a27671e45df688c21a306afa63a6f4b9ad5e7027106c8784dff947b8835b64d1c3787ea3f8c2171bacdcfd8b7d62088b0a3002300d9bb20"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/regexp.prototype.flags"
        }
      ]
    },
    {
      "type": "library",
      "name": "safe-push-apply",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|safe-push-apply@1.0.0",
      "author": "Jordan Harband",
      "description": "Push an array of items into an array, while being robust against prototype modification",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/safe-push-apply@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/safe-push-apply.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/safe-push-apply#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/safe-push-apply/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/safe-push-apply/-/safe-push-apply-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "88a13dc3f67bc42cd430866a741b29ea9110bf0b8479b1f8bdda637035a7cb3688eb297a3bd147bd5a6619e96f10736ca18eb019b964c51e99b72fe1d345a248"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/safe-push-apply"
        }
      ]
    },
    {
      "type": "library",
      "name": "safe-regex-test",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|safe-regex-test@1.1.0",
      "author": "Jordan Harband",
      "description": "Give a regex, get a robust predicate function that tests it against a string.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/safe-regex-test@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/safe-regex-test.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/safe-regex-test#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/safe-regex-test/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/safe-regex-test/-/safe-regex-test-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c7ff82cf862b8a643141c7097f998a11b21ad4dcde091348e44725fde92695869a9a974d2cf6a557221c09934d1f732f9aa06e815e53318657bf4963b255256b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/safe-regex-test"
        }
      ]
    },
    {
      "type": "library",
      "name": "set-proto",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|set-proto@1.0.0",
      "author": "Jordan Harband",
      "description": "Robustly set the [[Prototype]] of an object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/set-proto@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/set-proto.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/set-proto#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/set-proto/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/set-proto/-/set-proto-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "44945dbc2a3a2009cf76cbcfffb9ba6ec42a3679f5142057e5936d14bf7c326145ff8c402094c883561b1d6e430b65b948a65a9eb0ba8b81ec26a95a8f0fdd67"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/set-proto"
        }
      ]
    },
    {
      "type": "library",
      "name": "stop-iteration-iterator",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|stop-iteration-iterator@1.1.0",
      "author": "Jordan Harband",
      "description": "Firefox 17-26 iterators throw a StopIteration object to indicate \"done\". This normalizes it.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stop-iteration-iterator@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/stop-iteration-iterator.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/stop-iteration-iterator#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/stop-iteration-iterator/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stop-iteration-iterator/-/stop-iteration-iterator-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "78ba175bf0c7ca5eb6cf1638482688827461b8cafaae2e23b84600452f04eac084ab32a93a2139db551ca1f771f8a9c3665e719af19869a2829391443b1242a1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stop-iteration-iterator"
        }
      ]
    },
    {
      "type": "library",
      "name": "string.prototype.trim",
      "version": "1.2.10",
      "bom-ref": "pug@2.0.4-tuxcare.2|string.prototype.trim@1.2.10",
      "author": "Jordan Harband",
      "description": "ES5 spec-compliant shim for String.prototype.trim",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/string.prototype.trim@1.2.10",
      "externalReferences": [
        {
          "url": "git://github.com/es-shims/String.prototype.trim.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/String.prototype.trim#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/String.prototype.trim/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/string.prototype.trim/-/string.prototype.trim-1.2.10.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "46ceba1743ffd6479d9399726321fdb81cee888fe43519b024047daae2ba54eb48a59d86fa131977e1d06dbbf6e4c80203a8047dfa0c658c654e877859c76b28"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/string.prototype.trim"
        }
      ]
    },
    {
      "type": "library",
      "name": "string.prototype.trimend",
      "version": "1.0.9",
      "bom-ref": "pug@2.0.4-tuxcare.2|string.prototype.trimend@1.0.9",
      "author": "Jordan Harband",
      "description": "ES2019 spec-compliant String.prototype.trimEnd shim.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/string.prototype.trimend@1.0.9",
      "externalReferences": [
        {
          "url": "git://github.com/es-shims/String.prototype.trimEnd.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/String.prototype.trimEnd#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/String.prototype.trimEnd/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/string.prototype.trimend/-/string.prototype.trimend-1.0.9.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1bb3a4e42e84fe3e1219fc8b0a5a174eb9e0408414dcf5ad5c6b2ddf233b05e6bd1515117f54b8d991e5659b6c36ab9ed853763e85217d95d82cd5b012be1d2d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/string.prototype.trimend"
        }
      ]
    },
    {
      "type": "library",
      "name": "string.prototype.trimstart",
      "version": "1.0.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|string.prototype.trimstart@1.0.8",
      "author": "Jordan Harband",
      "description": "ES2019 spec-compliant String.prototype.trimStart shim.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/string.prototype.trimstart@1.0.8",
      "externalReferences": [
        {
          "url": "git://github.com/es-shims/String.prototype.trimStart.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/String.prototype.trimStart#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/String.prototype.trimStart/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/string.prototype.trimstart/-/string.prototype.trimstart-1.0.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "517487dbad82499635b5fbb71b749e72beae18b08554f32122a1e3960094b4209c82285873fc4ab3d76331331439bda3d66552794f0453a35673f890294e867e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/string.prototype.trimstart"
        }
      ]
    },
    {
      "type": "library",
      "name": "typed-array-buffer",
      "version": "1.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|typed-array-buffer@1.0.3",
      "author": "Jordan Harband",
      "description": "Get the ArrayBuffer out of a TypedArray, robustly.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/typed-array-buffer@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/typed-array-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/typed-array-buffer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/typed-array-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/typed-array-buffer/-/typed-array-buffer-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9c0618c1f637aa7cd7df422403a01066355bb4ae9db86a27b5c426d56486d4c0fde182ea2b4e75e46340a57928c4a39632eb15b2c00758b87d49e6a879f6051b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/typed-array-buffer"
        }
      ]
    },
    {
      "type": "library",
      "name": "typed-array-byte-length",
      "version": "1.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|typed-array-byte-length@1.0.3",
      "author": "Jordan Harband",
      "description": "Robustly get the byte length of a Typed Array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/typed-array-byte-length@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/typed-array-byte-length.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/typed-array-byte-length#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/typed-array-byte-length/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/typed-array-byte-length/-/typed-array-byte-length-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "05a5e03ae231cfc9fca48ab77bb02d83feecf83a6262bc67e2f768b77c3d29b9c185c450abaa37c5e9907487f29ea49e5de0eb177db1f96bdfce63a33e263d96"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/typed-array-byte-length"
        }
      ]
    },
    {
      "type": "library",
      "name": "typed-array-byte-offset",
      "version": "1.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|typed-array-byte-offset@1.0.4",
      "author": "Jordan Harband",
      "description": "Robustly get the byte offset of a Typed Array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/typed-array-byte-offset@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/typed-array-byte-offset.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/typed-array-byte-offset#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/typed-array-byte-offset/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/typed-array-byte-offset/-/typed-array-byte-offset-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6d3940141fc505831cb97f3581b2f839ca47e4f9a5147aa5082a4097c025133333e64e77a0d0ef37ca753cd3962c4988db1e28ae9deb68e141e75b6ff57f8c15"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/typed-array-byte-offset"
        }
      ]
    },
    {
      "type": "library",
      "name": "typed-array-length",
      "version": "1.0.7",
      "bom-ref": "pug@2.0.4-tuxcare.2|typed-array-length@1.0.7",
      "author": "Jordan Harband",
      "description": "Robustly get the length of a Typed Array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/typed-array-length@1.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/typed-array-length.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/typed-array-length#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/typed-array-length/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/typed-array-length/-/typed-array-length-1.0.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dca4b66fe90bedfb2e93f78967b1107671264286a1a3fafa29479fee1c6f96d340e4347c34050cfbcc0931b2726781bdffb8b7bf9ccf04830de5ac9b021dbf26"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/typed-array-length"
        }
      ]
    },
    {
      "type": "library",
      "name": "unbox-primitive",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|unbox-primitive@1.1.0",
      "author": "Jordan Harband",
      "description": "Unbox a boxed JS primitive value.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/unbox-primitive@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/unbox-primitive.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/unbox-primitive#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/unbox-primitive/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/unbox-primitive/-/unbox-primitive-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9d627dd438de3a47a3fd303ca574379b2aee2a9284620aafa70f65cf838f1e3fcd585365b98ae36f3f63d35089f322907768388c5a0e9083424d6d88e4b104cb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/unbox-primitive"
        }
      ]
    },
    {
      "type": "library",
      "name": "which-typed-array",
      "version": "1.1.19",
      "bom-ref": "pug@2.0.4-tuxcare.2|which-typed-array@1.1.19",
      "author": "Jordan Harband",
      "description": "Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/which-typed-array@1.1.19",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/which-typed-array.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/which-typed-array#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/which-typed-array/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.19.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ac4bebf7405c938599b7d1c7142e0324cb23beeef1fabe9b226cf4fc1adb59bec0d9d8c9f219d932b5a71e8f45f2cb2fd0e304adab0385fb6b7d1393caa483af"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/which-typed-array"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsonify",
      "version": "0.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|jsonify@0.0.1",
      "author": "Douglas Crockford",
      "description": "JSON without touching any globals",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsonify@0.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/jsonify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/jsonify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/jsonify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dbf2a2d06726baa4ab805c9e950abd334e72ecf4b4984c2e233adfddfd5f3ea9150d546f66b3d9b5548c1f1760a3c02ad2cc4039bfdcaf66aaa80dcb7961d53e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsonify"
        }
      ]
    },
    {
      "type": "library",
      "name": "caller-path",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|caller-path@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Get the path of the caller function",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/caller-path@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/caller-path.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/caller-path#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/caller-path/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/caller-path/-/caller-path-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3022f7b1fea70925cec024f3bcf2a1375f1353b0074ef76d6a6f0302883172b27c4637db6e0ecb82783ae07f48cbebd457a54614294dfd3cb106401e6cb451e0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/caller-path"
        }
      ]
    },
    {
      "type": "library",
      "name": "error-ex",
      "version": "1.3.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|error-ex@1.3.4",
      "description": "Easy error subclassing and stack customization",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/qix-/node-error-ex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/qix-/node-error-ex#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/qix-/node-error-ex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b2a41a9809d1d785600abd40eb5f00dec1abca07292be1c46de9c0fc7884024914c1c648201fed816a871715a03b20e1e270782424629a1efd751e58c1cf4c0d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/error-ex"
        }
      ]
    },
    {
      "type": "library",
      "name": "shebang-regex",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|shebang-regex@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Regular expression for matching a shebang",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/shebang-regex@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/shebang-regex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/shebang-regex#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/shebang-regex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c29a12140c72b3a6f66b6c076755e90d2803ecdf62563836f4f87db95fee68ff44c7f2979644d94de75dc433d2610a60bf328b18991ed94534033a060a3348bd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/shebang-regex"
        }
      ]
    },
    {
      "type": "library",
      "name": "onetime",
      "version": "2.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|onetime@2.0.1",
      "author": "Sindre Sorhus",
      "description": "Ensure a function is only called once",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/onetime@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/onetime.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/onetime#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/onetime/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/onetime/-/onetime-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a32c8fa6231a28046fbdc822a7e255fbbcdc8b92fc0f55bd459233da5d68d3c00cde97eca62b555a73edde6cc77013e9d76a18313cb4a6aac5b3f0be9b7130b1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/onetime"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-defer",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|p-defer@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Create a deferred promise",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-defer@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-defer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-defer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-defer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-defer/-/p-defer-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c01df07c0c59a64d80cce7d430934bf9ddfac68b61452ca3f045ce6b87fa18ca980cdf4125a6922126ec93ec12f5a6e69de6d5c3de42d8a6f9b7ce549a90b1bb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-defer"
        }
      ]
    },
    {
      "type": "library",
      "name": "neo-async",
      "version": "2.6.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|neo-async@2.6.2",
      "description": "Neo-Async is a drop-in replacement for Async, it almost fully covers its functionality and runs faster ",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/neo-async@2.6.2",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/suguru03/neo-async.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/suguru03/neo-async",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/suguru03/neo-async/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "61ddd4112e665824aa47ea8d4fddd2dd4a18524a8067d94b83c6bb83dae29ac5a66062bc7154e8038fec17746bb21772577b0018c5d5526a4c60ec3e74ba4ebb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/neo-async"
        }
      ]
    },
    {
      "type": "library",
      "name": "wordwrap",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|wordwrap@1.0.0",
      "author": "James Halliday",
      "description": "Wrap those words. Show them at what columns to start and stop.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/node-wordwrap.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-wordwrap#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-wordwrap/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "82f57324594fc9c29ce5d64de323e43fcc3b0dcdfb06d3f5c9ccc49de39be2eab7e295d972faed45399657c5be5267be5c2c4a81b8ccfa77af93214f3326dde1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/wordwrap"
        }
      ]
    },
    {
      "type": "library",
      "name": "minimist",
      "group": "@types",
      "version": "1.2.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|@types/minimist@1.2.5",
      "description": "TypeScript definitions for minimist",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40types/minimist@1.2.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/minimist",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/minimist",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@types/minimist/-/minimist-1.2.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "868bfc6d4ba22e2c853c6c853c4d65c16866cd86e2ace5d034da38d3ecb7ce8c3c6855537b29f75562f454515f74d75d03c4b855fd13734eb6af3c8dafb3da6a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@types/minimist"
        }
      ]
    },
    {
      "type": "library",
      "name": "camelcase-keys",
      "version": "6.2.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|camelcase-keys@6.2.2",
      "author": "Sindre Sorhus",
      "description": "Convert object keys to camel case",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/camelcase-keys@6.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/camelcase-keys.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/camelcase-keys#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/camelcase-keys/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-6.2.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "62bc1a034bc429accf0649f48a94e232949a8d80d27be2a341fae385c04cc49b7fce76ef94777c3f0fd56a66b3e4407859f86cdd2511dd9f66c11bbf3f7b3762"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/camelcase-keys"
        }
      ]
    },
    {
      "type": "library",
      "name": "hard-rejection",
      "version": "2.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|hard-rejection@2.1.0",
      "author": "Sindre Sorhus",
      "description": "Make unhandled promise rejections fail hard right away instead of the default silent fail",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hard-rejection@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/hard-rejection.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/hard-rejection#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/hard-rejection/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hard-rejection/-/hard-rejection-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "548641fa26c3871ece6e101eece56da046ee3f887f32e3931c9f89f21fde057a2d2589747c1811ef6c431422a0221db638964839537104c5ae840af5d2bf0774"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hard-rejection"
        }
      ]
    },
    {
      "type": "library",
      "name": "minimist-options",
      "version": "4.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|minimist-options@4.1.0",
      "author": "Vadim Demedes",
      "description": "Pretty options for minimist",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minimist-options@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/vadimdemedes/minimist-options.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/vadimdemedes/minimist-options#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/vadimdemedes/minimist-options/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minimist-options/-/minimist-options-4.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "438afc82177cd3284eff48f53b7076063c1e5f77e21e0f5c74ec2325dd89efa435df973e343c460aa758290d52281b857e059b014cc17ef6233d411e360a8dd4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minimist-options"
        }
      ]
    },
    {
      "type": "library",
      "name": "redent",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|redent@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Strip redundant indentation and indent the string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/redent@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/redent.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/redent#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/redent/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/redent/-/redent-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ead0c0f20f7c59ed337741af55e313f5aac43a74f0f6a334dcbf5c2576828eb8a9d4e3bbeb844304b05fac1e1cc333460e3e4e0398a8ca60bd1a48b381624352"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/redent"
        }
      ]
    },
    {
      "type": "library",
      "name": "trim-newlines",
      "version": "3.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|trim-newlines@3.0.1",
      "author": "Sindre Sorhus",
      "description": "Trim newlines from the start and/or end of a string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/trim-newlines@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/trim-newlines.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/trim-newlines#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/trim-newlines/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-3.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7353d3b00ded62b22c2c69099331c5fb0f45d84cb17d71a8e14c89738a452fef853239ead07252ebd4f733b77ffe02ab14ac32e36f5ba2e3deb1c6e379c53e67"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/trim-newlines"
        }
      ]
    },
    {
      "type": "library",
      "name": "type-fest",
      "version": "0.18.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|type-fest@0.18.1",
      "author": "Sindre Sorhus",
      "description": "A collection of essential TypeScript types",
      "licenses": [
        {
          "expression": "(MIT OR CC0-1.0)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/type-fest@0.18.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/type-fest.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/type-fest#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/type-fest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/type-fest/-/type-fest-0.18.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3880185e4f3e21263ea933b0907b4aab302ec5c8683220fd51dc7e1521900ee89147e3c92891dcd8d2405e56e1906c13b7fe3f9ca67110b635c3745e58e2fc9b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/type-fest"
        }
      ]
    },
    {
      "type": "library",
      "name": "yargs-parser",
      "version": "20.2.9",
      "bom-ref": "pug@2.0.4-tuxcare.2|yargs-parser@20.2.9",
      "author": "Ben Coe",
      "description": "the mighty option parser used by yargs",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/yargs-parser@20.2.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/yargs/yargs-parser.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yargs/yargs-parser#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/yargs-parser/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-20.2.9.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cb5d67184953215f824f766ff6ded52a5f90de14d0a13f5ad50cdece1865e91a76d6027f2154d6ed9df2f4459786e5010b64a19dff835f46a7b5e72903048ff3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/yargs-parser"
        }
      ]
    },
    {
      "type": "library",
      "name": "text-extensions",
      "version": "1.9.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|text-extensions@1.9.0",
      "author": "Sindre Sorhus",
      "description": "List of text file extensions",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/text-extensions@1.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/text-extensions.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/text-extensions#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/text-extensions/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/text-extensions/-/text-extensions-1.9.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c2206bc02d448417a55b5d99cb6e8978e524439991bbee68f2ba6c264e7edadf98e6f13b7bce36aad6434368353695ffdbd1ddc85789e27488848e3b10d4b195"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/text-extensions"
        }
      ]
    },
    {
      "type": "library",
      "name": "number-is-nan",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|number-is-nan@1.0.1",
      "author": "Sindre Sorhus",
      "description": "ES2015 Number.isNaN() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/number-is-nan@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/number-is-nan.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/number-is-nan#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/number-is-nan/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e236ed657340b1f65b0078a2aa32cf0620a5d7a7444b5cc8e07a73cf1c3ad5393e96817eb010c12b1d4808a28ac08a90eccd26167d539a437b7ae4a771680789"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/number-is-nan"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._reinterpolate",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|lodash._reinterpolate@3.0.0",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `reInterpolate` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._reinterpolate@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._reinterpolate/-/lodash._reinterpolate-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c581edebc411a181a379e33f5ce135b89b6f5d0020beccdf0618d5e32bec407d2eda2f48e9c23a73afde1b81e1dd400e567d32ff1017c264f311acb8f50fff1c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._reinterpolate"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.templatesettings",
      "version": "4.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|lodash.templatesettings@4.2.0",
      "author": "John-David Dalton",
      "description": "The Lodash method `_.templateSettings` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.templatesettings@4.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.templatesettings/-/lodash.templatesettings-4.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b2d80bcfe8b701af666609e3aff3bebfdaee299b0fb27772eea3d939c85baa4d9c9d353565a95d28afafee6e785a8288cb18ae3194ca4f61fcd45f0178073765"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.templatesettings"
        }
      ]
    },
    {
      "type": "library",
      "name": "string_decoder",
      "version": "1.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|string_decoder@1.3.0",
      "description": "The string_decoder module from Node core",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/nodejs/string_decoder.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodejs/string_decoder",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodejs/string_decoder/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "864457f14d568c915df0bb03276c90ff0596c5aa2912c0015355df90cf00fa3d3ef392401a9a6dd7a72bd56860e8a21b6f8a2453a32a97a04e8febaea7fc0a78"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/string_decoder"
        }
      ]
    },
    {
      "type": "library",
      "name": "currently-unhandled",
      "version": "0.4.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|currently-unhandled@0.4.1",
      "author": "James Talmage",
      "description": "Track the list of currently unhandled promise rejections.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/currently-unhandled@0.4.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jamestalmage/currently-unhandled.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jamestalmage/currently-unhandled#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jamestalmage/currently-unhandled/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/currently-unhandled/-/currently-unhandled-0.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fdf2138e08c6539d2f8d0e051fa794a18bbe894a142885f0b3684bd79249a4847e05b4f169742c32ebb28ed361d96aac4814b99ec6991c5b0579ccb0e420809e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/currently-unhandled"
        }
      ]
    },
    {
      "type": "library",
      "name": "es6-promisify",
      "version": "5.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|es6-promisify@5.0.0",
      "author": "Mike Hall",
      "description": "Converts callback-based functions to ES6 Promises",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es6-promisify@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/digitaldesignlabs/es6-promisify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/digitaldesignlabs/es6-promisify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/digitaldesignlabs/es6-promisify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es6-promisify/-/es6-promisify-5.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0be77a51db180e4d2531e6c7351e12d8dc9b40c3278003a73b06014234ce8afd0c92824c3f4332c369a0a432c17297c29912f1c85a98852fc27ce10dab848985"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es6-promisify"
        }
      ]
    },
    {
      "type": "library",
      "name": "ip",
      "version": "1.1.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|ip@1.1.5",
      "author": "Fedor Indutny",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ip@1.1.5",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/node-ip.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/node-ip",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/node-ip/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ip/-/ip-1.1.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ac1b420100099bc035d749dbc27e9876f7949ee647dd6ac2dfa2309115f10e7ab9dc9bd703635542f07b207c8aa26c4ad4c278543370dd4b450dd5d0f80bcb60"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ip"
        }
      ]
    },
    {
      "type": "library",
      "name": "smart-buffer",
      "version": "4.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|smart-buffer@4.2.0",
      "author": "Josh Glazebrook",
      "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/smart-buffer@4.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/JoshGlazebrook/smart-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/JoshGlazebrook/smart-buffer/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/JoshGlazebrook/smart-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/smart-buffer/-/smart-buffer-4.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f7884ad0787cacfa90976c577371ec681a0e5ca576d0c4e83e4717bf06c84962c4b3eeb8b01ab9905827da42431dbd4faf2f72acfd1dc6b088f5145c8bb4572a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/smart-buffer"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-buffer",
      "version": "1.1.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-buffer@1.1.6",
      "author": "Feross Aboukhadijeh",
      "description": "Determine if an object is a Buffer",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-buffer@1.1.6",
      "externalReferences": [
        {
          "url": "git://github.com/feross/is-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/is-buffer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/is-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "35c7402f0a579139b966fbdb93ba303944af56f04a0e028fe7f7b07d71339e64057ece194666a739e2814e34558e46b7405a0de9727ef45dd44aa7c7a93694e7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-buffer"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-try",
      "version": "2.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|p-try@2.2.0",
      "author": "Sindre Sorhus",
      "description": "`Start a promise chain",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-try@2.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-try.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-try#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-try/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4789cf0154c053407d0f7e7f1a4dee25fffb5d86d0732a2148a76f03121148d821165e1eef5855a069c1350cfd716697c4ed88d742930bede331dbefa0ac3a75"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-try"
        }
      ]
    },
    {
      "type": "library",
      "name": "collection-visit",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|collection-visit@1.0.0",
      "author": "Jon Schlinkert",
      "description": "Visit a method over the items in an object, or map visit over the objects in an array.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/collection-visit@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/collection-visit.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/collection-visit",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/collection-visit/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/collection-visit/-/collection-visit-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "94d90abf311e3010635061d9faaeb3f6948995ad0a58040fbedce1115f7e886c90606fa906997bc4a0e1c683523991f6861bf4bf9934cb6c80338a384a3a1293"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/collection-visit"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-value",
      "version": "2.0.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|get-value@2.0.6",
      "author": "Jon Schlinkert",
      "description": "Use property paths (`a.b.c`) to get a nested value from an object.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-value@2.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/get-value.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/get-value",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/get-value/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-value/-/get-value-2.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2e7d144039711f505aa4cbb718fb5fec2b983704597f68300ae3ea6f21baa41f167e6169cea732e31b4068031486736a8cc2938823d91b6a0c4f7612c7c53634"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-value"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-value",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|has-value@1.0.0",
      "author": "Jon Schlinkert",
      "description": "Returns true if a value exists, false if empty. Works with deeply nested values using object paths.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-value@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/has-value.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/has-value",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/has-value/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-value/-/has-value-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2015e4e064ec2d8750ed1bedf86441ac54951249ae394cb8aded178ddf64252510a674eb591e3fcbd4697dec4df6f9003cc16e4287962b0ab33e8cd14e56ac1b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-value"
        }
      ]
    },
    {
      "type": "library",
      "name": "set-value",
      "version": "2.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|set-value@2.0.1",
      "author": "Jon Schlinkert",
      "description": "Create nested values and any intermediaries using dot notation (`'a.b.c'`) paths.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/set-value@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/set-value.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/set-value",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/set-value/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/set-value/-/set-value-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2711dcd7078237af30458d1f842a17a722b9e66fd73c769f3a62b85160fb9b6088d7818c705ca9b78c3fd3e355e5ffd931bcb617a4b6c3003b7e0ca787d8164b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/set-value"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "extend-shallow",
          "version": "2.0.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|set-value@2.0.1|extend-shallow@2.0.1",
          "author": "Jon Schlinkert",
          "description": "Extend an object with the properties of additional objects. node.js/javascript util.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/extend-shallow@2.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/extend-shallow.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/extend-shallow",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/extend-shallow/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/extend-shallow/-/extend-shallow-2.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "cc29d3b65c4da0088373782a636698016171ed759689ab2e1762bc31ee566cdf28b4729350a0708cfb4da51b3fadb5199bb2b158068d8fb3f56bfa79d866d5ba"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/set-value/node_modules/extend-shallow"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-extendable",
          "version": "0.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|set-value@2.0.1|is-extendable@0.1.1",
          "author": "Jon Schlinkert",
          "description": "Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-extendable@0.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/is-extendable.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extendable",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extendable/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "e413142cda1bd6f8055fa123430e62cd60f1ade7162bd00cef6aee80daf44c595d30e8b47e3e8993ecde288b74c468f87047d0209b61e30dce296389e1ff8017"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/set-value/node_modules/is-extendable"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "to-object-path",
      "version": "0.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|to-object-path@0.3.0",
      "author": "Jon Schlinkert",
      "description": "Create an object path from a list or array of strings.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/to-object-path@0.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/to-object-path.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/to-object-path",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/to-object-path/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/to-object-path/-/to-object-path-0.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f66587767191ba1de89e871a1f3ba4caf099873bebead89f940cbf2511577095f44e381f580f6993db7c08c6f398113825fc39f295db92782d06da98c73344ca"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/to-object-path"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "kind-of",
          "version": "3.2.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|to-object-path@0.3.0|kind-of@3.2.2",
          "author": "Jon Schlinkert",
          "description": "Get the native type of a value.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/kind-of@3.2.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/kind-of.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/kind-of",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/kind-of/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "34e5bd4105cca191a0fe8aa754da0d4d320510889dd7adbb5827df50124474cc58029abb98d13b0a9cee7083dcf99420db93e17a3ec8252997de13bea1b94eb5"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/to-object-path/node_modules/kind-of"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "union-value",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|union-value@1.0.1",
      "author": "Jon Schlinkert",
      "description": "Set an array of unique values as the property of an object. Supports setting deeply nested properties using using object-paths/dot notation.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/union-value@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/union-value.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/union-value",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/union-value/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/union-value/-/union-value-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b497d79b131e5989dccc256ced7004bc857b89ea6900b7727a958c90793072246966b686ff1c13facd8937cfa9af5fbc8c245ff34145cefafe32941e7a81785e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/union-value"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "is-extendable",
          "version": "0.1.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|union-value@1.0.1|is-extendable@0.1.1",
          "author": "Jon Schlinkert",
          "description": "Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-extendable@0.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/is-extendable.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extendable",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extendable/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "e413142cda1bd6f8055fa123430e62cd60f1ade7162bd00cef6aee80daf44c595d30e8b47e3e8993ecde288b74c468f87047d0209b61e30dce296389e1ff8017"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/union-value/node_modules/is-extendable"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "unset-value",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|unset-value@1.0.0",
      "author": "Jon Schlinkert",
      "description": "Delete nested properties from an object using dot notation.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/unset-value@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/unset-value.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/unset-value",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/unset-value/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/unset-value/-/unset-value-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3dc036b6cb86485f5c9f248b1d32d2876aab42227bd269feafe1a5cf1bf64d665b971b31082e76043959a0f0accfb49377da4dec465eb64599040be4e1c81975"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/unset-value"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "has-value",
          "version": "0.3.1",
          "bom-ref": "pug@2.0.4-tuxcare.2|unset-value@1.0.0|has-value@0.3.1",
          "author": "Jon Schlinkert",
          "description": "Returns true if a value exists, false if empty. Works with deeply nested values using object paths.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/has-value@0.3.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/has-value.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/has-value",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/has-value/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/has-value/-/has-value-0.3.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "8291bddfa8fcfcccda7880f96227fee7bedcd7b4f16839a1bb25604b0b672ffabc5144f24a0f0c79c6fef027f5a2d80ba03ec30c7ef96b1a7ce8447b2c5b1fdd"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/unset-value/node_modules/has-value"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "isobject",
              "version": "2.1.0",
              "bom-ref": "pug@2.0.4-tuxcare.2|unset-value@1.0.0|has-value@0.3.1|isobject@2.1.0",
              "author": "Jon Schlinkert",
              "description": "Returns true if the value is an object and not an array or null.",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/isobject@2.1.0",
              "externalReferences": [
                {
                  "url": "git+https://github.com/jonschlinkert/isobject.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/jonschlinkert/isobject",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/jonschlinkert/isobject/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz",
                  "type": "distribution",
                  "hashes": [
                    {
                      "alg": "SHA-512",
                      "content": "f8e51d1899608ce0590dfc670e36181bace9e3cef3d0918d42addc610620e5fe61291facc8732c6b3b7319e9a5ff89061b9e424a9292a564d8fa360682c1cb80"
                    }
                  ],
                  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/unset-value/node_modules/has-value/node_modules/isobject"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "has-values",
          "version": "0.1.4",
          "bom-ref": "pug@2.0.4-tuxcare.2|unset-value@1.0.0|has-values@0.1.4",
          "author": "Jon Schlinkert",
          "description": "Returns true if any values exist, false if empty. Works for booleans, functions, numbers, strings, nulls, objects and arrays. ",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/has-values@0.1.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/has-values.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/has-values",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/has-values/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/has-values/-/has-values-0.1.4.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "27c4b4704756b906ea0fdfffb6567188cb8c366c41f0f944c2f630bb1b13991d46e515d478f117fd2267eda0f418c2e27ae6584b0347d1c42e246c2762e9d745"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/unset-value/node_modules/has-values"
            }
          ]
        },
        {
          "type": "library",
          "name": "isarray",
          "version": "1.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|unset-value@1.0.0|isarray@1.0.0",
          "author": "Julian Gruber",
          "description": "Array#isArray for older browsers",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isarray@1.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/isarray.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/isarray",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/isarray/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "54b82121634ce842d0ce8ef3c26720d0d99357258a623bc878cf37ca3a74c110d39949eb33aefc7d06dc281a3a9f6089105d2cce81bfff2b60f932a56bcf402d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/unset-value/node_modules/isarray"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "arr-union",
      "version": "3.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|arr-union@3.1.0",
      "author": "Jon Schlinkert",
      "description": "Combines a list of arrays, returning a single array with unique values, using strict equality for comparisons.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/arr-union@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/arr-union.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/arr-union",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/arr-union/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/arr-union/-/arr-union-3.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b0aa72784459d36bf515e0994fc96b7c9ab9bba8281c2b694c0ccfc0961eedcf123c539ba0d8cd835bf3d8be154e7f53e0f431131d774db5cb99851c4ba520ed"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/arr-union"
        }
      ]
    },
    {
      "type": "library",
      "name": "static-extend",
      "version": "0.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|static-extend@0.1.2",
      "author": "Jon Schlinkert",
      "description": "Adds a static `extend` method to a class, to simplify inheritance. Extends the static properties, prototype properties, and descriptors from a `Parent` constructor onto `Child` constructors.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/static-extend@0.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/static-extend.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/static-extend",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/static-extend/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/static-extend/-/static-extend-0.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ef613dfae2dcdbb32def5f29307b7d54c36200be0b32c9836c1bdaf26c56502913d3b7d2cc418c6140a4d17598ea5a748fa441006e1c277996b99bf6384decd2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/static-extend"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "define-property",
          "version": "0.2.5",
          "bom-ref": "pug@2.0.4-tuxcare.2|static-extend@0.1.2|define-property@0.2.5",
          "author": "Jon Schlinkert",
          "description": "Define a non-enumerable property on an object.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/define-property@0.2.5",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/define-property.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/define-property",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/define-property/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "46bec00e34197a771e54e00aa29e802e49110261f50381b1f6157fed9ba33d4376ae4013a853b42592d92276c08e9658a09d60531f0c44c4159187a671b3124c"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/static-extend/node_modules/define-property"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-descriptor",
          "version": "0.1.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|static-extend@0.1.2|is-descriptor@0.1.7",
          "author": "Jon Schlinkert",
          "description": "Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-descriptor@0.1.7",
          "externalReferences": [
            {
              "url": "git+https://github.com/inspect-js/is-descriptor.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/inspect-js/is-descriptor",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/inspect-js/is-descriptor/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "0b782b653bce6de375c6e7787115a5dfae8e3176538f4f871b293886f7e9c78647b753dbeb400d497a822bba5d3937944294731020524e986abc3ed4fa5db612"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/static-extend/node_modules/is-descriptor"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "for-in",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|for-in@1.0.2",
      "author": "Jon Schlinkert",
      "description": "Iterate over the own and inherited enumerable properties of an object, and return an object with properties that evaluate to true from the callback. Exit early by returning `false`. JavaScript/Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/for-in@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/for-in.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/for-in",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/for-in/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ec4c265eb3a3c8bf82871321986e659d6f4c3edd5a21e644c0a850ce8054753574377ceec160d961525ab43bd9d8ecb33d4bdd200643b027ad937728c8c7dc9d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/for-in"
        }
      ]
    },
    {
      "type": "library",
      "name": "escalade",
      "version": "3.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|escalade@3.2.0",
      "author": "Luke Edwards",
      "description": "A tiny (183B to 210B) and fast utility to ascend parent directories",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/escalade@3.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lukeed/escalade.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lukeed/escalade#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lukeed/escalade/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5948f6aa5c5a42d3b883a3eae5cdbd193716183c9df22b4bf334e58a98040b3dc97ac02288e2a8b5df0953aa2d0773c00a01bac64254c9585ba0c4be6e37bf8c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/escalade"
        }
      ]
    },
    {
      "type": "library",
      "name": "deep-is",
      "version": "0.1.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|deep-is@0.1.4",
      "author": "Thorsten Lorenz",
      "description": "node's assert.deepEqual algorithm except for NaN being equal to NaN",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/deep-is@0.1.4",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/thlorenz/deep-is.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/thlorenz/deep-is#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/thlorenz/deep-is/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a083f392c993838fccae289a6063bea245c34fbced9ffc37129b6fffe81221d31d2ac268d2ee027d834524fcbee1228cb82a86c36c319c0f9444c837b7c6bf6d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/deep-is"
        }
      ]
    },
    {
      "type": "library",
      "name": "fast-levenshtein",
      "version": "2.0.6",
      "bom-ref": "pug@2.0.4-tuxcare.2|fast-levenshtein@2.0.6",
      "author": "Ramesh Nair",
      "description": "Efficient implementation of Levenshtein algorithm  with locale-specific collator support.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fast-levenshtein@2.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/hiddentao/fast-levenshtein.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hiddentao/fast-levenshtein#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hiddentao/fast-levenshtein/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "0c25eee887e1a9c92ced364a6371f1a77cbaaa9858e522599ab58c0eb29c11148e5d641d32153d220fcf62bcf2c3fba5f63388ca1d0de0cd2d6c2e61a1d83c77"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fast-levenshtein"
        }
      ]
    },
    {
      "type": "library",
      "name": "levn",
      "version": "0.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|levn@0.3.0",
      "author": "George Zahariev",
      "description": "Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/levn@0.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/gkz/levn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/gkz/levn",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/gkz/levn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/levn/-/levn-0.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d0e3b8cb688e1e2c765baba32026ca21a1105ef1501ee7bae6f506de96f9114a26ccf23dd33f61b00d55b0efdd6c82290b9dc9f20c4cf50e0e868d23ac233fc8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/levn"
        }
      ]
    },
    {
      "type": "library",
      "name": "prelude-ls",
      "version": "1.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|prelude-ls@1.1.2",
      "author": "George Zahariev",
      "description": "prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://raw.github.com/gkz/prelude-ls/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/prelude-ls@1.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/gkz/prelude-ls.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://preludels.com",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/gkz/prelude-ls/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "112176dd5e12286ea55521998183696ec89a02475a6fa6603b17b9da9efe2a27775b7bb76f147855f77fa36d5d98dee34add08c20678bf9314776e8512d5c4f7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/prelude-ls"
        }
      ]
    },
    {
      "type": "library",
      "name": "type-check",
      "version": "0.3.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|type-check@0.3.2",
      "author": "George Zahariev",
      "description": "type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/type-check@0.3.2",
      "externalReferences": [
        {
          "url": "git://github.com/gkz/type-check.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/gkz/type-check",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/gkz/type-check/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/type-check/-/type-check-0.3.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "64298e25dbce583058265cc0a05902f90d3e6d4c84392d65b60a75306534ddfa871be75b8bdb41154d9177d40a883645018ae13e1d8951feeb65122e1d12ad3a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/type-check"
        }
      ]
    },
    {
      "type": "library",
      "name": "word-wrap",
      "version": "1.2.5",
      "bom-ref": "pug@2.0.4-tuxcare.2|word-wrap@1.2.5",
      "author": "Jon Schlinkert",
      "description": "Wrap words to a specified length.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/word-wrap@1.2.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/word-wrap.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/word-wrap",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/word-wrap/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "04ddb607979a30c23d50cb63ac677983978260fa423c3532d052576d8b1a4f9cd8c6314e7244b9dd2403137a56915a16a475d56f706b61c10de13c1ae7907970"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/word-wrap"
        }
      ]
    },
    {
      "type": "library",
      "name": "possible-typed-array-names",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|possible-typed-array-names@1.1.0",
      "author": "Jordan Harband",
      "description": "A simple list of possible Typed Array names.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/possible-typed-array-names@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/possible-typed-array-names.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/possible-typed-array-names#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/possible-typed-array-names/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/possible-typed-array-names/-/possible-typed-array-names-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ffee55153721243a158f76e1a2a8ba51eca6703d340c0c1bd672706a6ccfbc712ccc9e05a45e9234d6d46ce4bcc88e7aa87cdd57c78ad2a11f3928a87644ddc6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/possible-typed-array-names"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-date-object",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-date-object@1.1.0",
      "author": "Jordan Harband",
      "description": "Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-date-object@1.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-date-object.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-date-object#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-date-object/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3f0c2111a90754a4dd44d54ec3efc6ca1d3e33394297847aa8abe486ebcbb4f320808d56007b7db0ec19c502d21a951a0e7addc83b289a846036709f28d4975e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-date-object"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-symbol",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-symbol@1.1.1",
      "author": "Jordan Harband",
      "description": "Determine if a value is an ES6 Symbol or not.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-symbol@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-symbol.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-symbol#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-symbol/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f601b1e864ed09033bdc18261d05df0e62ed7e38d35034b2a314c26e9e56b688b10217e0b038ab58871543f207a6f2395607798bf27917b07d70dfd69556c2ff"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-symbol"
        }
      ]
    },
    {
      "type": "library",
      "name": "functions-have-names",
      "version": "1.2.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|functions-have-names@1.2.3",
      "author": "Jordan Harband",
      "description": "Does this JS environment support the `name` property on functions?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/functions-have-names@1.2.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/functions-have-names.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/functions-have-names#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/functions-have-names/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/functions-have-names/-/functions-have-names-1.2.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c5c901517c9322a4fdeedab6c7600c6fe835eb76f9245cac624d31e2ac4d1706df42498d6688911dbeac3f323dfd0577dd67aebd5601508883e0dccd232a9a45"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/functions-have-names"
        }
      ]
    },
    {
      "type": "library",
      "name": "side-channel",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|side-channel@1.1.0",
      "author": "Jordan Harband",
      "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/side-channel@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/side-channel.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/side-channel#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/side-channel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/side-channel/-/side-channel-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "657f7d7bab51c1ea145ea47e541aec96175ae75361e4c4d0c28bb9b6750381bb723347418268440ed5863ffc5b2a7ea1a9f3d11ee8d4370cf97f2ff06db867a7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/side-channel"
        }
      ]
    },
    {
      "type": "library",
      "name": "set-function-name",
      "version": "2.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|set-function-name@2.0.2",
      "author": "Jordan Harband",
      "description": "Set a function's name property",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/set-function-name@2.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/set-function-name.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/set-function-name#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/set-function-name/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/set-function-name/-/set-function-name-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ecf185966b70b040036f4598caf08c6b5b7eca47ba75a206e168ab69fbabe6471ff8c8549cf9acd54791d02290753643f35c844b03076ed9fe4d1f9d32f89a91"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/set-function-name"
        }
      ]
    },
    {
      "type": "library",
      "name": "reflect.getprototypeof",
      "version": "1.0.10",
      "bom-ref": "pug@2.0.4-tuxcare.2|reflect.getprototypeof@1.0.10",
      "author": "Jordan Harband",
      "description": "An ES2015 mostly-spec-compliant `Reflect.getPrototypeOf` sham/polyfill/replacement that works in as many engines as possible",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/reflect.getprototypeof@1.0.10",
      "externalReferences": [
        {
          "url": "git+https://github.com/es-shims/Reflect.getPrototypeOf.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/Reflect.getPrototypeOf",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/Reflect.getPrototypeOf/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/reflect.getprototypeof/-/reflect.getprototypeof-1.0.10.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d34a3823e0d5ade7e1bfe9d7d2e9728b76e248708f0defb22efe68fe9e9dfd45658ab8a307c135e85b5fc12022e20ded72aad0e25440a904a81446497a160473"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/reflect.getprototypeof"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-bigints",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|has-bigints@1.1.0",
      "author": "Jordan Harband",
      "description": "Determine if the JS environment has BigInt support.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-bigints@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/has-bigints.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/has-bigints#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/has-bigints/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-bigints/-/has-bigints-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "477a5ba64708aafd8f9b7754c208dc943455996a53256d8370ccdc221117131d6887f08430e6cc9b728b99124e76f84cee8e2e4019f0afca7344adac25622a7e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-bigints"
        }
      ]
    },
    {
      "type": "library",
      "name": "which-boxed-primitive",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|which-boxed-primitive@1.1.1",
      "author": "Jordan Harband",
      "description": "Which kind of boxed JS primitive is this?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/which-boxed-primitive@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/which-boxed-primitive.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/which-boxed-primitive#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/which-boxed-primitive/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/which-boxed-primitive/-/which-boxed-primitive-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4db5f79a3f27d2874204556563c03192a707012c372fad2322e17c8c53fbf1acf70b6621986bea6c70690234d11f6ff1a98ba7ac9f60d634b28c28e9a16cc800"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/which-boxed-primitive"
        }
      ]
    },
    {
      "type": "library",
      "name": "caller-callsite",
      "version": "2.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|caller-callsite@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Get the callsite of the caller function",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/caller-callsite@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/caller-callsite.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/caller-callsite#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/caller-callsite/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/caller-callsite/-/caller-callsite-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "26e1b7a88e1039fb45b19c8e9f5aaaf3b7eae60acb23293525877994999d03e7c6eda43da40fe2dc920919c3b7ab432b45c1e53add54f997875bc0eaf5ac402d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/caller-callsite"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "callsites",
          "version": "2.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|caller-callsite@2.0.0|callsites@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Get callsites from the V8 stack trace API",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/callsites@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/callsites.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/callsites#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/callsites/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/callsites/-/callsites-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "92c59e3d6065a1a58fc49610f132f4247bed722e86e504cac10f7945c5806bf973a002ae00e7e519d00af768691d78e4c1bf332f1a0b354a0d619815b1a273bd"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/caller-callsite/node_modules/callsites"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "is-arrayish",
      "version": "0.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-arrayish@0.2.1",
      "author": "Qix",
      "description": "Determines if an object can be used as an array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-arrayish@0.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/qix-/node-is-arrayish.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/qix-/node-is-arrayish#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/qix-/node-is-arrayish/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "cf3d3a4bcb74a33a035cc1beb9b7b6eb37824cd5dc2883c96498bc841ac5e227422e6b38086f50b4aeea065d5ba22e4e0f31698ecc1be493e61c26cca63698ce"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-arrayish"
        }
      ]
    },
    {
      "type": "library",
      "name": "mimic-fn",
      "version": "1.2.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|mimic-fn@1.2.0",
      "author": "Sindre Sorhus",
      "description": "Make a function mimic another one",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mimic-fn@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/mimic-fn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/mimic-fn#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/mimic-fn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8dff38bb1cf08ae88854a88e2e97d893b378e934b2f2e6d3a279a7798f6fae91cd027a74401b76071595f5d3b7fe3f81a1501bf9ae46e980cf5b73391ce74c59"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mimic-fn"
        }
      ]
    },
    {
      "type": "library",
      "name": "map-obj",
      "version": "4.3.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|map-obj@4.3.0",
      "author": "Sindre Sorhus",
      "description": "Map object keys and values into a new object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/map-obj@4.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/map-obj.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/map-obj#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/map-obj/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/map-obj/-/map-obj-4.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "85d375c15ad96dbdbd7811a21a325b78ff096ca8ead6eae41c9fcb20ffcd638f0c6754155d4b10055d46d73bd81479f55c4d3a7308c1b0e2362b75259e3d585d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/map-obj"
        }
      ]
    },
    {
      "type": "library",
      "name": "quick-lru",
      "version": "4.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|quick-lru@4.0.1",
      "author": "Sindre Sorhus",
      "description": "Simple \"Least Recently Used\" (LRU) cache",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/quick-lru@4.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/quick-lru.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/quick-lru#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/quick-lru/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/quick-lru/-/quick-lru-4.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "011842a66ef47f375cbcd41f3e8cb8f4869a9ca913951585d89333aa17096e1485459bfb9cf4ef64975c63bdf4d483e6bd6fbfa744602169d00cb27189fb10ee"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/quick-lru"
        }
      ]
    },
    {
      "type": "library",
      "name": "indent-string",
      "version": "4.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|indent-string@4.0.0",
      "author": "Sindre Sorhus",
      "description": "Indent each line in a string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/indent-string@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/indent-string.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/indent-string#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/indent-string/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/indent-string/-/indent-string-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "11d0c366ee00d8ec882bb2ebff6cc6fb0e6399bba4d435419c4c11110bc1ceca412640846d16bc1b153596085871a1890a745689b8c35e5abbefd5f5ff2e71c2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/indent-string"
        }
      ]
    },
    {
      "type": "library",
      "name": "strip-indent",
      "version": "3.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|strip-indent@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Strip leading whitespace from each line in a string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/strip-indent@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/strip-indent.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-indent#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-indent/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/strip-indent/-/strip-indent-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "95a2536b725bf95429682e83b1e1e117b75756a1d37c93c24436846e277f76b3a1822b60624bbf95eb4c52a397168595d3320851b8e9747dadfad623e1b40c45"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/strip-indent"
        }
      ]
    },
    {
      "type": "library",
      "name": "array-find-index",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|array-find-index@1.0.2",
      "author": "Sindre Sorhus",
      "description": "ES2015 `Array#findIndex()` ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/array-find-index@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/array-find-index.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/array-find-index#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/array-find-index/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/array-find-index/-/array-find-index-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3351d0c885dc046b55cb006df1655d8a6fa5acd68aed51e9f7d42de6948dce25f39ca1d588805b5d6b5f453a4416917f73815d7f1340b020b03e9e69841609b7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/array-find-index"
        }
      ]
    },
    {
      "type": "library",
      "name": "es6-promise",
      "version": "4.2.8",
      "bom-ref": "pug@2.0.4-tuxcare.2|es6-promise@4.2.8",
      "author": "Yehuda Katz, Tom Dale, Stefan Penner and contributors",
      "description": "A lightweight library that provides tools for organizing asynchronous code",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es6-promise@4.2.8",
      "externalReferences": [
        {
          "url": "git://github.com/stefanpenner/es6-promise.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stefanpenner/es6-promise",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stefanpenner/es6-promise/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es6-promise/-/es6-promise-4.2.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1c90c6c7975ac5e22fc5d071bc6d9c6fd838b44bf0224de2f3e9e15f4c86ad89995336e4760f106c37af85e0c1f20774fffb8f8f8735110b9af10f8c5624f4ff"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es6-promise"
        }
      ]
    },
    {
      "type": "library",
      "name": "map-visit",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|map-visit@1.0.0",
      "author": "Jon Schlinkert",
      "description": "Map `visit` over an array of objects.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/map-visit@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/map-visit.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/map-visit",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/map-visit/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/map-visit/-/map-visit-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e32eee1aff1b77659d33dbe942c890368e352e7d4dbe1bc346e56dd24d89650f9eccddae6907acee565e67e41050738b400b4368127eef009b8be69bfca16cfb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/map-visit"
        }
      ]
    },
    {
      "type": "library",
      "name": "object-visit",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|object-visit@1.0.1",
      "author": "Jon Schlinkert",
      "description": "Call a specified method on each value in the given object.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/object-visit@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/object-visit.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/object-visit",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/object-visit/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/object-visit/-/object-visit-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "18168cc300152bda9b40ddd271da343b2be03d6ee5de59da54c8fce2e4ce665b30917d0aa45e9fc8304986d4ed85fee9ca6ceda0ddfafca12bd43ca117deb310"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/object-visit"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-values",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|has-values@1.0.0",
      "author": "Jon Schlinkert",
      "description": "Returns true if any values exist, false if empty. Works for booleans, functions, numbers, strings, nulls, objects and arrays. ",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-values@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/has-values.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/has-values",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/has-values/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-values/-/has-values-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3836190bae2eab39ad7c6304017fc5bd9891c962e9002def62736e9d44549e41954d2fa6234b2656c59a3f275106c13783ea24ee1f7ad230a13bc98571694769"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-values"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "kind-of",
          "version": "4.0.0",
          "bom-ref": "pug@2.0.4-tuxcare.2|has-values@1.0.0|kind-of@4.0.0",
          "author": "Jon Schlinkert",
          "description": "Get the native type of a value.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/kind-of@4.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/kind-of.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/kind-of",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/kind-of/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/kind-of/-/kind-of-4.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "db85ec0b19846d1c040dbcffab3decb608a7f134f3675112479e8e302374ba3620faf46eb4d4a23a3f5b1c7f6ef390ca81782eadaba0579b05baf6c3e055bf87"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/has-values/node_modules/kind-of"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "object-copy",
      "version": "0.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|object-copy@0.1.0",
      "author": "Jon Schlinkert",
      "description": "Copy static properties, prototype properties, and descriptors from one object to another.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/object-copy@0.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/object-copy.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/object-copy",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/object-copy/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/object-copy/-/object-copy-0.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "efd2d89fa5406fadf382d980b5e54e5a8f55763ef5655072dcf6ec7be56ac43a443fcdd7bae8ccac6a8723001727923f68cd3353b748c8802189f5533eb348b5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/object-copy"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "define-property",
          "version": "0.2.5",
          "bom-ref": "pug@2.0.4-tuxcare.2|object-copy@0.1.0|define-property@0.2.5",
          "author": "Jon Schlinkert",
          "description": "Define a non-enumerable property on an object.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/define-property@0.2.5",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/define-property.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/define-property",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/define-property/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/define-property/-/define-property-0.2.5.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "46bec00e34197a771e54e00aa29e802e49110261f50381b1f6157fed9ba33d4376ae4013a853b42592d92276c08e9658a09d60531f0c44c4159187a671b3124c"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/object-copy/node_modules/define-property"
            }
          ]
        },
        {
          "type": "library",
          "name": "kind-of",
          "version": "3.2.2",
          "bom-ref": "pug@2.0.4-tuxcare.2|object-copy@0.1.0|kind-of@3.2.2",
          "author": "Jon Schlinkert",
          "description": "Get the native type of a value.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/kind-of@3.2.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/kind-of.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/kind-of",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/kind-of/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "34e5bd4105cca191a0fe8aa754da0d4d320510889dd7adbb5827df50124474cc58029abb98d13b0a9cee7083dcf99420db93e17a3ec8252997de13bea1b94eb5"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/object-copy/node_modules/kind-of"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-descriptor",
          "version": "0.1.7",
          "bom-ref": "pug@2.0.4-tuxcare.2|object-copy@0.1.0|is-descriptor@0.1.7",
          "author": "Jon Schlinkert",
          "description": "Returns true if a value has the characteristics of a valid JavaScript descriptor. Works for data descriptors and accessor descriptors.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-descriptor@0.1.7",
          "externalReferences": [
            {
              "url": "git+https://github.com/inspect-js/is-descriptor.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/inspect-js/is-descriptor",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/inspect-js/is-descriptor/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-descriptor/-/is-descriptor-0.1.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "0b782b653bce6de375c6e7787115a5dfae8e3176538f4f871b293886f7e9c78647b753dbeb400d497a822bba5d3937944294731020524e986abc3ed4fa5db612"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/object-copy/node_modules/is-descriptor"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "side-channel-list",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|side-channel-list@1.0.0",
      "author": "Jordan Harband",
      "description": "Store information about any JS value in a side channel, using a linked list",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/side-channel-list@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/side-channel-list.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/side-channel-list#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/side-channel-list/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/side-channel-list/-/side-channel-list-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "1422c7b510ff827a428821c48892cec1d9853fec330a60c491cf72ecdb18c5e178bbb06db27d59bb0830246c4898898789c240acb3f8474c97e1cd8a0ab32b4c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/side-channel-list"
        }
      ]
    },
    {
      "type": "library",
      "name": "side-channel-map",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|side-channel-map@1.0.1",
      "author": "Jordan Harband",
      "description": "Store information about any JS value in a side channel, using a Map",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/side-channel-map@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/side-channel-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/side-channel-map#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/side-channel-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/side-channel-map/-/side-channel-map-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5428c235f80cb1bcb7b53768d369db8ed33f7b0adaea33c79a94e17a7913621f291bdb9c67fd4ff12a38bb814605e93f063a4e56c0c23282c0fe2b8128815744"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/side-channel-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "side-channel-weakmap",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|side-channel-weakmap@1.0.2",
      "author": "Jordan Harband",
      "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/side-channel-weakmap@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/side-channel-weakmap.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/side-channel-weakmap#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/side-channel-weakmap/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/side-channel-weakmap/-/side-channel-weakmap-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "58f4bf1ef1d04d89c78ac2e8f4c72a0473899361641cefed969be5772ae77a6e1a790a7885a8b7832b61b3083aa74d684a84e5e7cadca621408c5d9baf6024d8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/side-channel-weakmap"
        }
      ]
    },
    {
      "type": "library",
      "name": "which-builtin-type",
      "version": "1.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|which-builtin-type@1.2.1",
      "author": "Jordan Harband",
      "description": "What is the type of this builtin JS value?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/which-builtin-type@1.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/which-builtin-type.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/which-builtin-type#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/which-builtin-type/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/which-builtin-type/-/which-builtin-type-1.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ea205cce85fe90343b6b7f982419e1dd3f8a651c4cfe260d3d789caa4ebafd07e6d5bf778aefb23889a4834cc76e3e4b34e70dbf54c4003899d316b7e01e2ae9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/which-builtin-type"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-bigint",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-bigint@1.1.0",
      "author": "Jordan Harband",
      "description": "Is this value an ES BigInt?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-bigint@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-bigint.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-bigint#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-bigint/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-bigint/-/is-bigint-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9f8653dfbc06efc8b3d37c4f44a26b1d37596dedc889ccae704b5d46c579ca09707371b251f6c07e949e0f4149e3535b50d4ade706e1a9fa757d2f81827bc315"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-bigint"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-boolean-object",
      "version": "1.2.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-boolean-object@1.2.2",
      "author": "Jordan Harband",
      "description": "Is this value a JS Boolean? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-boolean-object@1.2.2",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-boolean-object.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-boolean-object#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-boolean-object/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-boolean-object/-/is-boolean-object-1.2.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c1ae7aa36fc4949318aa30a31a45eb8bb8ade456de6d6e6eb0bc3f9cf98232ce43799edece24986614a63d19f4b71a9e5b82e702641053b160a8ba6c10528ce0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-boolean-object"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-number-object",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-number-object@1.1.1",
      "author": "Jordan Harband",
      "description": "Is this value a JS Number object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-number-object@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-number-object.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-number-object#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-number-object/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-number-object/-/is-number-object-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "95985c96e984d46e95603f151dedf9c0568889ff824f2e522488b9fb7cb8a6c0e05aee303c3a01845f0dc543a29c473ba478224ec4fa31a05bf76aca8610fe5f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-number-object"
        }
      ]
    },
    {
      "type": "library",
      "name": "normalize-package-data",
      "group": "@types",
      "version": "2.4.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|@types/normalize-package-data@2.4.4",
      "description": "TypeScript definitions for normalize-package-data",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/%40types/normalize-package-data@2.4.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/normalize-package-data",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\" and \"repository.directory\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/normalize-package-data",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/@types/normalize-package-data/-/normalize-package-data-2.4.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "dfb8be39a59387da9e2b82d21cfb32442ecd6a19c6a2d36e66f8cb4a070fcdb9691c1debac227100e808e6009d2a6edca289ec697d4e7f420b8937276636dfc4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/@types/normalize-package-data"
        }
      ]
    },
    {
      "type": "library",
      "name": "min-indent",
      "version": "1.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|min-indent@1.0.1",
      "author": "James Kyle",
      "description": "Get the shortest leading whitespace from lines in a string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/min-indent@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/thejameskyle/min-indent.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/thejameskyle/min-indent#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/thejameskyle/min-indent/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/min-indent/-/min-indent-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "23d8f0327d3b4b2fc8c0e8f7cd59158a4d894ef8296b29036448a02fa471e8df4b6cccb0c1448cb71113fbb955a032cb7773b7217c09c2fbae9ecf1407f1de02"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/min-indent"
        }
      ]
    },
    {
      "type": "library",
      "name": "pinkie-promise",
      "version": "2.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|pinkie-promise@2.0.1",
      "author": "Vsevolod Strukchinsky",
      "description": "ES2015 Promise ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pinkie-promise@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/floatdrop/pinkie-promise.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/floatdrop/pinkie-promise#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/floatdrop/pinkie-promise/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d069e2e83e1470b4dbbfd739ec37f10c676be355df8148ea599bb8f767f47081abd7acc3534e8158ffd1004bceba8ec243408d8c768b94ce7d6092459b735697"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pinkie-promise"
        }
      ]
    },
    {
      "type": "library",
      "name": "repeating",
      "version": "2.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|repeating@2.0.1",
      "author": "Sindre Sorhus",
      "description": "Repeat a string - fast",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/repeating@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/repeating.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/repeating#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/repeating/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/repeating/-/repeating-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "66ab5232e5726e4212a36396beabe6ee21d25a782f75a5b7229b13f7fb8ff2fe20322e7dd4b63a877e7074e7ef41d5822855995a6d98d4ea69e2457bbd0293e8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/repeating"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-stdin",
      "version": "4.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|get-stdin@4.0.1",
      "author": "Sindre Sorhus",
      "description": "Easier stdin",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-stdin@4.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/get-stdin.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/get-stdin#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/get-stdin/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-stdin/-/get-stdin-4.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "179690332c302769fce6ce2124f4d3f513f11a6b9ba27b81d7430d628d7bff1a61d7be27d8c211df71d182e87355a835d0efe7a4ced23e4ef72cc64d3fe15a5b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-stdin"
        }
      ]
    },
    {
      "type": "library",
      "name": "copy-descriptor",
      "version": "0.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|copy-descriptor@0.1.1",
      "author": "Jon Schlinkert",
      "description": "Copy a descriptor from object A to object B",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/copy-descriptor@0.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/copy-descriptor.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/copy-descriptor",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/copy-descriptor/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/copy-descriptor/-/copy-descriptor-0.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5e0674a4571a9045256f040454d837f90022b351724cbdd07a5f45632f294a442aa06dcf3684f46ce090b4e5dc3a4babdb5af612ada423e204fa0b2600456563"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/copy-descriptor"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-async-function",
      "version": "2.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-async-function@2.1.1",
      "author": "Jordan Harband",
      "description": "Determine if a function is a native async function.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-async-function@2.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-async-function.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-async-function#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-async-function/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-async-function/-/is-async-function-2.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "f5d80cfdc6419cdbe3cda3181d5a31c5f3e3d905eddb612fed2bae3ebb3ec5abf4ba4181d12e9de3275974488ce3c90bc7990357e4013eba559c5c9e7cbf2491"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-async-function"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-finalizationregistry",
      "version": "1.1.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-finalizationregistry@1.1.1",
      "author": "Jordan Harband",
      "description": "Is this value a JS FinalizationRegistry? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-finalizationregistry@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-finalizationregistry.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-finalizationregistry#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-finalizationregistry/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-finalizationregistry/-/is-finalizationregistry-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d690ba37ca9625b5a83ed12381c2f6c7285038fe3dd44423794a37a9329c995f184830c9ace7a97c6f29702ee1fd0827407612bf4989dd9fd95b199ab55af2b2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-finalizationregistry"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-generator-function",
      "version": "1.1.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-generator-function@1.1.2",
      "author": "Jordan Harband",
      "description": "Determine if a function is a native generator function.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-generator-function@1.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-generator-function.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-generator-function#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-generator-function/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-generator-function/-/is-generator-function-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ba9aadd5290690e0d6f6db06346e66b574d7b440a2cf0b52da4035eb533e8093dcd7175bfc0c7adbd69fe98ad3c1c39e4076dec2b3cd944e43c7b933bd74e2cc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-generator-function"
        }
      ]
    },
    {
      "type": "library",
      "name": "which-collection",
      "version": "1.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|which-collection@1.0.2",
      "author": "Jordan Harband",
      "description": "Which kind of Collection (Map, Set, WeakMap, WeakSet) is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/which-collection@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/which-collection.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/which-collection#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/which-collection/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/which-collection/-/which-collection-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2b88d5ca39c1760bdcf3a63a06468b64437ddf74b060eb8116476606ef597e47006dd55ba484e70e68ef67f6908d15d0aefe443e44e70f5b37f468a2a9b9e00b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/which-collection"
        }
      ]
    },
    {
      "type": "library",
      "name": "lines-and-columns",
      "version": "1.2.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|lines-and-columns@1.2.4",
      "author": "Brian Donovan",
      "description": "Maps lines and columns to character offsets and back.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lines-and-columns@1.2.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/eventualbuddha/lines-and-columns.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/eventualbuddha/lines-and-columns#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/eventualbuddha/lines-and-columns/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lines-and-columns/-/lines-and-columns-1.2.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ef297295eb1943f3d5dbd8e110397751f8e8e995fb802a89af917b3caaea73ddefedfcd2ca6b75069c0453c9c0517b3cab3cefaa16e384ae50660e8cb7f1e406"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lines-and-columns"
        }
      ]
    },
    {
      "type": "library",
      "name": "pinkie",
      "version": "2.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|pinkie@2.0.4",
      "author": "Vsevolod Strukchinsky",
      "description": "Itty bitty little widdle twinkie pinkie ES2015 Promise implementation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pinkie@2.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/floatdrop/pinkie.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/floatdrop/pinkie#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/floatdrop/pinkie/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "32752e1327007a6b5269e1528d7296fdaae857b6a405b63e4aff91932a858e001eef717e311d130562814439267d6abf1e216675abdf6751bb87848f6576824a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pinkie"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-finite",
      "version": "1.1.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-finite@1.1.0",
      "author": "Sindre Sorhus",
      "description": "ES2015 Number.isFinite() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-finite@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-finite.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-finite#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-finite/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-finite/-/is-finite-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "71dc8cb6a5ff04eaaa3410622a5215932b4d1e6e3d32d3256329f5cf1cef24a5a614c946ce6fabcb90417d8c9e63d62634a6d14a8fe8ece5fdc3d6a57b4c20df"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-finite"
        }
      ]
    },
    {
      "type": "library",
      "name": "async-function",
      "version": "1.0.0",
      "bom-ref": "pug@2.0.4-tuxcare.2|async-function@1.0.0",
      "author": "Jordan Harbamd",
      "description": "A function that returns the normally hidden `AsyncFunction` constructor",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/async-function@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/async-function.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/async-function#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/async-function/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/async-function/-/async-function-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "86c535f007bc0834d1e8a82ef4361fd046c2aff6b98862f4af2b500e86d471da5838aa2493c2c48d5a619d7903920a62d30615b2aad7b8fd1b67125a4ea760a0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/async-function"
        }
      ]
    },
    {
      "type": "library",
      "name": "generator-function",
      "version": "2.0.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|generator-function@2.0.1",
      "author": "Jordan Harbamd",
      "description": "A function that returns the normally hidden `GeneratorFunction` constructor",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/generator-function@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/TimothyGu/generator-function.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/TimothyGu/generator-function#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/TimothyGu/generator-function/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/generator-function/-/generator-function-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "485745988262fb26c2d2f8e51cdd191951877379601340f13c04f47638d583e9233a74aa725aa68f4290ef291338b3fa631a2a3afb8038319d707267fb8deade"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/generator-function"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-map",
      "version": "2.0.3",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-map@2.0.3",
      "author": "Jordan Harband",
      "description": "Is this value a JS Map? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-map@2.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-map#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-map/-/is-map-2.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d5079dd3f1ebda6f98ab19ccd3d0a303677f8ba61935f17a476a1100e8f7e9e51d4baa8857f86e3c935212929bba97b016cf99b09971b238cf6dcd3f69f5ba2f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-weakmap",
      "version": "2.0.2",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-weakmap@2.0.2",
      "author": "Jordan Harband",
      "description": "Is this value a JS WeakMap? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-weakmap@2.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-weakmap.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-weakmap#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-weakmap/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-weakmap/-/is-weakmap-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2b9a5760e9bdc2a6354608e92f7613905dfdb678b55da8d42246b04cb528f446445541606b981240917c9cd4bb670250d36cbed5808d61c321f8721fd59a84fb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-weakmap"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-weakset",
      "version": "2.0.4",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-weakset@2.0.4",
      "author": "Jordan Harband",
      "description": "Is this value a JS WeakSet? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-weakset@2.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-weakset.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-weakset#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-weakset/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-weakset/-/is-weakset-2.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "99f7306fa23343238a4ecf3809032b3b05b881071a4ce016274cf32429765923c3ad693f3b30da2265851f77635e16f6e20e1eb9d65f2d1a3302f3c6c3877d85"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-weakset"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-utf8",
      "version": "0.2.1",
      "bom-ref": "pug@2.0.4-tuxcare.2|is-utf8@0.2.1",
      "author": "wayfind",
      "description": "Detect if a buffer is utf8 encoded.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-utf8@0.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/wayfind/is-utf8.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/wayfind/is-utf8#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/wayfind/is-utf8/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "acc60f62f0b3b17cb022c95d80b692a0f970e4f7e807fb2cafb858e292df72876b03933f780af36b56bd5664e234804d323386af53b0f664f2536a3af54e94f5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-utf8"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pug@2.0.4-tuxcare.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|coveralls@3.0.2",
        "pug@2.0.4-tuxcare.2|jest@24.0.0",
        "pug@2.0.4-tuxcare.2|jstransformer-cdata@1.0.0",
        "pug@2.0.4-tuxcare.2|jstransformer-coffee-script@1.1.1",
        "pug@2.0.4-tuxcare.2|jstransformer-less@2.3.0",
        "pug@2.0.4-tuxcare.2|jstransformer-markdown-it@1.0.0",
        "pug@2.0.4-tuxcare.2|jstransformer-stylus@1.5.0",
        "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0",
        "pug@2.0.4-tuxcare.2|jstransformer-verbatim@1.1.1",
        "pug@2.0.4-tuxcare.2|lerna@3.10.8",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|prettier@1.19.1",
        "pug@2.0.4-tuxcare.2|pug-code-gen@2.0.2",
        "pug@2.0.4-tuxcare.2|pug-filters@3.1.1",
        "pug@2.0.4-tuxcare.2|pug-lexer@4.1.0",
        "pug@2.0.4-tuxcare.2|pug-linker@3.0.6",
        "pug@2.0.4-tuxcare.2|pug-load@2.0.12",
        "pug@2.0.4-tuxcare.2|pug-parser@5.0.1",
        "pug@2.0.4-tuxcare.2|pug-runtime@2.0.5",
        "pug@2.0.4-tuxcare.2|pug-strip-comments@1.0.4",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
        "pug@2.0.4-tuxcare.2|uglify-js@2.7.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|coveralls@3.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|growl@1.10.5",
        "pug@2.0.4-tuxcare.2|js-yaml@3.14.1",
        "pug@2.0.4-tuxcare.2|lcov-parse@0.0.10",
        "pug@2.0.4-tuxcare.2|log-driver@1.2.7",
        "pug@2.0.4-tuxcare.2|minimist@1.2.8",
        "pug@2.0.4-tuxcare.2|request@2.88.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest@24.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|import-local@2.0.0",
        "pug@2.0.4-tuxcare.2|jest-cli@24.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jstransformer-cdata@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jstransformer-coffee-script@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|coffee-script@1.12.7",
        "pug@2.0.4-tuxcare.2|merge@1.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jstransformer-less@2.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|less-plugin-inline-urls@1.2.0",
        "pug@2.0.4-tuxcare.2|less-plugin-npm-import@2.1.0",
        "pug@2.0.4-tuxcare.2|less@2.7.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jstransformer-markdown-it@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|markdown-it@7.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jstransformer-stylus@1.5.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|clone@2.1.2",
        "pug@2.0.4-tuxcare.2|stylus@0.54.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|uglify-js@2.8.29"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|uglify-js@2.8.29",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|source-map@0.5.7",
        "pug@2.0.4-tuxcare.2|uglify-to-browserify@1.0.2",
        "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|yargs@3.10.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|source-map@0.5.7"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|yargs@3.10.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|camelcase@1.2.1",
        "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|cliui@2.1.0",
        "pug@2.0.4-tuxcare.2|decamelize@1.2.0",
        "pug@2.0.4-tuxcare.2|window-size@0.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|camelcase@1.2.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|cliui@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|center-align@0.1.3",
        "pug@2.0.4-tuxcare.2|right-align@0.1.3",
        "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|wordwrap@0.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jstransformer-uglify-js@1.2.0|wordwrap@0.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jstransformer-verbatim@1.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lerna@3.10.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/add@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/bootstrap@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/changed@3.10.8",
        "pug@2.0.4-tuxcare.2|@lerna/clean@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7",
        "pug@2.0.4-tuxcare.2|@lerna/create@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/diff@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/exec@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/import@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/init@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/link@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/list@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/publish@3.10.8",
        "pug@2.0.4-tuxcare.2|@lerna/run@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/version@3.10.8",
        "pug@2.0.4-tuxcare.2|lerna@3.10.8|import-local@1.0.0",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lerna@3.10.8|import-local@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|lerna@3.10.8|pkg-dir@2.0.0",
        "pug@2.0.4-tuxcare.2|resolve-cwd@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lerna@3.10.8|pkg-dir@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|lerna@3.10.8|find-up@2.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lerna@3.10.8|find-up@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|lerna@3.10.8|locate-path@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lerna@3.10.8|locate-path@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|lerna@3.10.8|p-locate@2.0.0",
        "pug@2.0.4-tuxcare.2|path-exists@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lerna@3.10.8|p-locate@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|lerna@3.10.8|p-limit@1.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lerna@3.10.8|p-limit@1.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|lerna@3.10.8|p-try@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lerna@3.10.8|p-try@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|minimist@1.2.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|prettier@1.19.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pug-code-gen@2.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|constantinople@3.1.2",
        "pug@2.0.4-tuxcare.2|doctypes@1.1.0",
        "pug@2.0.4-tuxcare.2|js-stringify@1.0.2",
        "pug@2.0.4-tuxcare.2|pug-attrs@2.0.4",
        "pug@2.0.4-tuxcare.2|pug-error@1.3.3",
        "pug@2.0.4-tuxcare.2|pug-runtime@2.0.5",
        "pug@2.0.4-tuxcare.2|void-elements@2.0.1",
        "pug@2.0.4-tuxcare.2|with@5.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pug-filters@3.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|clean-css@4.2.4",
        "pug@2.0.4-tuxcare.2|constantinople@3.1.2",
        "pug@2.0.4-tuxcare.2|jstransformer@1.0.0",
        "pug@2.0.4-tuxcare.2|pug-error@1.3.3",
        "pug@2.0.4-tuxcare.2|pug-walk@1.1.8",
        "pug@2.0.4-tuxcare.2|resolve@1.1.7",
        "pug@2.0.4-tuxcare.2|uglify-js@2.7.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pug-lexer@4.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|character-parser@2.2.0",
        "pug@2.0.4-tuxcare.2|is-expression@3.0.0",
        "pug@2.0.4-tuxcare.2|pug-error@1.3.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pug-linker@3.0.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|pug-error@1.3.3",
        "pug@2.0.4-tuxcare.2|pug-walk@1.1.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pug-load@2.0.12",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|object-assign@4.1.1",
        "pug@2.0.4-tuxcare.2|pug-walk@1.1.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pug-parser@5.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|pug-error@1.3.3",
        "pug@2.0.4-tuxcare.2|token-stream@0.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pug-runtime@2.0.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pug-strip-comments@1.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|pug-error@1.3.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|glob@7.2.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|uglify-js@2.7.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|async@0.2.10",
        "pug@2.0.4-tuxcare.2|uglify-js@2.7.3|source-map@0.5.7",
        "pug@2.0.4-tuxcare.2|uglify-to-browserify@1.0.2",
        "pug@2.0.4-tuxcare.2|uglify-js@2.7.3|yargs@3.10.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|uglify-js@2.7.3|source-map@0.5.7"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|uglify-js@2.7.3|yargs@3.10.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|uglify-js@2.7.3|camelcase@1.2.1",
        "pug@2.0.4-tuxcare.2|uglify-js@2.7.3|cliui@2.1.0",
        "pug@2.0.4-tuxcare.2|decamelize@1.2.0",
        "pug@2.0.4-tuxcare.2|window-size@0.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|uglify-js@2.7.3|camelcase@1.2.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|uglify-js@2.7.3|cliui@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|center-align@0.1.3",
        "pug@2.0.4-tuxcare.2|right-align@0.1.3",
        "pug@2.0.4-tuxcare.2|uglify-js@2.7.3|wordwrap@0.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|uglify-js@2.7.3|wordwrap@0.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|growl@1.10.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|js-yaml@3.14.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|argparse@1.0.10",
        "pug@2.0.4-tuxcare.2|esprima@4.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lcov-parse@0.0.10"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|log-driver@1.2.7"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|minimist@1.2.8"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|request@2.88.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|aws-sign2@0.7.0",
        "pug@2.0.4-tuxcare.2|aws4@1.13.2",
        "pug@2.0.4-tuxcare.2|caseless@0.12.0",
        "pug@2.0.4-tuxcare.2|combined-stream@1.0.8",
        "pug@2.0.4-tuxcare.2|extend@3.0.2",
        "pug@2.0.4-tuxcare.2|forever-agent@0.6.1",
        "pug@2.0.4-tuxcare.2|form-data@2.3.3",
        "pug@2.0.4-tuxcare.2|har-validator@5.1.5",
        "pug@2.0.4-tuxcare.2|http-signature@1.2.0",
        "pug@2.0.4-tuxcare.2|is-typedarray@1.0.0",
        "pug@2.0.4-tuxcare.2|isstream@0.1.2",
        "pug@2.0.4-tuxcare.2|json-stringify-safe@5.0.1",
        "pug@2.0.4-tuxcare.2|mime-types@2.1.35",
        "pug@2.0.4-tuxcare.2|oauth-sign@0.9.0",
        "pug@2.0.4-tuxcare.2|performance-now@2.1.0",
        "pug@2.0.4-tuxcare.2|qs@6.5.3",
        "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1",
        "pug@2.0.4-tuxcare.2|tough-cookie@2.5.0",
        "pug@2.0.4-tuxcare.2|tunnel-agent@0.6.0",
        "pug@2.0.4-tuxcare.2|uuid@3.4.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|import-local@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|pkg-dir@3.0.0",
        "pug@2.0.4-tuxcare.2|resolve-cwd@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-cli@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/core@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/test-result@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|exit@0.1.2",
        "pug@2.0.4-tuxcare.2|import-local@2.0.0",
        "pug@2.0.4-tuxcare.2|is-ci@2.0.0",
        "pug@2.0.4-tuxcare.2|jest-config@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-validate@24.9.0",
        "pug@2.0.4-tuxcare.2|prompts@2.4.2",
        "pug@2.0.4-tuxcare.2|realpath-native@1.1.0",
        "pug@2.0.4-tuxcare.2|yargs@13.3.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|coffee-script@1.12.7"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|merge@1.2.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less-plugin-inline-urls@1.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less-plugin-npm-import@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|less-plugin-npm-import@2.1.0|promise@7.0.4",
        "pug@2.0.4-tuxcare.2|resolve@1.1.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less-plugin-npm-import@2.1.0|promise@7.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|asap@2.0.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less@2.7.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|errno@0.1.8",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|image-size@0.5.5",
        "pug@2.0.4-tuxcare.2|mime@1.6.0",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|promise@7.3.1",
        "pug@2.0.4-tuxcare.2|less@2.7.3|request@2.81.0",
        "pug@2.0.4-tuxcare.2|less@2.7.3|source-map@0.5.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less@2.7.3|request@2.81.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|less@2.7.3|aws-sign2@0.6.0",
        "pug@2.0.4-tuxcare.2|aws4@1.13.2",
        "pug@2.0.4-tuxcare.2|caseless@0.12.0",
        "pug@2.0.4-tuxcare.2|combined-stream@1.0.8",
        "pug@2.0.4-tuxcare.2|extend@3.0.2",
        "pug@2.0.4-tuxcare.2|forever-agent@0.6.1",
        "pug@2.0.4-tuxcare.2|less@2.7.3|form-data@2.1.4",
        "pug@2.0.4-tuxcare.2|less@2.7.3|har-validator@4.2.1",
        "pug@2.0.4-tuxcare.2|hawk@3.1.3",
        "pug@2.0.4-tuxcare.2|less@2.7.3|http-signature@1.1.1",
        "pug@2.0.4-tuxcare.2|is-typedarray@1.0.0",
        "pug@2.0.4-tuxcare.2|isstream@0.1.2",
        "pug@2.0.4-tuxcare.2|json-stringify-safe@5.0.1",
        "pug@2.0.4-tuxcare.2|mime-types@2.1.35",
        "pug@2.0.4-tuxcare.2|less@2.7.3|oauth-sign@0.8.2",
        "pug@2.0.4-tuxcare.2|less@2.7.3|performance-now@0.2.0",
        "pug@2.0.4-tuxcare.2|less@2.7.3|qs@6.4.1",
        "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1",
        "pug@2.0.4-tuxcare.2|stringstream@0.0.6",
        "pug@2.0.4-tuxcare.2|less@2.7.3|tough-cookie@2.3.4",
        "pug@2.0.4-tuxcare.2|tunnel-agent@0.6.0",
        "pug@2.0.4-tuxcare.2|uuid@3.4.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less@2.7.3|source-map@0.5.7"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less@2.7.3|aws-sign2@0.6.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less@2.7.3|form-data@2.1.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|asynckit@0.4.0",
        "pug@2.0.4-tuxcare.2|combined-stream@1.0.8",
        "pug@2.0.4-tuxcare.2|mime-types@2.1.35"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less@2.7.3|har-validator@4.2.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|less@2.7.3|ajv@4.11.8",
        "pug@2.0.4-tuxcare.2|less@2.7.3|har-schema@1.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less@2.7.3|http-signature@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|less@2.7.3|assert-plus@0.2.0",
        "pug@2.0.4-tuxcare.2|jsprim@1.4.2",
        "pug@2.0.4-tuxcare.2|sshpk@1.18.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less@2.7.3|oauth-sign@0.8.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less@2.7.3|performance-now@0.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less@2.7.3|qs@6.4.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less@2.7.3|tough-cookie@2.3.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|less@2.7.3|punycode@1.4.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less@2.7.3|ajv@4.11.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|co@4.6.0",
        "pug@2.0.4-tuxcare.2|json-stable-stringify@1.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less@2.7.3|har-schema@1.0.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less@2.7.3|assert-plus@0.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|less@2.7.3|punycode@1.4.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|markdown-it@7.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|argparse@1.0.10",
        "pug@2.0.4-tuxcare.2|entities@1.1.2",
        "pug@2.0.4-tuxcare.2|linkify-it@2.2.0",
        "pug@2.0.4-tuxcare.2|mdurl@1.0.1",
        "pug@2.0.4-tuxcare.2|uc.micro@1.0.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|clone@2.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|stylus@0.54.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|css-parse@2.0.0",
        "pug@2.0.4-tuxcare.2|stylus@0.54.8|debug@3.1.0",
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|stylus@0.54.8|mkdirp@1.0.4",
        "pug@2.0.4-tuxcare.2|safer-buffer@2.1.2",
        "pug@2.0.4-tuxcare.2|stylus@0.54.8|sax@1.2.4",
        "pug@2.0.4-tuxcare.2|semver@6.3.1",
        "pug@2.0.4-tuxcare.2|stylus@0.54.8|source-map@0.7.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|stylus@0.54.8|debug@3.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|stylus@0.54.8|ms@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|stylus@0.54.8|mkdirp@1.0.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|stylus@0.54.8|sax@1.2.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|stylus@0.54.8|source-map@0.7.6"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|stylus@0.54.8|ms@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/add@3.10.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/bootstrap@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/filter-options@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/npm-conf@3.7.0",
        "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0",
        "pug@2.0.4-tuxcare.2|dedent@0.7.0",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|p-map@1.2.0",
        "pug@2.0.4-tuxcare.2|@lerna/add@3.10.6|semver@5.7.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/add@3.10.6|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/bootstrap@3.10.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/batch-packages@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/filter-options@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/has-npm-version@3.10.0",
        "pug@2.0.4-tuxcare.2|@lerna/npm-install@3.10.0",
        "pug@2.0.4-tuxcare.2|@lerna/package-graph@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/pulse-till-done@3.7.1",
        "pug@2.0.4-tuxcare.2|@lerna/rimraf-dir@3.10.0",
        "pug@2.0.4-tuxcare.2|@lerna/run-lifecycle@3.10.5",
        "pug@2.0.4-tuxcare.2|@lerna/run-parallel-batches@3.0.0",
        "pug@2.0.4-tuxcare.2|@lerna/symlink-binary@3.10.0",
        "pug@2.0.4-tuxcare.2|@lerna/symlink-dependencies@3.10.0",
        "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0",
        "pug@2.0.4-tuxcare.2|dedent@0.7.0",
        "pug@2.0.4-tuxcare.2|get-port@3.2.0",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|multimatch@2.1.0",
        "pug@2.0.4-tuxcare.2|p-finally@1.0.0",
        "pug@2.0.4-tuxcare.2|p-map-series@1.0.0",
        "pug@2.0.4-tuxcare.2|p-map@1.2.0",
        "pug@2.0.4-tuxcare.2|p-waterfall@1.0.0",
        "pug@2.0.4-tuxcare.2|read-package-tree@5.3.1",
        "pug@2.0.4-tuxcare.2|@lerna/bootstrap@3.10.6|semver@5.7.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/bootstrap@3.10.6|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/changed@3.10.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/collect-updates@3.10.1",
        "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/listable@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/output@3.6.0",
        "pug@2.0.4-tuxcare.2|@lerna/version@3.10.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/clean@3.10.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/filter-options@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/prompt@3.6.0",
        "pug@2.0.4-tuxcare.2|@lerna/pulse-till-done@3.7.1",
        "pug@2.0.4-tuxcare.2|@lerna/rimraf-dir@3.10.0",
        "pug@2.0.4-tuxcare.2|p-map-series@1.0.0",
        "pug@2.0.4-tuxcare.2|p-map@1.2.0",
        "pug@2.0.4-tuxcare.2|p-waterfall@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/global-options@3.10.6",
        "pug@2.0.4-tuxcare.2|dedent@0.7.0",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|yargs@12.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|yargs@12.0.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|cliui@4.1.0",
        "pug@2.0.4-tuxcare.2|decamelize@1.2.0",
        "pug@2.0.4-tuxcare.2|find-up@3.0.0",
        "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|get-caller-file@1.0.3",
        "pug@2.0.4-tuxcare.2|os-locale@3.1.0",
        "pug@2.0.4-tuxcare.2|require-directory@2.1.1",
        "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|require-main-filename@1.0.1",
        "pug@2.0.4-tuxcare.2|set-blocking@2.0.0",
        "pug@2.0.4-tuxcare.2|string-width@2.1.1",
        "pug@2.0.4-tuxcare.2|which-module@2.0.1",
        "pug@2.0.4-tuxcare.2|y18n@4.0.3",
        "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|yargs-parser@11.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|cliui@4.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|string-width@2.1.1",
        "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|strip-ansi@4.0.0",
        "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|wrap-ansi@2.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|get-caller-file@1.0.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|require-main-filename@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|yargs-parser@11.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|camelcase@5.3.1",
        "pug@2.0.4-tuxcare.2|decamelize@1.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|strip-ansi@4.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|ansi-regex@3.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|wrap-ansi@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|wrap-ansi@2.1.0|string-width@1.0.2",
        "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|wrap-ansi@2.1.0|strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|wrap-ansi@2.1.0|string-width@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|code-point-at@1.1.0",
        "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|is-fullwidth-code-point@1.0.0",
        "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|wrap-ansi@2.1.0|strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|wrap-ansi@2.1.0|strip-ansi@3.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|wrap-ansi@2.1.0|ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|wrap-ansi@2.1.0|ansi-regex@2.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|ansi-regex@3.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/cli@3.10.7|is-fullwidth-code-point@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/create@3.10.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/child-process@3.3.0",
        "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/npm-conf@3.7.0",
        "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0",
        "pug@2.0.4-tuxcare.2|@lerna/create@3.10.6|camelcase@4.1.0",
        "pug@2.0.4-tuxcare.2|dedent@0.7.0",
        "pug@2.0.4-tuxcare.2|fs-extra@7.0.1",
        "pug@2.0.4-tuxcare.2|globby@8.0.2",
        "pug@2.0.4-tuxcare.2|init-package-json@1.10.3",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|p-reduce@1.0.0",
        "pug@2.0.4-tuxcare.2|pify@3.0.0",
        "pug@2.0.4-tuxcare.2|@lerna/create@3.10.6|semver@5.7.2",
        "pug@2.0.4-tuxcare.2|@lerna/create@3.10.6|slash@1.0.0",
        "pug@2.0.4-tuxcare.2|validate-npm-package-license@3.0.4",
        "pug@2.0.4-tuxcare.2|validate-npm-package-name@3.0.0",
        "pug@2.0.4-tuxcare.2|@lerna/create@3.10.6|whatwg-url@7.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/create@3.10.6|camelcase@4.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/create@3.10.6|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/create@3.10.6|slash@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/create@3.10.6|whatwg-url@7.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|lodash.sortby@4.7.0",
        "pug@2.0.4-tuxcare.2|tr46@1.0.1",
        "pug@2.0.4-tuxcare.2|webidl-conversions@4.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/diff@3.10.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/child-process@3.3.0",
        "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/exec@3.10.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/batch-packages@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/child-process@3.3.0",
        "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/filter-options@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/run-parallel-batches@3.0.0",
        "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/import@3.10.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/child-process@3.3.0",
        "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/prompt@3.6.0",
        "pug@2.0.4-tuxcare.2|@lerna/pulse-till-done@3.7.1",
        "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0",
        "pug@2.0.4-tuxcare.2|dedent@0.7.0",
        "pug@2.0.4-tuxcare.2|fs-extra@7.0.1",
        "pug@2.0.4-tuxcare.2|p-map-series@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/init@3.10.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/child-process@3.3.0",
        "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6",
        "pug@2.0.4-tuxcare.2|fs-extra@7.0.1",
        "pug@2.0.4-tuxcare.2|p-map@1.2.0",
        "pug@2.0.4-tuxcare.2|write-json-file@2.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/link@3.10.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/package-graph@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/symlink-dependencies@3.10.0",
        "pug@2.0.4-tuxcare.2|p-map@1.2.0",
        "pug@2.0.4-tuxcare.2|@lerna/link@3.10.6|slash@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/link@3.10.6|slash@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/list@3.10.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/filter-options@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/listable@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/output@3.6.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/publish@3.10.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/batch-packages@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/check-working-tree@3.10.0",
        "pug@2.0.4-tuxcare.2|@lerna/child-process@3.3.0",
        "pug@2.0.4-tuxcare.2|@lerna/collect-updates@3.10.1",
        "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/describe-ref@3.10.0",
        "pug@2.0.4-tuxcare.2|@lerna/log-packed@3.6.0",
        "pug@2.0.4-tuxcare.2|@lerna/npm-conf@3.7.0",
        "pug@2.0.4-tuxcare.2|@lerna/npm-dist-tag@3.8.5",
        "pug@2.0.4-tuxcare.2|@lerna/npm-publish@3.10.7",
        "pug@2.0.4-tuxcare.2|@lerna/output@3.6.0",
        "pug@2.0.4-tuxcare.2|@lerna/pack-directory@3.10.5",
        "pug@2.0.4-tuxcare.2|@lerna/prompt@3.6.0",
        "pug@2.0.4-tuxcare.2|@lerna/pulse-till-done@3.7.1",
        "pug@2.0.4-tuxcare.2|@lerna/run-lifecycle@3.10.5",
        "pug@2.0.4-tuxcare.2|@lerna/run-parallel-batches@3.0.0",
        "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0",
        "pug@2.0.4-tuxcare.2|@lerna/version@3.10.8",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|fs-extra@7.0.1",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|p-finally@1.0.0",
        "pug@2.0.4-tuxcare.2|p-map@1.2.0",
        "pug@2.0.4-tuxcare.2|p-pipe@1.2.0",
        "pug@2.0.4-tuxcare.2|p-reduce@1.0.0",
        "pug@2.0.4-tuxcare.2|@lerna/publish@3.10.8|semver@5.7.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/publish@3.10.8|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/run@3.10.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/batch-packages@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/filter-options@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/npm-run-script@3.10.0",
        "pug@2.0.4-tuxcare.2|@lerna/output@3.6.0",
        "pug@2.0.4-tuxcare.2|@lerna/run-parallel-batches@3.0.0",
        "pug@2.0.4-tuxcare.2|@lerna/timer@3.5.0",
        "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0",
        "pug@2.0.4-tuxcare.2|p-map@1.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/version@3.10.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/batch-packages@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/check-working-tree@3.10.0",
        "pug@2.0.4-tuxcare.2|@lerna/child-process@3.3.0",
        "pug@2.0.4-tuxcare.2|@lerna/collect-updates@3.10.1",
        "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/conventional-commits@3.10.8",
        "pug@2.0.4-tuxcare.2|@lerna/output@3.6.0",
        "pug@2.0.4-tuxcare.2|@lerna/prompt@3.6.0",
        "pug@2.0.4-tuxcare.2|@lerna/run-lifecycle@3.10.5",
        "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|dedent@0.7.0",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|minimatch@3.1.2",
        "pug@2.0.4-tuxcare.2|p-map@1.2.0",
        "pug@2.0.4-tuxcare.2|p-pipe@1.2.0",
        "pug@2.0.4-tuxcare.2|p-reduce@1.0.0",
        "pug@2.0.4-tuxcare.2|p-waterfall@1.0.0",
        "pug@2.0.4-tuxcare.2|@lerna/version@3.10.8|semver@5.7.2",
        "pug@2.0.4-tuxcare.2|@lerna/version@3.10.8|slash@1.0.0",
        "pug@2.0.4-tuxcare.2|temp-write@3.4.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/version@3.10.8|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/version@3.10.8|slash@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bin-links@1.1.8",
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|find-npm-prefix@1.0.2",
        "pug@2.0.4-tuxcare.2|libnpmaccess@3.0.2",
        "pug@2.0.4-tuxcare.2|libnpmconfig@1.2.1",
        "pug@2.0.4-tuxcare.2|libnpmhook@5.0.3",
        "pug@2.0.4-tuxcare.2|libnpmorg@1.0.1",
        "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3",
        "pug@2.0.4-tuxcare.2|libnpmsearch@2.0.2",
        "pug@2.0.4-tuxcare.2|libnpmteam@1.0.2",
        "pug@2.0.4-tuxcare.2|lock-verify@2.2.2",
        "pug@2.0.4-tuxcare.2|npm-lifecycle@2.1.1",
        "pug@2.0.4-tuxcare.2|npm-logical-tree@1.2.1",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
        "pug@2.0.4-tuxcare.2|npm-profile@4.0.4",
        "pug@2.0.4-tuxcare.2|npm-registry-fetch@3.9.1",
        "pug@2.0.4-tuxcare.2|npmlog@4.1.2",
        "pug@2.0.4-tuxcare.2|pacote@9.5.12",
        "pug@2.0.4-tuxcare.2|read-package-json@2.1.2",
        "pug@2.0.4-tuxcare.2|stringify-package@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|constantinople@3.1.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@types/babel-types@7.0.16",
        "pug@2.0.4-tuxcare.2|@types/babylon@6.16.9",
        "pug@2.0.4-tuxcare.2|babel-types@6.26.0",
        "pug@2.0.4-tuxcare.2|babylon@6.18.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|doctypes@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|js-stringify@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pug-attrs@2.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|constantinople@3.1.2",
        "pug@2.0.4-tuxcare.2|js-stringify@1.0.2",
        "pug@2.0.4-tuxcare.2|pug-runtime@2.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pug-error@1.3.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|void-elements@2.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|with@5.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|with@5.1.1|acorn-globals@3.1.0",
        "pug@2.0.4-tuxcare.2|with@5.1.1|acorn@3.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|with@5.1.1|acorn-globals@3.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|with@5.1.1|acorn-globals@3.1.0|acorn@4.0.13"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|with@5.1.1|acorn-globals@3.1.0|acorn@4.0.13"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|with@5.1.1|acorn@3.3.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|clean-css@4.2.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|source-map@0.6.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jstransformer@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-promise@2.2.2",
        "pug@2.0.4-tuxcare.2|promise@7.3.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pug-walk@1.1.8"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|resolve@1.1.7"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|character-parser@2.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-regex@1.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-expression@3.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-expression@3.0.0|acorn@4.0.13",
        "pug@2.0.4-tuxcare.2|object-assign@4.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-expression@3.0.0|acorn@4.0.13"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|object-assign@4.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|token-stream@0.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|glob@7.2.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|fs.realpath@1.0.0",
        "pug@2.0.4-tuxcare.2|inflight@1.0.6",
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|minimatch@3.1.2",
        "pug@2.0.4-tuxcare.2|once@1.4.0",
        "pug@2.0.4-tuxcare.2|path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|async@0.2.10"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|uglify-to-browserify@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|argparse@1.0.10",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|sprintf-js@1.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|esprima@4.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|aws-sign2@0.7.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|aws4@1.13.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|caseless@0.12.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|combined-stream@1.0.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|delayed-stream@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|extend@3.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|forever-agent@0.6.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|form-data@2.3.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|asynckit@0.4.0",
        "pug@2.0.4-tuxcare.2|combined-stream@1.0.8",
        "pug@2.0.4-tuxcare.2|mime-types@2.1.35"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|har-validator@5.1.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|ajv@6.12.6",
        "pug@2.0.4-tuxcare.2|har-schema@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|http-signature@1.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|assert-plus@1.0.0",
        "pug@2.0.4-tuxcare.2|jsprim@1.4.2",
        "pug@2.0.4-tuxcare.2|sshpk@1.18.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-typedarray@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|isstream@0.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|json-stringify-safe@5.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mime-types@2.1.35",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|mime-db@1.52.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|oauth-sign@0.9.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|performance-now@2.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|qs@6.5.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|tough-cookie@2.5.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|psl@1.15.0",
        "pug@2.0.4-tuxcare.2|punycode@2.3.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|tunnel-agent@0.6.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|uuid@3.4.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pkg-dir@3.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|find-up@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|resolve-cwd@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|resolve-cwd@2.0.0|resolve-from@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|resolve-cwd@2.0.0|resolve-from@3.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@jest/core@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/console@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/reporters@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/test-result@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/transform@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|ansi-escapes@3.2.0",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|exit@0.1.2",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|jest-changed-files@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-config@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-haste-map@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-message-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-regex-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-resolve-dependencies@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-resolve@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-runner@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-runtime@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-snapshot@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-validate@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-watcher@24.9.0",
        "pug@2.0.4-tuxcare.2|micromatch@3.1.10",
        "pug@2.0.4-tuxcare.2|p-each-series@1.0.0",
        "pug@2.0.4-tuxcare.2|realpath-native@1.1.0",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
        "pug@2.0.4-tuxcare.2|slash@2.0.0",
        "pug@2.0.4-tuxcare.2|strip-ansi@5.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@jest/test-result@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/console@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|@types/istanbul-lib-coverage@2.0.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@types/istanbul-lib-coverage@2.0.6",
        "pug@2.0.4-tuxcare.2|@types/istanbul-reports@1.1.2",
        "pug@2.0.4-tuxcare.2|@types/yargs@13.0.12"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|chalk@2.4.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|ansi-styles@3.2.1",
        "pug@2.0.4-tuxcare.2|escape-string-regexp@1.0.5",
        "pug@2.0.4-tuxcare.2|supports-color@5.5.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|exit@0.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-ci@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|ci-info@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-config@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/core@7.28.5",
        "pug@2.0.4-tuxcare.2|@jest/test-sequencer@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|babel-jest@24.9.0",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|jest-environment-jsdom@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-environment-node@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-get-type@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-jasmine2@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-regex-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-resolve@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-validate@24.9.0",
        "pug@2.0.4-tuxcare.2|micromatch@3.1.10",
        "pug@2.0.4-tuxcare.2|pretty-format@24.9.0",
        "pug@2.0.4-tuxcare.2|realpath-native@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-util@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/console@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/fake-timers@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/source-map@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/test-result@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|callsites@3.1.0",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|is-ci@2.0.0",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|slash@2.0.0",
        "pug@2.0.4-tuxcare.2|source-map@0.6.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-validate@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|camelcase@5.3.1",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|jest-get-type@24.9.0",
        "pug@2.0.4-tuxcare.2|leven@3.1.0",
        "pug@2.0.4-tuxcare.2|pretty-format@24.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|prompts@2.4.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|kleur@3.0.3",
        "pug@2.0.4-tuxcare.2|sisteransi@1.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|realpath-native@1.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|util.promisify@1.1.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|yargs@13.3.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|cliui@5.0.0",
        "pug@2.0.4-tuxcare.2|find-up@3.0.0",
        "pug@2.0.4-tuxcare.2|get-caller-file@2.0.5",
        "pug@2.0.4-tuxcare.2|require-directory@2.1.1",
        "pug@2.0.4-tuxcare.2|require-main-filename@2.0.0",
        "pug@2.0.4-tuxcare.2|set-blocking@2.0.0",
        "pug@2.0.4-tuxcare.2|yargs@13.3.2|string-width@3.1.0",
        "pug@2.0.4-tuxcare.2|which-module@2.0.1",
        "pug@2.0.4-tuxcare.2|y18n@4.0.3",
        "pug@2.0.4-tuxcare.2|yargs@13.3.2|yargs-parser@13.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|yargs@13.3.2|string-width@3.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|emoji-regex@7.0.3",
        "pug@2.0.4-tuxcare.2|is-fullwidth-code-point@2.0.0",
        "pug@2.0.4-tuxcare.2|strip-ansi@5.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|yargs@13.3.2|yargs-parser@13.1.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|camelcase@5.3.1",
        "pug@2.0.4-tuxcare.2|decamelize@1.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|errno@0.1.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|prr@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|image-size@0.5.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mime@1.6.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|promise@7.3.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|asap@2.0.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|entities@1.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|linkify-it@2.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|uc.micro@1.0.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mdurl@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|uc.micro@1.0.6"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|css-parse@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|css@2.2.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|safer-buffer@2.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|semver@6.3.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/child-process@3.3.0",
        "pug@2.0.4-tuxcare.2|@lerna/package-graph@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/project@3.10.0",
        "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0",
        "pug@2.0.4-tuxcare.2|@lerna/write-log-file@3.6.0",
        "pug@2.0.4-tuxcare.2|dedent@0.7.0",
        "pug@2.0.4-tuxcare.2|execa@1.0.0",
        "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6|is-ci@1.2.1",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|lodash@4.17.21"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6|is-ci@1.2.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6|ci-info@1.6.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/command@3.10.6|ci-info@1.6.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/filter-options@3.10.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/collect-updates@3.10.1",
        "pug@2.0.4-tuxcare.2|@lerna/filter-packages@3.10.0",
        "pug@2.0.4-tuxcare.2|dedent@0.7.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/npm-conf@3.7.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|config-chain@1.1.13",
        "pug@2.0.4-tuxcare.2|pify@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|dedent@0.7.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|p-map@1.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/batch-packages@3.10.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/package-graph@3.10.6",
        "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/has-npm-version@3.10.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/child-process@3.3.0",
        "pug@2.0.4-tuxcare.2|@lerna/has-npm-version@3.10.0|semver@5.7.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/has-npm-version@3.10.0|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/npm-install@3.10.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/child-process@3.3.0",
        "pug@2.0.4-tuxcare.2|@lerna/get-npm-exec-opts@3.6.0",
        "pug@2.0.4-tuxcare.2|fs-extra@7.0.1",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|signal-exit@3.0.7",
        "pug@2.0.4-tuxcare.2|write-pkg@3.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/package-graph@3.10.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|@lerna/package-graph@3.10.6|semver@5.7.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/package-graph@3.10.6|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/pulse-till-done@3.7.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/rimraf-dir@3.10.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/child-process@3.3.0",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|path-exists@3.0.0",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/run-lifecycle@3.10.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/npm-conf@3.7.0",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/run-parallel-batches@3.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|p-map-series@1.0.0",
        "pug@2.0.4-tuxcare.2|p-map@1.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/symlink-binary@3.10.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/create-symlink@3.6.0",
        "pug@2.0.4-tuxcare.2|@lerna/package@3.7.2",
        "pug@2.0.4-tuxcare.2|fs-extra@7.0.1",
        "pug@2.0.4-tuxcare.2|p-map@1.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/symlink-dependencies@3.10.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/create-symlink@3.6.0",
        "pug@2.0.4-tuxcare.2|@lerna/resolve-symlink@3.6.0",
        "pug@2.0.4-tuxcare.2|@lerna/symlink-binary@3.10.0",
        "pug@2.0.4-tuxcare.2|fs-extra@7.0.1",
        "pug@2.0.4-tuxcare.2|p-finally@1.0.0",
        "pug@2.0.4-tuxcare.2|p-map-series@1.0.0",
        "pug@2.0.4-tuxcare.2|p-map@1.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-port@3.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|multimatch@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|array-differ@1.0.0",
        "pug@2.0.4-tuxcare.2|array-union@1.0.2",
        "pug@2.0.4-tuxcare.2|arrify@1.0.1",
        "pug@2.0.4-tuxcare.2|minimatch@3.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|p-finally@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|p-map-series@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|p-reduce@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|p-waterfall@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|p-reduce@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|read-package-tree@5.3.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|read-package-json@2.1.2",
        "pug@2.0.4-tuxcare.2|readdir-scoped-modules@1.1.0",
        "pug@2.0.4-tuxcare.2|util-promisify@2.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/collect-updates@3.10.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/child-process@3.3.0",
        "pug@2.0.4-tuxcare.2|@lerna/describe-ref@3.10.0",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|minimatch@3.1.2",
        "pug@2.0.4-tuxcare.2|@lerna/collect-updates@3.10.1|slash@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/collect-updates@3.10.1|slash@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/listable@3.10.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/batch-packages@3.10.6",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|columnify@1.6.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/output@3.6.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/prompt@3.6.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|inquirer@6.5.2",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/global-options@3.10.6"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/child-process@3.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|execa@1.0.0",
        "pug@2.0.4-tuxcare.2|strong-log-transformer@2.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fs-extra@7.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|jsonfile@4.0.0",
        "pug@2.0.4-tuxcare.2|universalify@0.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|globby@8.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|array-union@1.0.2",
        "pug@2.0.4-tuxcare.2|dir-glob@2.0.0",
        "pug@2.0.4-tuxcare.2|fast-glob@2.2.7",
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|ignore@3.3.10",
        "pug@2.0.4-tuxcare.2|pify@3.0.0",
        "pug@2.0.4-tuxcare.2|globby@8.0.2|slash@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|globby@8.0.2|slash@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|init-package-json@1.10.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
        "pug@2.0.4-tuxcare.2|promzard@0.3.0",
        "pug@2.0.4-tuxcare.2|read-package-json@2.1.2",
        "pug@2.0.4-tuxcare.2|read@1.0.7",
        "pug@2.0.4-tuxcare.2|init-package-json@1.10.3|semver@5.7.2",
        "pug@2.0.4-tuxcare.2|validate-npm-package-license@3.0.4",
        "pug@2.0.4-tuxcare.2|validate-npm-package-name@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|init-package-json@1.10.3|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|p-reduce@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pify@3.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|validate-npm-package-license@3.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|spdx-correct@3.2.0",
        "pug@2.0.4-tuxcare.2|spdx-expression-parse@3.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|validate-npm-package-name@3.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|builtins@1.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|write-json-file@2.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|detect-indent@5.0.0",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|write-json-file@2.3.0|make-dir@1.3.0",
        "pug@2.0.4-tuxcare.2|pify@3.0.0",
        "pug@2.0.4-tuxcare.2|sort-keys@2.0.0",
        "pug@2.0.4-tuxcare.2|write-file-atomic@2.4.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|write-json-file@2.3.0|make-dir@1.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|pify@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/check-working-tree@3.10.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/describe-ref@3.10.0",
        "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/describe-ref@3.10.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/child-process@3.3.0",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/log-packed@3.6.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|byte-size@4.0.4",
        "pug@2.0.4-tuxcare.2|columnify@1.6.0",
        "pug@2.0.4-tuxcare.2|has-unicode@2.0.1",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/npm-dist-tag@3.8.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/npm-publish@3.10.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/run-lifecycle@3.10.5",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|fs-extra@7.0.1",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/pack-directory@3.10.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/get-packed@3.7.0",
        "pug@2.0.4-tuxcare.2|@lerna/package@3.7.2",
        "pug@2.0.4-tuxcare.2|@lerna/run-lifecycle@3.10.5",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|npm-packlist@1.4.8",
        "pug@2.0.4-tuxcare.2|tar@4.4.19",
        "pug@2.0.4-tuxcare.2|temp-write@3.4.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|p-pipe@1.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/npm-run-script@3.10.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/child-process@3.3.0",
        "pug@2.0.4-tuxcare.2|@lerna/get-npm-exec-opts@3.6.0",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/timer@3.5.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/conventional-commits@3.10.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0",
        "pug@2.0.4-tuxcare.2|conventional-changelog-angular@5.0.13",
        "pug@2.0.4-tuxcare.2|conventional-changelog-core@3.2.3",
        "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1",
        "pug@2.0.4-tuxcare.2|fs-extra@7.0.1",
        "pug@2.0.4-tuxcare.2|get-stream@4.1.0",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|pify@3.0.0",
        "pug@2.0.4-tuxcare.2|@lerna/conventional-commits@3.10.8|semver@5.7.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/conventional-commits@3.10.8|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|minimatch@3.1.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|brace-expansion@1.1.12"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|temp-write@3.4.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|is-stream@1.1.0",
        "pug@2.0.4-tuxcare.2|temp-write@3.4.0|make-dir@1.3.0",
        "pug@2.0.4-tuxcare.2|pify@3.0.0",
        "pug@2.0.4-tuxcare.2|temp-dir@1.0.0",
        "pug@2.0.4-tuxcare.2|uuid@3.4.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|temp-write@3.4.0|make-dir@1.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|pify@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|bin-links@1.1.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|bin-links@1.1.8|cmd-shim@3.0.3",
        "pug@2.0.4-tuxcare.2|gentle-fs@2.3.1",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|npm-normalize-package-bin@1.0.1",
        "pug@2.0.4-tuxcare.2|write-file-atomic@2.4.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|bin-links@1.1.8|cmd-shim@3.0.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|bluebird@3.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|find-npm-prefix@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmaccess@3.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|libnpmaccess@3.0.2|aproba@2.1.0",
        "pug@2.0.4-tuxcare.2|get-stream@4.1.0",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
        "pug@2.0.4-tuxcare.2|libnpmaccess@3.0.2|npm-registry-fetch@4.0.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmaccess@3.0.2|aproba@2.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmaccess@3.0.2|npm-registry-fetch@4.0.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|JSONStream@1.3.5",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|libnpmaccess@3.0.2|make-fetch-happen@5.0.2",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
        "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmaccess@3.0.2|make-fetch-happen@5.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|agentkeepalive@3.5.3",
        "pug@2.0.4-tuxcare.2|libnpmaccess@3.0.2|cacache@12.0.4",
        "pug@2.0.4-tuxcare.2|http-cache-semantics@3.8.1",
        "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0",
        "pug@2.0.4-tuxcare.2|https-proxy-agent@2.2.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|node-fetch-npm@2.0.4",
        "pug@2.0.4-tuxcare.2|promise-retry@1.1.1",
        "pug@2.0.4-tuxcare.2|socks-proxy-agent@4.0.2",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmaccess@3.0.2|cacache@12.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|chownr@1.1.4",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|infer-owner@1.0.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|move-concurrently@1.0.1",
        "pug@2.0.4-tuxcare.2|promise-inflight@1.0.1",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2",
        "pug@2.0.4-tuxcare.2|unique-filename@1.1.1",
        "pug@2.0.4-tuxcare.2|y18n@4.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmconfig@1.2.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|find-up@3.0.0",
        "pug@2.0.4-tuxcare.2|ini@1.3.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmhook@5.0.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|libnpmhook@5.0.3|aproba@2.1.0",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|get-stream@4.1.0",
        "pug@2.0.4-tuxcare.2|libnpmhook@5.0.3|npm-registry-fetch@4.0.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmhook@5.0.3|aproba@2.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmhook@5.0.3|npm-registry-fetch@4.0.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|JSONStream@1.3.5",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|libnpmhook@5.0.3|make-fetch-happen@5.0.2",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
        "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmhook@5.0.3|make-fetch-happen@5.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|agentkeepalive@3.5.3",
        "pug@2.0.4-tuxcare.2|libnpmhook@5.0.3|cacache@12.0.4",
        "pug@2.0.4-tuxcare.2|http-cache-semantics@3.8.1",
        "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0",
        "pug@2.0.4-tuxcare.2|https-proxy-agent@2.2.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|node-fetch-npm@2.0.4",
        "pug@2.0.4-tuxcare.2|promise-retry@1.1.1",
        "pug@2.0.4-tuxcare.2|socks-proxy-agent@4.0.2",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmhook@5.0.3|cacache@12.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|chownr@1.1.4",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|infer-owner@1.0.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|move-concurrently@1.0.1",
        "pug@2.0.4-tuxcare.2|promise-inflight@1.0.1",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2",
        "pug@2.0.4-tuxcare.2|unique-filename@1.1.1",
        "pug@2.0.4-tuxcare.2|y18n@4.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmorg@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|libnpmorg@1.0.1|aproba@2.1.0",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|get-stream@4.1.0",
        "pug@2.0.4-tuxcare.2|libnpmorg@1.0.1|npm-registry-fetch@4.0.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmorg@1.0.1|aproba@2.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmorg@1.0.1|npm-registry-fetch@4.0.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|JSONStream@1.3.5",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|libnpmorg@1.0.1|make-fetch-happen@5.0.2",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
        "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmorg@1.0.1|make-fetch-happen@5.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|agentkeepalive@3.5.3",
        "pug@2.0.4-tuxcare.2|libnpmorg@1.0.1|cacache@12.0.4",
        "pug@2.0.4-tuxcare.2|http-cache-semantics@3.8.1",
        "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0",
        "pug@2.0.4-tuxcare.2|https-proxy-agent@2.2.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|node-fetch-npm@2.0.4",
        "pug@2.0.4-tuxcare.2|promise-retry@1.1.1",
        "pug@2.0.4-tuxcare.2|socks-proxy-agent@4.0.2",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmorg@1.0.1|cacache@12.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|chownr@1.1.4",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|infer-owner@1.0.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|move-concurrently@1.0.1",
        "pug@2.0.4-tuxcare.2|promise-inflight@1.0.1",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2",
        "pug@2.0.4-tuxcare.2|unique-filename@1.1.1",
        "pug@2.0.4-tuxcare.2|y18n@4.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3|aproba@2.1.0",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|get-stream@4.1.0",
        "pug@2.0.4-tuxcare.2|lodash.clonedeep@4.5.0",
        "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
        "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3|npm-registry-fetch@4.0.7",
        "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3|semver@5.7.2",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3|aproba@2.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3|npm-registry-fetch@4.0.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|JSONStream@1.3.5",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3|make-fetch-happen@5.0.2",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
        "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3|make-fetch-happen@5.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|agentkeepalive@3.5.3",
        "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3|cacache@12.0.4",
        "pug@2.0.4-tuxcare.2|http-cache-semantics@3.8.1",
        "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0",
        "pug@2.0.4-tuxcare.2|https-proxy-agent@2.2.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|node-fetch-npm@2.0.4",
        "pug@2.0.4-tuxcare.2|promise-retry@1.1.1",
        "pug@2.0.4-tuxcare.2|socks-proxy-agent@4.0.2",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmpublish@1.1.3|cacache@12.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|chownr@1.1.4",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|infer-owner@1.0.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|move-concurrently@1.0.1",
        "pug@2.0.4-tuxcare.2|promise-inflight@1.0.1",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2",
        "pug@2.0.4-tuxcare.2|unique-filename@1.1.1",
        "pug@2.0.4-tuxcare.2|y18n@4.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmsearch@2.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|get-stream@4.1.0",
        "pug@2.0.4-tuxcare.2|libnpmsearch@2.0.2|npm-registry-fetch@4.0.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmsearch@2.0.2|npm-registry-fetch@4.0.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|JSONStream@1.3.5",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|libnpmsearch@2.0.2|make-fetch-happen@5.0.2",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
        "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmsearch@2.0.2|make-fetch-happen@5.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|agentkeepalive@3.5.3",
        "pug@2.0.4-tuxcare.2|libnpmsearch@2.0.2|cacache@12.0.4",
        "pug@2.0.4-tuxcare.2|http-cache-semantics@3.8.1",
        "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0",
        "pug@2.0.4-tuxcare.2|https-proxy-agent@2.2.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|node-fetch-npm@2.0.4",
        "pug@2.0.4-tuxcare.2|promise-retry@1.1.1",
        "pug@2.0.4-tuxcare.2|socks-proxy-agent@4.0.2",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmsearch@2.0.2|cacache@12.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|chownr@1.1.4",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|infer-owner@1.0.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|move-concurrently@1.0.1",
        "pug@2.0.4-tuxcare.2|promise-inflight@1.0.1",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2",
        "pug@2.0.4-tuxcare.2|unique-filename@1.1.1",
        "pug@2.0.4-tuxcare.2|y18n@4.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmteam@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|libnpmteam@1.0.2|aproba@2.1.0",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|get-stream@4.1.0",
        "pug@2.0.4-tuxcare.2|libnpmteam@1.0.2|npm-registry-fetch@4.0.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmteam@1.0.2|aproba@2.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmteam@1.0.2|npm-registry-fetch@4.0.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|JSONStream@1.3.5",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|libnpmteam@1.0.2|make-fetch-happen@5.0.2",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
        "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmteam@1.0.2|make-fetch-happen@5.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|agentkeepalive@3.5.3",
        "pug@2.0.4-tuxcare.2|libnpmteam@1.0.2|cacache@12.0.4",
        "pug@2.0.4-tuxcare.2|http-cache-semantics@3.8.1",
        "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0",
        "pug@2.0.4-tuxcare.2|https-proxy-agent@2.2.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|node-fetch-npm@2.0.4",
        "pug@2.0.4-tuxcare.2|promise-retry@1.1.1",
        "pug@2.0.4-tuxcare.2|socks-proxy-agent@4.0.2",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|libnpmteam@1.0.2|cacache@12.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|chownr@1.1.4",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|infer-owner@1.0.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|move-concurrently@1.0.1",
        "pug@2.0.4-tuxcare.2|promise-inflight@1.0.1",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2",
        "pug@2.0.4-tuxcare.2|unique-filename@1.1.1",
        "pug@2.0.4-tuxcare.2|y18n@4.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lock-verify@2.2.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@iarna/cli@2.2.0",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
        "pug@2.0.4-tuxcare.2|lock-verify@2.2.2|semver@5.7.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lock-verify@2.2.2|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|npm-lifecycle@2.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|byline@5.0.0",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|node-gyp@4.0.0",
        "pug@2.0.4-tuxcare.2|resolve-from@4.0.0",
        "pug@2.0.4-tuxcare.2|slide@1.1.6",
        "pug@2.0.4-tuxcare.2|uid-number@0.0.6",
        "pug@2.0.4-tuxcare.2|umask@1.1.0",
        "pug@2.0.4-tuxcare.2|which@1.3.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|npm-logical-tree@1.2.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|hosted-git-info@2.8.9",
        "pug@2.0.4-tuxcare.2|osenv@0.1.5",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1|semver@5.7.2",
        "pug@2.0.4-tuxcare.2|validate-npm-package-name@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|npm-profile@4.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|aproba@1.2.0",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|npm-profile@4.0.4|npm-registry-fetch@4.0.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|npm-profile@4.0.4|npm-registry-fetch@4.0.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|JSONStream@1.3.5",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|npm-profile@4.0.4|make-fetch-happen@5.0.2",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
        "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|npm-profile@4.0.4|make-fetch-happen@5.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|agentkeepalive@3.5.3",
        "pug@2.0.4-tuxcare.2|npm-profile@4.0.4|cacache@12.0.4",
        "pug@2.0.4-tuxcare.2|http-cache-semantics@3.8.1",
        "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0",
        "pug@2.0.4-tuxcare.2|https-proxy-agent@2.2.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|node-fetch-npm@2.0.4",
        "pug@2.0.4-tuxcare.2|promise-retry@1.1.1",
        "pug@2.0.4-tuxcare.2|socks-proxy-agent@4.0.2",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|npm-profile@4.0.4|cacache@12.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|chownr@1.1.4",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|infer-owner@1.0.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|move-concurrently@1.0.1",
        "pug@2.0.4-tuxcare.2|promise-inflight@1.0.1",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2",
        "pug@2.0.4-tuxcare.2|unique-filename@1.1.1",
        "pug@2.0.4-tuxcare.2|y18n@4.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|npm-registry-fetch@3.9.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|JSONStream@1.3.5",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|make-fetch-happen@4.0.2",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|npmlog@4.1.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|are-we-there-yet@1.1.7",
        "pug@2.0.4-tuxcare.2|console-control-strings@1.1.0",
        "pug@2.0.4-tuxcare.2|gauge@2.7.4",
        "pug@2.0.4-tuxcare.2|set-blocking@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pacote@9.5.12",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|pacote@9.5.12|cacache@12.0.4",
        "pug@2.0.4-tuxcare.2|chownr@1.1.4",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|get-stream@4.1.0",
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|infer-owner@1.0.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|pacote@9.5.12|make-fetch-happen@5.0.2",
        "pug@2.0.4-tuxcare.2|minimatch@3.1.2",
        "pug@2.0.4-tuxcare.2|minipass@2.9.0",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0",
        "pug@2.0.4-tuxcare.2|npm-normalize-package-bin@1.0.1",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
        "pug@2.0.4-tuxcare.2|npm-packlist@1.4.8",
        "pug@2.0.4-tuxcare.2|npm-pick-manifest@3.0.2",
        "pug@2.0.4-tuxcare.2|pacote@9.5.12|npm-registry-fetch@4.0.7",
        "pug@2.0.4-tuxcare.2|osenv@0.1.5",
        "pug@2.0.4-tuxcare.2|promise-inflight@1.0.1",
        "pug@2.0.4-tuxcare.2|promise-retry@1.1.1",
        "pug@2.0.4-tuxcare.2|protoduck@5.0.1",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
        "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1",
        "pug@2.0.4-tuxcare.2|pacote@9.5.12|semver@5.7.2",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2",
        "pug@2.0.4-tuxcare.2|tar@4.4.19",
        "pug@2.0.4-tuxcare.2|unique-filename@1.1.1",
        "pug@2.0.4-tuxcare.2|which@1.3.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pacote@9.5.12|cacache@12.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|chownr@1.1.4",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|infer-owner@1.0.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|move-concurrently@1.0.1",
        "pug@2.0.4-tuxcare.2|promise-inflight@1.0.1",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2",
        "pug@2.0.4-tuxcare.2|unique-filename@1.1.1",
        "pug@2.0.4-tuxcare.2|y18n@4.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pacote@9.5.12|make-fetch-happen@5.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|agentkeepalive@3.5.3",
        "pug@2.0.4-tuxcare.2|pacote@9.5.12|cacache@12.0.4",
        "pug@2.0.4-tuxcare.2|http-cache-semantics@3.8.1",
        "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0",
        "pug@2.0.4-tuxcare.2|https-proxy-agent@2.2.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|node-fetch-npm@2.0.4",
        "pug@2.0.4-tuxcare.2|promise-retry@1.1.1",
        "pug@2.0.4-tuxcare.2|socks-proxy-agent@4.0.2",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pacote@9.5.12|npm-registry-fetch@4.0.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|JSONStream@1.3.5",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|pacote@9.5.12|make-fetch-happen@5.0.2",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
        "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pacote@9.5.12|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|read-package-json@2.1.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|json-parse-even-better-errors@2.3.1",
        "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0",
        "pug@2.0.4-tuxcare.2|npm-normalize-package-bin@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|stringify-package@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@types/babel-types@7.0.16"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@types/babylon@6.16.9",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@types/babel-types@7.0.16"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|babel-types@6.26.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|babel-runtime@6.26.0",
        "pug@2.0.4-tuxcare.2|esutils@2.0.3",
        "pug@2.0.4-tuxcare.2|lodash@4.17.21",
        "pug@2.0.4-tuxcare.2|to-fast-properties@1.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|babylon@6.18.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|source-map@0.6.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-promise@2.2.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-regex@1.2.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|gopd@1.2.0",
        "pug@2.0.4-tuxcare.2|has-tostringtag@1.0.2",
        "pug@2.0.4-tuxcare.2|hasown@2.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fs.realpath@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|inflight@1.0.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|once@1.4.0",
        "pug@2.0.4-tuxcare.2|wrappy@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|inherits@2.0.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|once@1.4.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|wrappy@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|path-is-absolute@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|decamelize@1.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|window-size@0.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|sprintf-js@1.0.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|delayed-stream@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|asynckit@0.4.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|ajv@6.12.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|fast-deep-equal@3.1.3",
        "pug@2.0.4-tuxcare.2|fast-json-stable-stringify@2.1.0",
        "pug@2.0.4-tuxcare.2|json-schema-traverse@0.4.1",
        "pug@2.0.4-tuxcare.2|uri-js@4.4.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|har-schema@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|assert-plus@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jsprim@1.4.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|assert-plus@1.0.0",
        "pug@2.0.4-tuxcare.2|extsprintf@1.3.0",
        "pug@2.0.4-tuxcare.2|json-schema@0.4.0",
        "pug@2.0.4-tuxcare.2|verror@1.10.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|sshpk@1.18.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|asn1@0.2.6",
        "pug@2.0.4-tuxcare.2|assert-plus@1.0.0",
        "pug@2.0.4-tuxcare.2|bcrypt-pbkdf@1.0.2",
        "pug@2.0.4-tuxcare.2|dashdash@1.14.1",
        "pug@2.0.4-tuxcare.2|ecc-jsbn@0.1.2",
        "pug@2.0.4-tuxcare.2|getpass@0.1.7",
        "pug@2.0.4-tuxcare.2|jsbn@0.1.1",
        "pug@2.0.4-tuxcare.2|safer-buffer@2.1.2",
        "pug@2.0.4-tuxcare.2|tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mime-db@1.52.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|psl@1.15.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|punycode@2.3.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|punycode@2.3.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|find-up@3.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|locate-path@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@jest/console@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/source-map@24.9.0",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|slash@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@jest/reporters@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/environment@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/test-result@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/transform@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|exit@0.1.2",
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|istanbul-lib-coverage@2.0.5",
        "pug@2.0.4-tuxcare.2|istanbul-lib-instrument@3.3.0",
        "pug@2.0.4-tuxcare.2|istanbul-lib-report@2.0.8",
        "pug@2.0.4-tuxcare.2|istanbul-lib-source-maps@3.0.6",
        "pug@2.0.4-tuxcare.2|istanbul-reports@2.2.7",
        "pug@2.0.4-tuxcare.2|jest-haste-map@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-resolve@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-runtime@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-worker@24.9.0",
        "pug@2.0.4-tuxcare.2|node-notifier@5.4.5",
        "pug@2.0.4-tuxcare.2|slash@2.0.0",
        "pug@2.0.4-tuxcare.2|source-map@0.6.1",
        "pug@2.0.4-tuxcare.2|string-length@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@jest/transform@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/core@7.28.5",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|babel-plugin-istanbul@5.2.0",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|convert-source-map@1.9.0",
        "pug@2.0.4-tuxcare.2|fast-json-stable-stringify@2.1.0",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|jest-haste-map@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-regex-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-util@24.9.0",
        "pug@2.0.4-tuxcare.2|micromatch@3.1.10",
        "pug@2.0.4-tuxcare.2|pirates@4.0.7",
        "pug@2.0.4-tuxcare.2|realpath-native@1.1.0",
        "pug@2.0.4-tuxcare.2|slash@2.0.0",
        "pug@2.0.4-tuxcare.2|source-map@0.6.1",
        "pug@2.0.4-tuxcare.2|write-file-atomic@2.4.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|ansi-escapes@3.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-changed-files@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|execa@1.0.0",
        "pug@2.0.4-tuxcare.2|throat@4.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-haste-map@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|anymatch@2.0.0",
        "pug@2.0.4-tuxcare.2|fb-watchman@2.0.2",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|invariant@2.2.4",
        "pug@2.0.4-tuxcare.2|jest-serializer@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-worker@24.9.0",
        "pug@2.0.4-tuxcare.2|micromatch@3.1.10",
        "pug@2.0.4-tuxcare.2|sane@4.1.0",
        "pug@2.0.4-tuxcare.2|walker@1.0.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-message-util@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/code-frame@7.27.1",
        "pug@2.0.4-tuxcare.2|@jest/test-result@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|@types/stack-utils@1.0.1",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|micromatch@3.1.10",
        "pug@2.0.4-tuxcare.2|slash@2.0.0",
        "pug@2.0.4-tuxcare.2|stack-utils@1.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-regex-util@24.9.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-resolve-dependencies@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-regex-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-snapshot@24.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-resolve@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|browser-resolve@1.11.3",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|jest-pnp-resolver@1.2.3",
        "pug@2.0.4-tuxcare.2|realpath-native@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-runner@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/console@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/environment@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/test-result@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|exit@0.1.2",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|jest-config@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-docblock@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-haste-map@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-jasmine2@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-leak-detector@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-message-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-resolve@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-runtime@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-worker@24.9.0",
        "pug@2.0.4-tuxcare.2|source-map-support@0.5.21",
        "pug@2.0.4-tuxcare.2|throat@4.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-runtime@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/console@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/environment@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/source-map@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/transform@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|@types/yargs@13.0.12",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|exit@0.1.2",
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|jest-config@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-haste-map@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-message-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-mock@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-regex-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-resolve@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-snapshot@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-validate@24.9.0",
        "pug@2.0.4-tuxcare.2|realpath-native@1.1.0",
        "pug@2.0.4-tuxcare.2|slash@2.0.0",
        "pug@2.0.4-tuxcare.2|strip-bom@3.0.0",
        "pug@2.0.4-tuxcare.2|yargs@13.3.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-snapshot@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/types@7.28.5",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|expect@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-diff@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-get-type@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-matcher-utils@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-message-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-resolve@24.9.0",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|natural-compare@1.4.0",
        "pug@2.0.4-tuxcare.2|pretty-format@24.9.0",
        "pug@2.0.4-tuxcare.2|semver@6.3.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-watcher@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/test-result@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|@types/yargs@13.0.12",
        "pug@2.0.4-tuxcare.2|ansi-escapes@3.2.0",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|jest-util@24.9.0",
        "pug@2.0.4-tuxcare.2|string-length@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|micromatch@3.1.10",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|arr-diff@4.0.0",
        "pug@2.0.4-tuxcare.2|array-unique@0.3.2",
        "pug@2.0.4-tuxcare.2|braces@2.3.2",
        "pug@2.0.4-tuxcare.2|define-property@2.0.2",
        "pug@2.0.4-tuxcare.2|extend-shallow@3.0.2",
        "pug@2.0.4-tuxcare.2|extglob@2.0.4",
        "pug@2.0.4-tuxcare.2|fragment-cache@0.2.1",
        "pug@2.0.4-tuxcare.2|kind-of@6.0.3",
        "pug@2.0.4-tuxcare.2|nanomatch@1.2.13",
        "pug@2.0.4-tuxcare.2|object.pick@1.3.0",
        "pug@2.0.4-tuxcare.2|regex-not@1.0.2",
        "pug@2.0.4-tuxcare.2|snapdragon@0.8.2",
        "pug@2.0.4-tuxcare.2|to-regex@3.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|p-each-series@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|p-reduce@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|slash@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|strip-ansi@5.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|ansi-regex@4.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@types/istanbul-lib-coverage@2.0.6"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@types/istanbul-reports@1.1.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@types/istanbul-lib-coverage@2.0.6",
        "pug@2.0.4-tuxcare.2|@types/istanbul-lib-report@3.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@types/yargs@13.0.12",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@types/yargs-parser@21.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|ansi-styles@3.2.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|color-convert@1.9.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|escape-string-regexp@1.0.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|supports-color@5.5.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|has-flag@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|ci-info@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/core@7.28.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/code-frame@7.27.1",
        "pug@2.0.4-tuxcare.2|@babel/generator@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/helper-compilation-targets@7.27.2",
        "pug@2.0.4-tuxcare.2|@babel/helper-module-transforms@7.28.3",
        "pug@2.0.4-tuxcare.2|@babel/helpers@7.28.4",
        "pug@2.0.4-tuxcare.2|@babel/parser@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/template@7.27.2",
        "pug@2.0.4-tuxcare.2|@babel/traverse@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/types@7.28.5",
        "pug@2.0.4-tuxcare.2|@jridgewell/remapping@2.3.5",
        "pug@2.0.4-tuxcare.2|@babel/core@7.28.5|convert-source-map@2.0.0",
        "pug@2.0.4-tuxcare.2|debug@4.4.3",
        "pug@2.0.4-tuxcare.2|gensync@1.0.0-beta.2",
        "pug@2.0.4-tuxcare.2|json5@2.2.3",
        "pug@2.0.4-tuxcare.2|semver@6.3.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/core@7.28.5|convert-source-map@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@jest/test-sequencer@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/test-result@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-haste-map@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-runner@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-runtime@24.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|babel-jest@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/core@7.28.5",
        "pug@2.0.4-tuxcare.2|@jest/transform@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|@types/babel__core@7.20.5",
        "pug@2.0.4-tuxcare.2|babel-plugin-istanbul@5.2.0",
        "pug@2.0.4-tuxcare.2|babel-preset-jest@24.9.0",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|slash@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-environment-jsdom@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/environment@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/fake-timers@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-mock@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jsdom@11.12.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-environment-node@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/environment@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/fake-timers@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-mock@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-util@24.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-get-type@24.9.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-jasmine2@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/traverse@7.28.5",
        "pug@2.0.4-tuxcare.2|@jest/environment@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/test-result@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|co@4.6.0",
        "pug@2.0.4-tuxcare.2|expect@24.9.0",
        "pug@2.0.4-tuxcare.2|is-generator-fn@2.1.0",
        "pug@2.0.4-tuxcare.2|jest-each@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-matcher-utils@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-message-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-runtime@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-snapshot@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-util@24.9.0",
        "pug@2.0.4-tuxcare.2|pretty-format@24.9.0",
        "pug@2.0.4-tuxcare.2|throat@4.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pretty-format@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|ansi-regex@4.1.1",
        "pug@2.0.4-tuxcare.2|ansi-styles@3.2.1",
        "pug@2.0.4-tuxcare.2|react-is@16.13.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@jest/fake-timers@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-message-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-mock@24.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@jest/source-map@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|callsites@3.1.0",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|source-map@0.6.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|callsites@3.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|camelcase@5.3.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|leven@3.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|kleur@3.0.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|sisteransi@1.0.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|util.promisify@1.1.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|define-data-property@1.1.4",
        "pug@2.0.4-tuxcare.2|define-properties@1.2.1",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|es-object-atoms@1.1.1",
        "pug@2.0.4-tuxcare.2|for-each@0.3.5",
        "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0",
        "pug@2.0.4-tuxcare.2|has-proto@1.2.0",
        "pug@2.0.4-tuxcare.2|has-symbols@1.1.0",
        "pug@2.0.4-tuxcare.2|object.getownpropertydescriptors@2.1.8",
        "pug@2.0.4-tuxcare.2|safe-array-concat@1.1.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|cliui@5.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|cliui@5.0.0|string-width@3.1.0",
        "pug@2.0.4-tuxcare.2|strip-ansi@5.2.0",
        "pug@2.0.4-tuxcare.2|wrap-ansi@5.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|cliui@5.0.0|string-width@3.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|emoji-regex@7.0.3",
        "pug@2.0.4-tuxcare.2|is-fullwidth-code-point@2.0.0",
        "pug@2.0.4-tuxcare.2|strip-ansi@5.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-caller-file@2.0.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|require-directory@2.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|require-main-filename@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|set-blocking@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|which-module@2.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|y18n@4.0.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|asap@2.0.6"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|prr@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|hawk@3.1.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|boom@2.10.1",
        "pug@2.0.4-tuxcare.2|cryptiles@2.0.5",
        "pug@2.0.4-tuxcare.2|hoek@2.16.3",
        "pug@2.0.4-tuxcare.2|sntp@1.0.9"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|stringstream@0.0.6"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|css@2.2.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|source-map-resolve@0.5.3",
        "pug@2.0.4-tuxcare.2|source-map@0.6.1",
        "pug@2.0.4-tuxcare.2|urix@0.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/project@3.10.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/package@3.7.2",
        "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0",
        "pug@2.0.4-tuxcare.2|cosmiconfig@5.2.1",
        "pug@2.0.4-tuxcare.2|dedent@0.7.0",
        "pug@2.0.4-tuxcare.2|dot-prop@4.2.1",
        "pug@2.0.4-tuxcare.2|glob-parent@3.1.0",
        "pug@2.0.4-tuxcare.2|globby@8.0.2",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|load-json-file@4.0.0",
        "pug@2.0.4-tuxcare.2|p-map@1.2.0",
        "pug@2.0.4-tuxcare.2|resolve-from@4.0.0",
        "pug@2.0.4-tuxcare.2|write-json-file@2.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/write-log-file@3.6.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|write-file-atomic@2.4.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|execa@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|cross-spawn@6.0.6",
        "pug@2.0.4-tuxcare.2|get-stream@4.1.0",
        "pug@2.0.4-tuxcare.2|is-stream@1.1.0",
        "pug@2.0.4-tuxcare.2|npm-run-path@2.0.2",
        "pug@2.0.4-tuxcare.2|p-finally@1.0.0",
        "pug@2.0.4-tuxcare.2|signal-exit@3.0.7",
        "pug@2.0.4-tuxcare.2|strip-eof@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lodash@4.17.21"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/filter-packages@3.10.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@lerna/validation-error@3.6.0",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|multimatch@2.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|config-chain@1.1.13",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|ini@1.3.8",
        "pug@2.0.4-tuxcare.2|proto-list@1.2.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/get-npm-exec-opts@3.6.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|signal-exit@3.0.7"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|write-pkg@3.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|sort-keys@2.0.0",
        "pug@2.0.4-tuxcare.2|write-json-file@2.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|path-exists@3.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/create-symlink@3.6.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|cmd-shim@2.1.0",
        "pug@2.0.4-tuxcare.2|fs-extra@7.0.1",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/package@3.7.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|load-json-file@4.0.0",
        "pug@2.0.4-tuxcare.2|write-pkg@3.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/resolve-symlink@3.6.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|fs-extra@7.0.1",
        "pug@2.0.4-tuxcare.2|libnpm@2.0.1",
        "pug@2.0.4-tuxcare.2|read-cmd-shim@1.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|array-differ@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|array-union@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|array-uniq@1.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|arrify@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|readdir-scoped-modules@1.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|debuglog@1.0.1",
        "pug@2.0.4-tuxcare.2|dezalgo@1.0.4",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|once@1.4.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|util-promisify@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|object.getownpropertydescriptors@2.1.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|columnify@1.6.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|columnify@1.6.0|strip-ansi@6.0.1",
        "pug@2.0.4-tuxcare.2|wcwidth@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|columnify@1.6.0|strip-ansi@6.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|columnify@1.6.0|ansi-regex@5.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|columnify@1.6.0|ansi-regex@5.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|inquirer@6.5.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|ansi-escapes@3.2.0",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|cli-cursor@2.1.0",
        "pug@2.0.4-tuxcare.2|cli-width@2.2.1",
        "pug@2.0.4-tuxcare.2|external-editor@3.1.0",
        "pug@2.0.4-tuxcare.2|figures@2.0.0",
        "pug@2.0.4-tuxcare.2|lodash@4.17.21",
        "pug@2.0.4-tuxcare.2|mute-stream@0.0.7",
        "pug@2.0.4-tuxcare.2|run-async@2.4.1",
        "pug@2.0.4-tuxcare.2|rxjs@6.6.7",
        "pug@2.0.4-tuxcare.2|string-width@2.1.1",
        "pug@2.0.4-tuxcare.2|strip-ansi@5.2.0",
        "pug@2.0.4-tuxcare.2|through@2.3.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|os-locale@3.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|execa@1.0.0",
        "pug@2.0.4-tuxcare.2|lcid@2.0.0",
        "pug@2.0.4-tuxcare.2|mem@4.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|string-width@2.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-fullwidth-code-point@2.0.0",
        "pug@2.0.4-tuxcare.2|string-width@2.1.1|strip-ansi@4.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|string-width@2.1.1|strip-ansi@4.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|string-width@2.1.1|ansi-regex@3.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|string-width@2.1.1|ansi-regex@3.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|strong-log-transformer@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|duplexer@0.1.2",
        "pug@2.0.4-tuxcare.2|minimist@1.2.8",
        "pug@2.0.4-tuxcare.2|through@2.3.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jsonfile@4.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|universalify@0.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|dir-glob@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|arrify@1.0.1",
        "pug@2.0.4-tuxcare.2|path-type@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fast-glob@2.2.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@mrmlnc/readdir-enhanced@2.2.1",
        "pug@2.0.4-tuxcare.2|@nodelib/fs.stat@1.1.3",
        "pug@2.0.4-tuxcare.2|glob-parent@3.1.0",
        "pug@2.0.4-tuxcare.2|fast-glob@2.2.7|is-glob@4.0.3",
        "pug@2.0.4-tuxcare.2|merge2@1.4.1",
        "pug@2.0.4-tuxcare.2|micromatch@3.1.10"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fast-glob@2.2.7|is-glob@4.0.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-extglob@2.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|ignore@3.3.10"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|promzard@0.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|read@1.0.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|read@1.0.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|mute-stream@0.0.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|spdx-correct@3.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|spdx-expression-parse@3.0.1",
        "pug@2.0.4-tuxcare.2|spdx-license-ids@3.0.22"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|spdx-expression-parse@3.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|spdx-exceptions@2.5.0",
        "pug@2.0.4-tuxcare.2|spdx-license-ids@3.0.22"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|builtins@1.0.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lodash.sortby@4.7.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|tr46@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|punycode@2.3.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|webidl-conversions@4.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|detect-indent@5.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|sort-keys@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-plain-obj@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|write-file-atomic@2.4.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|imurmurhash@0.1.4",
        "pug@2.0.4-tuxcare.2|signal-exit@3.0.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|byte-size@4.0.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|has-unicode@2.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@lerna/get-packed@3.7.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|fs-extra@7.0.1",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2",
        "pug@2.0.4-tuxcare.2|tar@4.4.19"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|npm-packlist@1.4.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|ignore-walk@3.0.4",
        "pug@2.0.4-tuxcare.2|npm-bundled@1.1.2",
        "pug@2.0.4-tuxcare.2|npm-normalize-package-bin@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|tar@4.4.19",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|chownr@1.1.4",
        "pug@2.0.4-tuxcare.2|fs-minipass@1.2.7",
        "pug@2.0.4-tuxcare.2|minipass@2.9.0",
        "pug@2.0.4-tuxcare.2|minizlib@1.3.3",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1",
        "pug@2.0.4-tuxcare.2|yallist@3.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-changelog-angular@5.0.13",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|compare-func@2.0.0",
        "pug@2.0.4-tuxcare.2|q@1.5.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-changelog-core@3.2.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|conventional-changelog-writer@4.1.0",
        "pug@2.0.4-tuxcare.2|conventional-commits-parser@3.2.4",
        "pug@2.0.4-tuxcare.2|dateformat@3.0.3",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0",
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0",
        "pug@2.0.4-tuxcare.2|git-remote-origin-url@2.0.0",
        "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3",
        "pug@2.0.4-tuxcare.2|lodash@4.17.21",
        "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0",
        "pug@2.0.4-tuxcare.2|q@1.5.1",
        "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0",
        "pug@2.0.4-tuxcare.2|read-pkg@3.0.0",
        "pug@2.0.4-tuxcare.2|through2@3.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|concat-stream@2.0.0",
        "pug@2.0.4-tuxcare.2|conventional-changelog-preset-loader@2.3.4",
        "pug@2.0.4-tuxcare.2|conventional-commits-filter@2.0.7",
        "pug@2.0.4-tuxcare.2|conventional-commits-parser@3.2.4",
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0",
        "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3",
        "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|meow@4.0.1",
        "pug@2.0.4-tuxcare.2|q@1.5.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|meow@4.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|camelcase-keys@4.2.0",
        "pug@2.0.4-tuxcare.2|decamelize-keys@1.1.1",
        "pug@2.0.4-tuxcare.2|loud-rejection@1.6.0",
        "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|minimist-options@3.0.2",
        "pug@2.0.4-tuxcare.2|minimist@1.2.8",
        "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0",
        "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0",
        "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|redent@2.0.0",
        "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|trim-newlines@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|camelcase-keys@4.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|camelcase@4.1.0",
        "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|map-obj@2.0.0",
        "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|quick-lru@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|minimist-options@3.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|arrify@1.0.1",
        "pug@2.0.4-tuxcare.2|is-plain-obj@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|redent@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|indent-string@3.2.0",
        "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|strip-indent@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|trim-newlines@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|camelcase@4.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|map-obj@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|quick-lru@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|indent-string@3.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-recommended-bump@4.1.1|strip-indent@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-stream@4.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|pump@3.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|brace-expansion@1.1.12",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|balanced-match@1.0.2",
        "pug@2.0.4-tuxcare.2|concat-map@0.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-stream@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|temp-dir@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|gentle-fs@2.3.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|aproba@1.2.0",
        "pug@2.0.4-tuxcare.2|chownr@1.1.4",
        "pug@2.0.4-tuxcare.2|gentle-fs@2.3.1|cmd-shim@3.0.3",
        "pug@2.0.4-tuxcare.2|fs-vacuum@1.2.10",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|iferr@0.1.5",
        "pug@2.0.4-tuxcare.2|infer-owner@1.0.4",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|path-is-inside@1.0.2",
        "pug@2.0.4-tuxcare.2|read-cmd-shim@1.0.5",
        "pug@2.0.4-tuxcare.2|slide@1.1.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|gentle-fs@2.3.1|cmd-shim@3.0.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|npm-normalize-package-bin@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|ini@1.3.8"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lodash.clonedeep@4.5.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|hosted-git-info@2.8.9",
        "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0|resolve@1.22.11",
        "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0|semver@5.7.2",
        "pug@2.0.4-tuxcare.2|validate-npm-package-license@3.0.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0|resolve@1.22.11",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-core-module@2.16.1",
        "pug@2.0.4-tuxcare.2|path-parse@1.0.7",
        "pug@2.0.4-tuxcare.2|supports-preserve-symlinks-flag@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|ssri@6.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@iarna/cli@2.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|signal-exit@3.0.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|byline@5.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|node-gyp@4.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|nopt@3.0.6",
        "pug@2.0.4-tuxcare.2|npmlog@4.1.2",
        "pug@2.0.4-tuxcare.2|osenv@0.1.5",
        "pug@2.0.4-tuxcare.2|request@2.88.2",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
        "pug@2.0.4-tuxcare.2|node-gyp@4.0.0|semver@5.3.0",
        "pug@2.0.4-tuxcare.2|tar@4.4.19",
        "pug@2.0.4-tuxcare.2|which@1.3.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|node-gyp@4.0.0|semver@5.3.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|resolve-from@4.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|slide@1.1.6"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|uid-number@0.0.6"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|umask@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|which@1.3.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|isexe@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|hosted-git-info@2.8.9"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|osenv@0.1.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|os-homedir@1.0.2",
        "pug@2.0.4-tuxcare.2|os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|aproba@1.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|JSONStream@1.3.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|jsonparse@1.3.1",
        "pug@2.0.4-tuxcare.2|through@2.3.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|yallist@3.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|make-fetch-happen@4.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|agentkeepalive@3.5.3",
        "pug@2.0.4-tuxcare.2|cacache@11.3.3",
        "pug@2.0.4-tuxcare.2|http-cache-semantics@3.8.1",
        "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0",
        "pug@2.0.4-tuxcare.2|https-proxy-agent@2.2.4",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|node-fetch-npm@2.0.4",
        "pug@2.0.4-tuxcare.2|promise-retry@1.1.1",
        "pug@2.0.4-tuxcare.2|socks-proxy-agent@4.0.2",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|are-we-there-yet@1.1.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|delegates@1.0.0",
        "pug@2.0.4-tuxcare.2|are-we-there-yet@1.1.7|readable-stream@2.3.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|are-we-there-yet@1.1.7|readable-stream@2.3.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|core-util-is@1.0.2",
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|are-we-there-yet@1.1.7|isarray@1.0.0",
        "pug@2.0.4-tuxcare.2|process-nextick-args@2.0.1",
        "pug@2.0.4-tuxcare.2|are-we-there-yet@1.1.7|safe-buffer@5.1.2",
        "pug@2.0.4-tuxcare.2|are-we-there-yet@1.1.7|string_decoder@1.1.1",
        "pug@2.0.4-tuxcare.2|util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|are-we-there-yet@1.1.7|isarray@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|are-we-there-yet@1.1.7|safe-buffer@5.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|are-we-there-yet@1.1.7|string_decoder@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|are-we-there-yet@1.1.7|safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|console-control-strings@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|gauge@2.7.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|aproba@1.2.0",
        "pug@2.0.4-tuxcare.2|console-control-strings@1.1.0",
        "pug@2.0.4-tuxcare.2|has-unicode@2.0.1",
        "pug@2.0.4-tuxcare.2|object-assign@4.1.1",
        "pug@2.0.4-tuxcare.2|signal-exit@3.0.7",
        "pug@2.0.4-tuxcare.2|gauge@2.7.4|string-width@1.0.2",
        "pug@2.0.4-tuxcare.2|gauge@2.7.4|strip-ansi@3.0.1",
        "pug@2.0.4-tuxcare.2|wide-align@1.1.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|gauge@2.7.4|string-width@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|code-point-at@1.1.0",
        "pug@2.0.4-tuxcare.2|gauge@2.7.4|is-fullwidth-code-point@1.0.0",
        "pug@2.0.4-tuxcare.2|gauge@2.7.4|strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|gauge@2.7.4|strip-ansi@3.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|gauge@2.7.4|ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|gauge@2.7.4|is-fullwidth-code-point@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|gauge@2.7.4|ansi-regex@2.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|chownr@1.1.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|infer-owner@1.0.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|minipass@2.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1",
        "pug@2.0.4-tuxcare.2|yallist@3.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0|concat-stream@1.6.2",
        "pug@2.0.4-tuxcare.2|duplexify@3.7.1",
        "pug@2.0.4-tuxcare.2|end-of-stream@1.4.5",
        "pug@2.0.4-tuxcare.2|flush-write-stream@1.1.1",
        "pug@2.0.4-tuxcare.2|from2@2.3.0",
        "pug@2.0.4-tuxcare.2|parallel-transform@1.2.0",
        "pug@2.0.4-tuxcare.2|pump@3.0.3",
        "pug@2.0.4-tuxcare.2|pumpify@1.5.1",
        "pug@2.0.4-tuxcare.2|stream-each@1.2.3",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0|through2@2.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mississippi@3.0.0|concat-stream@1.6.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|buffer-from@1.1.2",
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0|readable-stream@2.3.8",
        "pug@2.0.4-tuxcare.2|typedarray@0.0.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mississippi@3.0.0|through2@2.0.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0|readable-stream@2.3.8",
        "pug@2.0.4-tuxcare.2|xtend@4.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mississippi@3.0.0|readable-stream@2.3.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|core-util-is@1.0.2",
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0|isarray@1.0.0",
        "pug@2.0.4-tuxcare.2|process-nextick-args@2.0.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0|safe-buffer@5.1.2",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0|string_decoder@1.1.1",
        "pug@2.0.4-tuxcare.2|util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mississippi@3.0.0|isarray@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mississippi@3.0.0|safe-buffer@5.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mississippi@3.0.0|string_decoder@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0|safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|npm-pick-manifest@3.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|npm-package-arg@6.1.1",
        "pug@2.0.4-tuxcare.2|npm-pick-manifest@3.0.2|semver@5.7.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|npm-pick-manifest@3.0.2|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|promise-inflight@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|promise-retry@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|err-code@1.1.2",
        "pug@2.0.4-tuxcare.2|retry@0.10.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|protoduck@5.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|genfun@5.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|unique-filename@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|unique-slug@2.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|json-parse-even-better-errors@2.3.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|babel-runtime@6.26.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|core-js@2.6.12",
        "pug@2.0.4-tuxcare.2|regenerator-runtime@0.11.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|esutils@2.0.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|to-fast-properties@1.0.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind-apply-helpers@1.0.2",
        "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|gopd@1.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|has-tostringtag@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|has-symbols@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|hasown@2.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|function-bind@1.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|wrappy@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|center-align@0.1.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|align-text@0.1.4",
        "pug@2.0.4-tuxcare.2|lazy-cache@1.0.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|right-align@0.1.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|align-text@0.1.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fast-deep-equal@3.1.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fast-json-stable-stringify@2.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|json-schema-traverse@0.4.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|uri-js@4.4.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|punycode@2.3.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|extsprintf@1.3.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|json-schema@0.4.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|verror@1.10.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|assert-plus@1.0.0",
        "pug@2.0.4-tuxcare.2|core-util-is@1.0.2",
        "pug@2.0.4-tuxcare.2|extsprintf@1.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|asn1@0.2.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|bcrypt-pbkdf@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|dashdash@1.14.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|ecc-jsbn@0.1.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|jsbn@0.1.1",
        "pug@2.0.4-tuxcare.2|safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|getpass@0.1.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jsbn@0.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|tweetnacl@0.14.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|locate-path@3.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|p-locate@3.0.0",
        "pug@2.0.4-tuxcare.2|path-exists@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@jest/environment@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/fake-timers@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/transform@24.9.0",
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-mock@24.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|istanbul-lib-coverage@2.0.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|istanbul-lib-instrument@3.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/generator@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/parser@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/template@7.27.2",
        "pug@2.0.4-tuxcare.2|@babel/traverse@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/types@7.28.5",
        "pug@2.0.4-tuxcare.2|istanbul-lib-coverage@2.0.5",
        "pug@2.0.4-tuxcare.2|semver@6.3.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|istanbul-lib-report@2.0.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|istanbul-lib-coverage@2.0.5",
        "pug@2.0.4-tuxcare.2|make-dir@2.1.0",
        "pug@2.0.4-tuxcare.2|istanbul-lib-report@2.0.8|supports-color@6.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|istanbul-lib-report@2.0.8|supports-color@6.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|has-flag@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|istanbul-lib-source-maps@3.0.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|debug@4.4.3",
        "pug@2.0.4-tuxcare.2|istanbul-lib-coverage@2.0.5",
        "pug@2.0.4-tuxcare.2|make-dir@2.1.0",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
        "pug@2.0.4-tuxcare.2|source-map@0.6.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|istanbul-reports@2.2.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|html-escaper@2.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-worker@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|merge-stream@2.0.0",
        "pug@2.0.4-tuxcare.2|jest-worker@24.9.0|supports-color@6.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-worker@24.9.0|supports-color@6.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|has-flag@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|node-notifier@5.4.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|growly@1.3.0",
        "pug@2.0.4-tuxcare.2|is-wsl@1.1.0",
        "pug@2.0.4-tuxcare.2|node-notifier@5.4.5|semver@5.7.2",
        "pug@2.0.4-tuxcare.2|shellwords@0.1.1",
        "pug@2.0.4-tuxcare.2|which@1.3.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|node-notifier@5.4.5|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|string-length@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|astral-regex@1.0.0",
        "pug@2.0.4-tuxcare.2|string-length@2.0.0|strip-ansi@4.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|string-length@2.0.0|strip-ansi@4.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|string-length@2.0.0|ansi-regex@3.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|string-length@2.0.0|ansi-regex@3.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|babel-plugin-istanbul@5.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/helper-plugin-utils@7.27.1",
        "pug@2.0.4-tuxcare.2|find-up@3.0.0",
        "pug@2.0.4-tuxcare.2|istanbul-lib-instrument@3.3.0",
        "pug@2.0.4-tuxcare.2|test-exclude@5.2.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|convert-source-map@1.9.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pirates@4.0.7"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|throat@4.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|anymatch@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|micromatch@3.1.10",
        "pug@2.0.4-tuxcare.2|normalize-path@2.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fb-watchman@2.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bser@2.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|invariant@2.2.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|loose-envify@1.4.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-serializer@24.9.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|sane@4.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@cnakazawa/watch@1.0.4",
        "pug@2.0.4-tuxcare.2|anymatch@2.0.0",
        "pug@2.0.4-tuxcare.2|capture-exit@2.0.0",
        "pug@2.0.4-tuxcare.2|exec-sh@0.3.6",
        "pug@2.0.4-tuxcare.2|execa@1.0.0",
        "pug@2.0.4-tuxcare.2|fb-watchman@2.0.2",
        "pug@2.0.4-tuxcare.2|micromatch@3.1.10",
        "pug@2.0.4-tuxcare.2|minimist@1.2.8",
        "pug@2.0.4-tuxcare.2|walker@1.0.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|walker@1.0.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|makeerror@1.0.12"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/code-frame@7.27.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/helper-validator-identifier@7.28.5",
        "pug@2.0.4-tuxcare.2|js-tokens@4.0.0",
        "pug@2.0.4-tuxcare.2|picocolors@1.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@types/stack-utils@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|stack-utils@1.0.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|stack-utils@1.0.5|escape-string-regexp@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|stack-utils@1.0.5|escape-string-regexp@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|browser-resolve@1.11.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|resolve@1.1.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-pnp-resolver@1.2.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|jest-resolve@24.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-docblock@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|detect-newline@2.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-leak-detector@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|jest-get-type@24.9.0",
        "pug@2.0.4-tuxcare.2|pretty-format@24.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|source-map-support@0.5.21",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|buffer-from@1.1.2",
        "pug@2.0.4-tuxcare.2|source-map@0.6.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-mock@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|strip-bom@3.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/types@7.28.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/helper-string-parser@7.27.1",
        "pug@2.0.4-tuxcare.2|@babel/helper-validator-identifier@7.28.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|expect@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|ansi-styles@3.2.1",
        "pug@2.0.4-tuxcare.2|jest-get-type@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-matcher-utils@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-message-util@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-regex-util@24.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-diff@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|diff-sequences@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-get-type@24.9.0",
        "pug@2.0.4-tuxcare.2|pretty-format@24.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-matcher-utils@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|jest-diff@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-get-type@24.9.0",
        "pug@2.0.4-tuxcare.2|pretty-format@24.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|natural-compare@1.4.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|arr-diff@4.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|array-unique@0.3.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|braces@2.3.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|arr-flatten@1.1.0",
        "pug@2.0.4-tuxcare.2|array-unique@0.3.2",
        "pug@2.0.4-tuxcare.2|braces@2.3.2|extend-shallow@2.0.1",
        "pug@2.0.4-tuxcare.2|fill-range@4.0.0",
        "pug@2.0.4-tuxcare.2|isobject@3.0.1",
        "pug@2.0.4-tuxcare.2|repeat-element@1.1.4",
        "pug@2.0.4-tuxcare.2|snapdragon-node@2.1.1",
        "pug@2.0.4-tuxcare.2|snapdragon@0.8.2",
        "pug@2.0.4-tuxcare.2|split-string@3.1.0",
        "pug@2.0.4-tuxcare.2|to-regex@3.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|braces@2.3.2|extend-shallow@2.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|braces@2.3.2|is-extendable@0.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|braces@2.3.2|is-extendable@0.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|define-property@2.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-descriptor@1.0.3",
        "pug@2.0.4-tuxcare.2|isobject@3.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|extend-shallow@3.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|assign-symbols@1.0.0",
        "pug@2.0.4-tuxcare.2|is-extendable@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|extglob@2.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|array-unique@0.3.2",
        "pug@2.0.4-tuxcare.2|extglob@2.0.4|define-property@1.0.0",
        "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4",
        "pug@2.0.4-tuxcare.2|extglob@2.0.4|extend-shallow@2.0.1",
        "pug@2.0.4-tuxcare.2|fragment-cache@0.2.1",
        "pug@2.0.4-tuxcare.2|regex-not@1.0.2",
        "pug@2.0.4-tuxcare.2|snapdragon@0.8.2",
        "pug@2.0.4-tuxcare.2|to-regex@3.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|extglob@2.0.4|define-property@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-descriptor@1.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|extglob@2.0.4|extend-shallow@2.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|extglob@2.0.4|is-extendable@0.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|extglob@2.0.4|is-extendable@0.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fragment-cache@0.2.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|map-cache@0.2.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|kind-of@6.0.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|nanomatch@1.2.13",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|arr-diff@4.0.0",
        "pug@2.0.4-tuxcare.2|array-unique@0.3.2",
        "pug@2.0.4-tuxcare.2|define-property@2.0.2",
        "pug@2.0.4-tuxcare.2|extend-shallow@3.0.2",
        "pug@2.0.4-tuxcare.2|fragment-cache@0.2.1",
        "pug@2.0.4-tuxcare.2|is-windows@1.0.2",
        "pug@2.0.4-tuxcare.2|kind-of@6.0.3",
        "pug@2.0.4-tuxcare.2|object.pick@1.3.0",
        "pug@2.0.4-tuxcare.2|regex-not@1.0.2",
        "pug@2.0.4-tuxcare.2|snapdragon@0.8.2",
        "pug@2.0.4-tuxcare.2|to-regex@3.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|object.pick@1.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|isobject@3.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|regex-not@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|extend-shallow@3.0.2",
        "pug@2.0.4-tuxcare.2|safe-regex@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|snapdragon@0.8.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|base@0.11.2",
        "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|debug@2.6.9",
        "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|define-property@0.2.5",
        "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|extend-shallow@2.0.1",
        "pug@2.0.4-tuxcare.2|map-cache@0.2.2",
        "pug@2.0.4-tuxcare.2|source-map-resolve@0.5.3",
        "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|source-map@0.5.7",
        "pug@2.0.4-tuxcare.2|use@3.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|debug@2.6.9",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|ms@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|define-property@0.2.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|is-descriptor@0.1.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|extend-shallow@2.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|is-extendable@0.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|source-map@0.5.7"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|ms@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|is-descriptor@0.1.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-accessor-descriptor@1.0.1",
        "pug@2.0.4-tuxcare.2|is-data-descriptor@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|snapdragon@0.8.2|is-extendable@0.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|to-regex@3.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|define-property@2.0.2",
        "pug@2.0.4-tuxcare.2|extend-shallow@3.0.2",
        "pug@2.0.4-tuxcare.2|regex-not@1.0.2",
        "pug@2.0.4-tuxcare.2|safe-regex@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|ansi-regex@4.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@types/istanbul-lib-report@3.0.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@types/istanbul-lib-coverage@2.0.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@types/yargs-parser@21.0.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|color-convert@1.9.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|color-name@1.1.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|has-flag@3.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/generator@7.28.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/parser@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/types@7.28.5",
        "pug@2.0.4-tuxcare.2|@jridgewell/gen-mapping@0.3.13",
        "pug@2.0.4-tuxcare.2|@jridgewell/trace-mapping@0.3.31",
        "pug@2.0.4-tuxcare.2|jsesc@3.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/helper-compilation-targets@7.27.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/compat-data@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/helper-validator-option@7.27.1",
        "pug@2.0.4-tuxcare.2|browserslist@4.27.0",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|semver@6.3.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/helper-module-transforms@7.28.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/core@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/helper-module-imports@7.27.1",
        "pug@2.0.4-tuxcare.2|@babel/helper-validator-identifier@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/traverse@7.28.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/helpers@7.28.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/template@7.27.2",
        "pug@2.0.4-tuxcare.2|@babel/types@7.28.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/parser@7.28.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/types@7.28.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/template@7.27.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/code-frame@7.27.1",
        "pug@2.0.4-tuxcare.2|@babel/parser@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/types@7.28.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/traverse@7.28.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/code-frame@7.27.1",
        "pug@2.0.4-tuxcare.2|@babel/generator@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/helper-globals@7.28.0",
        "pug@2.0.4-tuxcare.2|@babel/parser@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/template@7.27.2",
        "pug@2.0.4-tuxcare.2|@babel/types@7.28.5",
        "pug@2.0.4-tuxcare.2|debug@4.4.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@jridgewell/remapping@2.3.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jridgewell/gen-mapping@0.3.13",
        "pug@2.0.4-tuxcare.2|@jridgewell/trace-mapping@0.3.31"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|debug@4.4.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|ms@2.1.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|gensync@1.0.0-beta.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|json5@2.2.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@types/babel__core@7.20.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/parser@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/types@7.28.5",
        "pug@2.0.4-tuxcare.2|@types/babel__generator@7.27.0",
        "pug@2.0.4-tuxcare.2|@types/babel__template@7.4.4",
        "pug@2.0.4-tuxcare.2|@types/babel__traverse@7.28.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|babel-preset-jest@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/core@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/plugin-syntax-object-rest-spread@7.8.3",
        "pug@2.0.4-tuxcare.2|babel-plugin-jest-hoist@24.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jsdom@11.12.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|abab@2.0.6",
        "pug@2.0.4-tuxcare.2|acorn-globals@4.3.4",
        "pug@2.0.4-tuxcare.2|acorn@5.7.4",
        "pug@2.0.4-tuxcare.2|array-equal@1.0.2",
        "pug@2.0.4-tuxcare.2|cssom@0.3.8",
        "pug@2.0.4-tuxcare.2|cssstyle@1.4.0",
        "pug@2.0.4-tuxcare.2|data-urls@1.1.0",
        "pug@2.0.4-tuxcare.2|domexception@1.0.1",
        "pug@2.0.4-tuxcare.2|escodegen@1.14.3",
        "pug@2.0.4-tuxcare.2|html-encoding-sniffer@1.0.2",
        "pug@2.0.4-tuxcare.2|left-pad@1.3.0",
        "pug@2.0.4-tuxcare.2|nwsapi@2.2.22",
        "pug@2.0.4-tuxcare.2|parse5@4.0.0",
        "pug@2.0.4-tuxcare.2|pn@1.1.0",
        "pug@2.0.4-tuxcare.2|request-promise-native@1.0.9",
        "pug@2.0.4-tuxcare.2|request@2.88.2",
        "pug@2.0.4-tuxcare.2|sax@1.4.3",
        "pug@2.0.4-tuxcare.2|symbol-tree@3.2.4",
        "pug@2.0.4-tuxcare.2|tough-cookie@2.5.0",
        "pug@2.0.4-tuxcare.2|w3c-hr-time@1.0.2",
        "pug@2.0.4-tuxcare.2|webidl-conversions@4.0.2",
        "pug@2.0.4-tuxcare.2|whatwg-encoding@1.0.5",
        "pug@2.0.4-tuxcare.2|whatwg-mimetype@2.3.0",
        "pug@2.0.4-tuxcare.2|whatwg-url@6.5.0",
        "pug@2.0.4-tuxcare.2|ws@5.2.4",
        "pug@2.0.4-tuxcare.2|xml-name-validator@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|co@4.6.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-generator-fn@2.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jest-each@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jest/types@24.9.0",
        "pug@2.0.4-tuxcare.2|chalk@2.4.2",
        "pug@2.0.4-tuxcare.2|jest-get-type@24.9.0",
        "pug@2.0.4-tuxcare.2|jest-util@24.9.0",
        "pug@2.0.4-tuxcare.2|pretty-format@24.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|react-is@16.13.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind-apply-helpers@1.0.2",
        "pug@2.0.4-tuxcare.2|es-define-property@1.0.1",
        "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0",
        "pug@2.0.4-tuxcare.2|set-function-length@1.2.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|define-data-property@1.1.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|es-define-property@1.0.1",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|gopd@1.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|define-properties@1.2.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|define-data-property@1.1.4",
        "pug@2.0.4-tuxcare.2|has-property-descriptors@1.0.2",
        "pug@2.0.4-tuxcare.2|object-keys@1.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|es-errors@1.3.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|es-object-atoms@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|for-each@0.3.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-callable@1.2.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind-apply-helpers@1.0.2",
        "pug@2.0.4-tuxcare.2|es-define-property@1.0.1",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|es-object-atoms@1.1.1",
        "pug@2.0.4-tuxcare.2|function-bind@1.1.2",
        "pug@2.0.4-tuxcare.2|get-proto@1.0.1",
        "pug@2.0.4-tuxcare.2|gopd@1.2.0",
        "pug@2.0.4-tuxcare.2|has-symbols@1.1.0",
        "pug@2.0.4-tuxcare.2|hasown@2.0.2",
        "pug@2.0.4-tuxcare.2|math-intrinsics@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|has-proto@1.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|dunder-proto@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|has-symbols@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|object.getownpropertydescriptors@2.1.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|array.prototype.reduce@1.0.8",
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|define-properties@1.2.1",
        "pug@2.0.4-tuxcare.2|es-abstract@1.24.0",
        "pug@2.0.4-tuxcare.2|es-object-atoms@1.1.1",
        "pug@2.0.4-tuxcare.2|gopd@1.2.0",
        "pug@2.0.4-tuxcare.2|safe-array-concat@1.1.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|safe-array-concat@1.1.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0",
        "pug@2.0.4-tuxcare.2|has-symbols@1.1.0",
        "pug@2.0.4-tuxcare.2|isarray@2.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|wrap-ansi@5.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|ansi-styles@3.2.1",
        "pug@2.0.4-tuxcare.2|wrap-ansi@5.1.0|string-width@3.1.0",
        "pug@2.0.4-tuxcare.2|strip-ansi@5.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|wrap-ansi@5.1.0|string-width@3.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|emoji-regex@7.0.3",
        "pug@2.0.4-tuxcare.2|is-fullwidth-code-point@2.0.0",
        "pug@2.0.4-tuxcare.2|strip-ansi@5.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|emoji-regex@7.0.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-fullwidth-code-point@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|boom@2.10.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|hoek@2.16.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|cryptiles@2.0.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|boom@2.10.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|hoek@2.16.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|sntp@1.0.9",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|hoek@2.16.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|source-map-resolve@0.5.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|atob@2.1.2",
        "pug@2.0.4-tuxcare.2|decode-uri-component@0.2.2",
        "pug@2.0.4-tuxcare.2|resolve-url@0.2.1",
        "pug@2.0.4-tuxcare.2|source-map-url@0.4.1",
        "pug@2.0.4-tuxcare.2|urix@0.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|urix@0.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|cosmiconfig@5.2.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|import-fresh@2.0.0",
        "pug@2.0.4-tuxcare.2|is-directory@0.3.1",
        "pug@2.0.4-tuxcare.2|js-yaml@3.14.1",
        "pug@2.0.4-tuxcare.2|parse-json@4.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|dot-prop@4.2.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-obj@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|glob-parent@3.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-glob@3.1.0",
        "pug@2.0.4-tuxcare.2|path-dirname@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|load-json-file@4.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|parse-json@4.0.0",
        "pug@2.0.4-tuxcare.2|pify@3.0.0",
        "pug@2.0.4-tuxcare.2|strip-bom@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|cross-spawn@6.0.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|nice-try@1.0.5",
        "pug@2.0.4-tuxcare.2|path-key@2.0.1",
        "pug@2.0.4-tuxcare.2|cross-spawn@6.0.6|semver@5.7.2",
        "pug@2.0.4-tuxcare.2|shebang-command@1.2.0",
        "pug@2.0.4-tuxcare.2|which@1.3.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|cross-spawn@6.0.6|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|npm-run-path@2.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|path-key@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|strip-eof@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|proto-list@1.2.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|cmd-shim@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|read-cmd-shim@1.0.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|array-uniq@1.0.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|debuglog@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|dezalgo@1.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|asap@2.0.6",
        "pug@2.0.4-tuxcare.2|wrappy@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|wcwidth@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|defaults@1.0.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|cli-cursor@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|restore-cursor@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|cli-width@2.2.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|external-editor@3.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|chardet@0.7.0",
        "pug@2.0.4-tuxcare.2|iconv-lite@0.4.24",
        "pug@2.0.4-tuxcare.2|tmp@0.0.33"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|figures@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|escape-string-regexp@1.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mute-stream@0.0.7"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|run-async@2.4.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|rxjs@6.6.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|tslib@1.14.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|through@2.3.8"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lcid@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|invert-kv@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mem@4.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|map-age-cleaner@0.1.3",
        "pug@2.0.4-tuxcare.2|mem@4.3.0|mimic-fn@2.1.0",
        "pug@2.0.4-tuxcare.2|p-is-promise@2.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mem@4.3.0|mimic-fn@2.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|duplexer@0.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|path-type@3.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|pify@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@mrmlnc/readdir-enhanced@2.2.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-me-maybe@1.0.2",
        "pug@2.0.4-tuxcare.2|glob-to-regexp@0.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@nodelib/fs.stat@1.1.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|merge2@1.4.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|spdx-license-ids@3.0.22"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|spdx-exceptions@2.5.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-plain-obj@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|imurmurhash@0.1.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|ignore-walk@3.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|minimatch@3.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|npm-bundled@1.1.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|npm-normalize-package-bin@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fs-minipass@1.2.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|minipass@2.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|minizlib@1.3.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|minipass@2.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|yallist@3.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|compare-func@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|array-ify@1.0.0",
        "pug@2.0.4-tuxcare.2|compare-func@2.0.0|dot-prop@5.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|compare-func@2.0.0|dot-prop@5.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|compare-func@2.0.0|is-obj@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|compare-func@2.0.0|is-obj@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|q@1.5.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-changelog-writer@4.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|compare-func@2.0.0",
        "pug@2.0.4-tuxcare.2|conventional-commits-filter@2.0.7",
        "pug@2.0.4-tuxcare.2|dateformat@3.0.3",
        "pug@2.0.4-tuxcare.2|handlebars@4.7.8",
        "pug@2.0.4-tuxcare.2|json-stringify-safe@5.0.1",
        "pug@2.0.4-tuxcare.2|lodash@4.17.21",
        "pug@2.0.4-tuxcare.2|meow@8.1.2",
        "pug@2.0.4-tuxcare.2|semver@6.3.1",
        "pug@2.0.4-tuxcare.2|split@1.0.1",
        "pug@2.0.4-tuxcare.2|conventional-changelog-writer@4.1.0|through2@4.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-changelog-writer@4.1.0|through2@4.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|readable-stream@3.6.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-commits-parser@3.2.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-text-path@1.0.1",
        "pug@2.0.4-tuxcare.2|JSONStream@1.3.5",
        "pug@2.0.4-tuxcare.2|lodash@4.17.21",
        "pug@2.0.4-tuxcare.2|meow@8.1.2",
        "pug@2.0.4-tuxcare.2|split2@3.2.2",
        "pug@2.0.4-tuxcare.2|conventional-commits-parser@3.2.4|through2@4.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-commits-parser@3.2.4|through2@4.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|readable-stream@3.6.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|dateformat@3.0.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|hosted-git-info@2.8.9",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|meow@3.7.0",
        "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0",
        "pug@2.0.4-tuxcare.2|parse-github-repo-url@1.4.1",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|through2@2.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|meow@3.7.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|camelcase-keys@2.1.0",
        "pug@2.0.4-tuxcare.2|decamelize@1.2.0",
        "pug@2.0.4-tuxcare.2|loud-rejection@1.6.0",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|map-obj@1.0.1",
        "pug@2.0.4-tuxcare.2|minimist@1.2.8",
        "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0",
        "pug@2.0.4-tuxcare.2|object-assign@4.1.1",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|read-pkg-up@1.0.1",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|redent@1.0.0",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|trim-newlines@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|through2@2.0.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|readable-stream@2.3.8",
        "pug@2.0.4-tuxcare.2|xtend@4.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|camelcase-keys@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|camelcase@2.1.1",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|map-obj@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|map-obj@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|read-pkg-up@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|find-up@1.1.2",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|read-pkg@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|redent@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|indent-string@2.1.0",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|strip-indent@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|trim-newlines@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|readable-stream@2.3.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|core-util-is@1.0.2",
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|isarray@1.0.0",
        "pug@2.0.4-tuxcare.2|process-nextick-args@2.0.1",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|safe-buffer@5.1.2",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|string_decoder@1.1.1",
        "pug@2.0.4-tuxcare.2|util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|camelcase@2.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|find-up@1.1.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|path-exists@2.1.0",
        "pug@2.0.4-tuxcare.2|pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|read-pkg@1.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|load-json-file@1.1.0",
        "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|path-type@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|indent-string@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|repeating@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|strip-indent@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|get-stdin@4.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|isarray@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|safe-buffer@5.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|string_decoder@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|path-exists@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|load-json-file@1.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|parse-json@2.2.0",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|pify@2.3.0",
        "pug@2.0.4-tuxcare.2|pinkie-promise@2.0.1",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|strip-bom@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|path-type@1.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|pify@2.3.0",
        "pug@2.0.4-tuxcare.2|pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|parse-json@2.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|error-ex@1.3.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|pify@2.3.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-pkg-repo@1.4.0|strip-bom@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-utf8@0.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|dargs@4.1.0",
        "pug@2.0.4-tuxcare.2|lodash.template@4.5.0",
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|meow@4.0.1",
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|split2@2.2.0",
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|through2@2.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|meow@4.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|camelcase-keys@4.2.0",
        "pug@2.0.4-tuxcare.2|decamelize-keys@1.1.1",
        "pug@2.0.4-tuxcare.2|loud-rejection@1.6.0",
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|minimist-options@3.0.2",
        "pug@2.0.4-tuxcare.2|minimist@1.2.8",
        "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0",
        "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0",
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|redent@2.0.0",
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|trim-newlines@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|split2@2.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|through2@2.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|through2@2.0.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|readable-stream@2.3.8",
        "pug@2.0.4-tuxcare.2|xtend@4.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|camelcase-keys@4.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|camelcase@4.1.0",
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|map-obj@2.0.0",
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|quick-lru@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|minimist-options@3.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|arrify@1.0.1",
        "pug@2.0.4-tuxcare.2|is-plain-obj@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|redent@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|indent-string@3.2.0",
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|strip-indent@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|trim-newlines@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|readable-stream@2.3.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|core-util-is@1.0.2",
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|isarray@1.0.0",
        "pug@2.0.4-tuxcare.2|process-nextick-args@2.0.1",
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|safe-buffer@5.1.2",
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|string_decoder@1.1.1",
        "pug@2.0.4-tuxcare.2|util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|camelcase@4.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|map-obj@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|quick-lru@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|indent-string@3.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|strip-indent@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|isarray@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|safe-buffer@5.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|string_decoder@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|git-raw-commits@2.0.0|safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-remote-origin-url@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|gitconfiglocal@1.0.0",
        "pug@2.0.4-tuxcare.2|git-remote-origin-url@2.0.0|pify@2.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-remote-origin-url@2.0.0|pify@2.3.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|meow@4.0.1",
        "pug@2.0.4-tuxcare.2|semver@6.3.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|meow@4.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|camelcase-keys@4.2.0",
        "pug@2.0.4-tuxcare.2|decamelize-keys@1.1.1",
        "pug@2.0.4-tuxcare.2|loud-rejection@1.6.0",
        "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|minimist-options@3.0.2",
        "pug@2.0.4-tuxcare.2|minimist@1.2.8",
        "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0",
        "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0",
        "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|redent@2.0.0",
        "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|trim-newlines@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|camelcase-keys@4.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|camelcase@4.1.0",
        "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|map-obj@2.0.0",
        "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|quick-lru@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|minimist-options@3.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|arrify@1.0.1",
        "pug@2.0.4-tuxcare.2|is-plain-obj@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|redent@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|indent-string@3.2.0",
        "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|strip-indent@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|trim-newlines@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|camelcase@4.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|map-obj@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|quick-lru@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|indent-string@3.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|git-semver-tags@2.0.3|strip-indent@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0|find-up@2.1.0",
        "pug@2.0.4-tuxcare.2|read-pkg@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0|find-up@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0|locate-path@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0|locate-path@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0|p-locate@2.0.0",
        "pug@2.0.4-tuxcare.2|path-exists@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0|p-locate@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0|p-limit@1.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0|p-limit@1.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0|p-try@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|read-pkg-up@3.0.0|p-try@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|read-pkg@3.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|load-json-file@4.0.0",
        "pug@2.0.4-tuxcare.2|normalize-package-data@2.5.0",
        "pug@2.0.4-tuxcare.2|path-type@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|through2@3.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|readable-stream@3.6.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|concat-stream@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|buffer-from@1.1.2",
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|readable-stream@3.6.2",
        "pug@2.0.4-tuxcare.2|typedarray@0.0.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-changelog-preset-loader@2.3.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|conventional-commits-filter@2.0.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|lodash.ismatch@4.4.0",
        "pug@2.0.4-tuxcare.2|modify-values@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pump@3.0.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|end-of-stream@1.4.5",
        "pug@2.0.4-tuxcare.2|once@1.4.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|balanced-match@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|concat-map@0.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fs-vacuum@1.2.10",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|path-is-inside@1.0.2",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|iferr@0.1.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|path-is-inside@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|nopt@3.0.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|abbrev@1.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|isexe@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|os-homedir@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|os-tmpdir@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jsonparse@1.3.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|agentkeepalive@3.5.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|humanize-ms@1.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|cacache@11.3.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|bluebird@3.7.2",
        "pug@2.0.4-tuxcare.2|chownr@1.1.4",
        "pug@2.0.4-tuxcare.2|figgy-pudding@3.5.2",
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|lru-cache@5.1.1",
        "pug@2.0.4-tuxcare.2|mississippi@3.0.0",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|move-concurrently@1.0.1",
        "pug@2.0.4-tuxcare.2|promise-inflight@1.0.1",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
        "pug@2.0.4-tuxcare.2|ssri@6.0.2",
        "pug@2.0.4-tuxcare.2|unique-filename@1.1.1",
        "pug@2.0.4-tuxcare.2|y18n@4.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|http-cache-semantics@3.8.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|agent-base@4.3.0",
        "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0|debug@3.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0|debug@3.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0|ms@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|http-proxy-agent@2.1.0|ms@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|https-proxy-agent@2.2.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|agent-base@4.3.0",
        "pug@2.0.4-tuxcare.2|https-proxy-agent@2.2.4|debug@3.2.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|https-proxy-agent@2.2.4|debug@3.2.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|ms@2.1.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|node-fetch-npm@2.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|encoding@0.1.13",
        "pug@2.0.4-tuxcare.2|json-parse-better-errors@1.0.2",
        "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|socks-proxy-agent@4.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|socks-proxy-agent@4.0.2|agent-base@4.2.1",
        "pug@2.0.4-tuxcare.2|socks@2.3.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|socks-proxy-agent@4.0.2|agent-base@4.2.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|es6-promisify@5.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|delegates@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|wide-align@1.1.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|string-width@2.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|move-concurrently@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|aproba@1.2.0",
        "pug@2.0.4-tuxcare.2|copy-concurrently@1.0.5",
        "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
        "pug@2.0.4-tuxcare.2|run-queue@1.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|duplexify@3.7.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|end-of-stream@1.4.5",
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|duplexify@3.7.1|readable-stream@2.3.8",
        "pug@2.0.4-tuxcare.2|stream-shift@1.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|duplexify@3.7.1|readable-stream@2.3.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|core-util-is@1.0.2",
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|duplexify@3.7.1|isarray@1.0.0",
        "pug@2.0.4-tuxcare.2|process-nextick-args@2.0.1",
        "pug@2.0.4-tuxcare.2|duplexify@3.7.1|safe-buffer@5.1.2",
        "pug@2.0.4-tuxcare.2|duplexify@3.7.1|string_decoder@1.1.1",
        "pug@2.0.4-tuxcare.2|util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|duplexify@3.7.1|isarray@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|duplexify@3.7.1|safe-buffer@5.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|duplexify@3.7.1|string_decoder@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|duplexify@3.7.1|safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|end-of-stream@1.4.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|once@1.4.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|flush-write-stream@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|flush-write-stream@1.1.1|readable-stream@2.3.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|flush-write-stream@1.1.1|readable-stream@2.3.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|core-util-is@1.0.2",
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|flush-write-stream@1.1.1|isarray@1.0.0",
        "pug@2.0.4-tuxcare.2|process-nextick-args@2.0.1",
        "pug@2.0.4-tuxcare.2|flush-write-stream@1.1.1|safe-buffer@5.1.2",
        "pug@2.0.4-tuxcare.2|flush-write-stream@1.1.1|string_decoder@1.1.1",
        "pug@2.0.4-tuxcare.2|util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|flush-write-stream@1.1.1|isarray@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|flush-write-stream@1.1.1|safe-buffer@5.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|flush-write-stream@1.1.1|string_decoder@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|flush-write-stream@1.1.1|safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|from2@2.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|from2@2.3.0|readable-stream@2.3.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|from2@2.3.0|readable-stream@2.3.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|core-util-is@1.0.2",
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|from2@2.3.0|isarray@1.0.0",
        "pug@2.0.4-tuxcare.2|process-nextick-args@2.0.1",
        "pug@2.0.4-tuxcare.2|from2@2.3.0|safe-buffer@5.1.2",
        "pug@2.0.4-tuxcare.2|from2@2.3.0|string_decoder@1.1.1",
        "pug@2.0.4-tuxcare.2|util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|from2@2.3.0|isarray@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|from2@2.3.0|safe-buffer@5.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|from2@2.3.0|string_decoder@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|from2@2.3.0|safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|parallel-transform@1.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|cyclist@1.0.2",
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|parallel-transform@1.2.0|readable-stream@2.3.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|parallel-transform@1.2.0|readable-stream@2.3.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|core-util-is@1.0.2",
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|parallel-transform@1.2.0|isarray@1.0.0",
        "pug@2.0.4-tuxcare.2|process-nextick-args@2.0.1",
        "pug@2.0.4-tuxcare.2|parallel-transform@1.2.0|safe-buffer@5.1.2",
        "pug@2.0.4-tuxcare.2|parallel-transform@1.2.0|string_decoder@1.1.1",
        "pug@2.0.4-tuxcare.2|util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|parallel-transform@1.2.0|isarray@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|parallel-transform@1.2.0|safe-buffer@5.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|parallel-transform@1.2.0|string_decoder@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|parallel-transform@1.2.0|safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pumpify@1.5.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|duplexify@3.7.1",
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|pumpify@1.5.1|pump@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pumpify@1.5.1|pump@2.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|end-of-stream@1.4.5",
        "pug@2.0.4-tuxcare.2|once@1.4.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|stream-each@1.2.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|end-of-stream@1.4.5",
        "pug@2.0.4-tuxcare.2|stream-shift@1.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|err-code@1.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|retry@0.10.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|genfun@5.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|unique-slug@2.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|imurmurhash@0.1.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|core-js@2.6.12"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|regenerator-runtime@0.11.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|call-bind-apply-helpers@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|function-bind@1.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|function-bind@1.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|align-text@0.1.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|align-text@0.1.4|kind-of@3.2.2",
        "pug@2.0.4-tuxcare.2|longest@1.0.1",
        "pug@2.0.4-tuxcare.2|repeat-string@1.6.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|align-text@0.1.4|kind-of@3.2.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lazy-cache@1.0.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|core-util-is@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|p-locate@3.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|p-limit@2.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|make-dir@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|make-dir@2.1.0|pify@4.0.1",
        "pug@2.0.4-tuxcare.2|make-dir@2.1.0|semver@5.7.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|make-dir@2.1.0|pify@4.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|make-dir@2.1.0|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|html-escaper@2.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|merge-stream@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|growly@1.3.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-wsl@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|shellwords@0.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|astral-regex@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/helper-plugin-utils@7.27.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|test-exclude@5.2.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|glob@7.2.3",
        "pug@2.0.4-tuxcare.2|minimatch@3.1.2",
        "pug@2.0.4-tuxcare.2|test-exclude@5.2.3|read-pkg-up@4.0.0",
        "pug@2.0.4-tuxcare.2|require-main-filename@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|test-exclude@5.2.3|read-pkg-up@4.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|find-up@3.0.0",
        "pug@2.0.4-tuxcare.2|read-pkg@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|normalize-path@2.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|remove-trailing-separator@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|bser@2.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|node-int64@0.4.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|loose-envify@1.4.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|js-tokens@4.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@cnakazawa/watch@1.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|exec-sh@0.3.6",
        "pug@2.0.4-tuxcare.2|minimist@1.2.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|capture-exit@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|rsvp@4.8.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|exec-sh@0.3.6"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|makeerror@1.0.12",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|tmpl@1.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/helper-validator-identifier@7.28.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|js-tokens@4.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|picocolors@1.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|detect-newline@2.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|buffer-from@1.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/helper-string-parser@7.27.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|diff-sequences@24.9.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|arr-flatten@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fill-range@4.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|fill-range@4.0.0|extend-shallow@2.0.1",
        "pug@2.0.4-tuxcare.2|is-number@3.0.0",
        "pug@2.0.4-tuxcare.2|repeat-string@1.6.1",
        "pug@2.0.4-tuxcare.2|to-regex-range@2.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fill-range@4.0.0|extend-shallow@2.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|fill-range@4.0.0|is-extendable@0.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fill-range@4.0.0|is-extendable@0.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|isobject@3.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|repeat-element@1.1.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|snapdragon-node@2.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|snapdragon-node@2.1.1|define-property@1.0.0",
        "pug@2.0.4-tuxcare.2|isobject@3.0.1",
        "pug@2.0.4-tuxcare.2|snapdragon-util@3.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|snapdragon-node@2.1.1|define-property@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-descriptor@1.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|split-string@3.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|extend-shallow@3.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-descriptor@1.0.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-accessor-descriptor@1.0.1",
        "pug@2.0.4-tuxcare.2|is-data-descriptor@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|assign-symbols@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-extendable@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-plain-object@2.0.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|debug@2.6.9",
        "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|define-property@0.2.5",
        "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|extend-shallow@2.0.1",
        "pug@2.0.4-tuxcare.2|posix-character-classes@0.1.1",
        "pug@2.0.4-tuxcare.2|regex-not@1.0.2",
        "pug@2.0.4-tuxcare.2|snapdragon@0.8.2",
        "pug@2.0.4-tuxcare.2|to-regex@3.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|debug@2.6.9",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|ms@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|define-property@0.2.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|is-descriptor@0.1.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|extend-shallow@2.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|is-extendable@0.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|ms@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|is-descriptor@0.1.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-accessor-descriptor@1.0.1",
        "pug@2.0.4-tuxcare.2|is-data-descriptor@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|expand-brackets@2.1.4|is-extendable@0.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|map-cache@0.2.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-windows@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|safe-regex@1.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|ret@0.1.15"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|base@0.11.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|cache-base@1.0.1",
        "pug@2.0.4-tuxcare.2|class-utils@0.3.6",
        "pug@2.0.4-tuxcare.2|component-emitter@1.3.1",
        "pug@2.0.4-tuxcare.2|base@0.11.2|define-property@1.0.0",
        "pug@2.0.4-tuxcare.2|isobject@3.0.1",
        "pug@2.0.4-tuxcare.2|mixin-deep@1.3.2",
        "pug@2.0.4-tuxcare.2|pascalcase@0.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|base@0.11.2|define-property@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-descriptor@1.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|use@3.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|color-name@1.1.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@jridgewell/gen-mapping@0.3.13",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jridgewell/sourcemap-codec@1.5.5",
        "pug@2.0.4-tuxcare.2|@jridgewell/trace-mapping@0.3.31"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@jridgewell/trace-mapping@0.3.31",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@jridgewell/resolve-uri@3.1.2",
        "pug@2.0.4-tuxcare.2|@jridgewell/sourcemap-codec@1.5.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jsesc@3.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/compat-data@7.28.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/helper-validator-option@7.27.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|browserslist@4.27.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|baseline-browser-mapping@2.8.25",
        "pug@2.0.4-tuxcare.2|caniuse-lite@1.0.30001754",
        "pug@2.0.4-tuxcare.2|electron-to-chromium@1.5.245",
        "pug@2.0.4-tuxcare.2|node-releases@2.0.27",
        "pug@2.0.4-tuxcare.2|update-browserslist-db@1.1.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/helper-module-imports@7.27.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/traverse@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/types@7.28.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/helper-globals@7.28.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|ms@2.1.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@types/babel__generator@7.27.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/types@7.28.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@types/babel__template@7.4.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/parser@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/types@7.28.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@types/babel__traverse@7.28.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/types@7.28.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@babel/plugin-syntax-object-rest-spread@7.8.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/core@7.28.5",
        "pug@2.0.4-tuxcare.2|@babel/helper-plugin-utils@7.27.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|babel-plugin-jest-hoist@24.9.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@types/babel__traverse@7.28.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|abab@2.0.6"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|acorn-globals@4.3.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|acorn-walk@6.2.0",
        "pug@2.0.4-tuxcare.2|acorn-globals@4.3.4|acorn@6.4.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|acorn-globals@4.3.4|acorn@6.4.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|acorn@5.7.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|array-equal@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|cssom@0.3.8"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|cssstyle@1.4.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|cssom@0.3.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|data-urls@1.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|abab@2.0.6",
        "pug@2.0.4-tuxcare.2|whatwg-mimetype@2.3.0",
        "pug@2.0.4-tuxcare.2|data-urls@1.1.0|whatwg-url@7.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|data-urls@1.1.0|whatwg-url@7.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|lodash.sortby@4.7.0",
        "pug@2.0.4-tuxcare.2|tr46@1.0.1",
        "pug@2.0.4-tuxcare.2|webidl-conversions@4.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|domexception@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|webidl-conversions@4.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|escodegen@1.14.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|esprima@4.0.1",
        "pug@2.0.4-tuxcare.2|estraverse@4.3.0",
        "pug@2.0.4-tuxcare.2|esutils@2.0.3",
        "pug@2.0.4-tuxcare.2|optionator@0.8.3",
        "pug@2.0.4-tuxcare.2|source-map@0.6.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|html-encoding-sniffer@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|whatwg-encoding@1.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|left-pad@1.3.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|nwsapi@2.2.22"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|parse5@4.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pn@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|request-promise-native@1.0.9",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|request-promise-core@1.1.4",
        "pug@2.0.4-tuxcare.2|request@2.88.2",
        "pug@2.0.4-tuxcare.2|stealthy-require@1.1.1",
        "pug@2.0.4-tuxcare.2|tough-cookie@2.5.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|sax@1.4.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|symbol-tree@3.2.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|w3c-hr-time@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|browser-process-hrtime@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|whatwg-encoding@1.0.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|iconv-lite@0.4.24"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|whatwg-mimetype@2.3.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|whatwg-url@6.5.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|lodash.sortby@4.7.0",
        "pug@2.0.4-tuxcare.2|tr46@1.0.1",
        "pug@2.0.4-tuxcare.2|webidl-conversions@4.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|ws@5.2.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|async-limiter@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|xml-name-validator@3.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|es-define-property@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|set-function-length@1.2.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|define-data-property@1.1.4",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|function-bind@1.1.2",
        "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0",
        "pug@2.0.4-tuxcare.2|gopd@1.2.0",
        "pug@2.0.4-tuxcare.2|has-property-descriptors@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|has-property-descriptors@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|es-define-property@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|object-keys@1.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-callable@1.2.7"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-proto@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|dunder-proto@1.0.1",
        "pug@2.0.4-tuxcare.2|es-object-atoms@1.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|math-intrinsics@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|dunder-proto@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind-apply-helpers@1.0.2",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|gopd@1.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|array.prototype.reduce@1.0.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|define-properties@1.2.1",
        "pug@2.0.4-tuxcare.2|es-abstract@1.24.0",
        "pug@2.0.4-tuxcare.2|es-array-method-boxes-properly@1.0.0",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|es-object-atoms@1.1.1",
        "pug@2.0.4-tuxcare.2|is-string@1.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|es-abstract@1.24.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|array-buffer-byte-length@1.0.2",
        "pug@2.0.4-tuxcare.2|arraybuffer.prototype.slice@1.0.4",
        "pug@2.0.4-tuxcare.2|available-typed-arrays@1.0.7",
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|data-view-buffer@1.0.2",
        "pug@2.0.4-tuxcare.2|data-view-byte-length@1.0.2",
        "pug@2.0.4-tuxcare.2|data-view-byte-offset@1.0.1",
        "pug@2.0.4-tuxcare.2|es-define-property@1.0.1",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|es-object-atoms@1.1.1",
        "pug@2.0.4-tuxcare.2|es-set-tostringtag@2.1.0",
        "pug@2.0.4-tuxcare.2|es-to-primitive@1.3.0",
        "pug@2.0.4-tuxcare.2|function.prototype.name@1.1.8",
        "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0",
        "pug@2.0.4-tuxcare.2|get-proto@1.0.1",
        "pug@2.0.4-tuxcare.2|get-symbol-description@1.1.0",
        "pug@2.0.4-tuxcare.2|globalthis@1.0.4",
        "pug@2.0.4-tuxcare.2|gopd@1.2.0",
        "pug@2.0.4-tuxcare.2|has-property-descriptors@1.0.2",
        "pug@2.0.4-tuxcare.2|has-proto@1.2.0",
        "pug@2.0.4-tuxcare.2|has-symbols@1.1.0",
        "pug@2.0.4-tuxcare.2|hasown@2.0.2",
        "pug@2.0.4-tuxcare.2|internal-slot@1.1.0",
        "pug@2.0.4-tuxcare.2|is-array-buffer@3.0.5",
        "pug@2.0.4-tuxcare.2|is-callable@1.2.7",
        "pug@2.0.4-tuxcare.2|is-data-view@1.0.2",
        "pug@2.0.4-tuxcare.2|is-negative-zero@2.0.3",
        "pug@2.0.4-tuxcare.2|is-regex@1.2.1",
        "pug@2.0.4-tuxcare.2|is-set@2.0.3",
        "pug@2.0.4-tuxcare.2|is-shared-array-buffer@1.0.4",
        "pug@2.0.4-tuxcare.2|is-string@1.1.1",
        "pug@2.0.4-tuxcare.2|is-typed-array@1.1.15",
        "pug@2.0.4-tuxcare.2|is-weakref@1.1.1",
        "pug@2.0.4-tuxcare.2|math-intrinsics@1.1.0",
        "pug@2.0.4-tuxcare.2|object-inspect@1.13.4",
        "pug@2.0.4-tuxcare.2|object-keys@1.1.1",
        "pug@2.0.4-tuxcare.2|object.assign@4.1.7",
        "pug@2.0.4-tuxcare.2|own-keys@1.0.1",
        "pug@2.0.4-tuxcare.2|regexp.prototype.flags@1.5.4",
        "pug@2.0.4-tuxcare.2|safe-array-concat@1.1.3",
        "pug@2.0.4-tuxcare.2|safe-push-apply@1.0.0",
        "pug@2.0.4-tuxcare.2|safe-regex-test@1.1.0",
        "pug@2.0.4-tuxcare.2|set-proto@1.0.0",
        "pug@2.0.4-tuxcare.2|stop-iteration-iterator@1.1.0",
        "pug@2.0.4-tuxcare.2|string.prototype.trim@1.2.10",
        "pug@2.0.4-tuxcare.2|string.prototype.trimend@1.0.9",
        "pug@2.0.4-tuxcare.2|string.prototype.trimstart@1.0.8",
        "pug@2.0.4-tuxcare.2|typed-array-buffer@1.0.3",
        "pug@2.0.4-tuxcare.2|typed-array-byte-length@1.0.3",
        "pug@2.0.4-tuxcare.2|typed-array-byte-offset@1.0.4",
        "pug@2.0.4-tuxcare.2|typed-array-length@1.0.7",
        "pug@2.0.4-tuxcare.2|unbox-primitive@1.1.0",
        "pug@2.0.4-tuxcare.2|which-typed-array@1.1.19"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|isarray@2.0.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|json-stable-stringify@1.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|isarray@2.0.5",
        "pug@2.0.4-tuxcare.2|jsonify@0.0.1",
        "pug@2.0.4-tuxcare.2|object-keys@1.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|atob@2.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|decode-uri-component@0.2.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|resolve-url@0.2.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|source-map-url@0.4.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|import-fresh@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|caller-path@2.0.0",
        "pug@2.0.4-tuxcare.2|import-fresh@2.0.0|resolve-from@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|import-fresh@2.0.0|resolve-from@3.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-directory@0.3.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|parse-json@4.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|error-ex@1.3.4",
        "pug@2.0.4-tuxcare.2|json-parse-better-errors@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-obj@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-glob@3.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-extglob@2.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|path-dirname@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|nice-try@1.0.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|path-key@2.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|shebang-command@1.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|shebang-regex@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|defaults@1.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|defaults@1.0.4|clone@1.0.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|defaults@1.0.4|clone@1.0.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|restore-cursor@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|onetime@2.0.1",
        "pug@2.0.4-tuxcare.2|signal-exit@3.0.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|chardet@0.7.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|iconv-lite@0.4.24",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|tmp@0.0.33",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|tslib@1.14.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|invert-kv@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|map-age-cleaner@0.1.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|p-defer@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|p-is-promise@2.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|call-me-maybe@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|glob-to-regexp@0.3.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-extglob@2.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|array-ify@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|handlebars@4.7.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|minimist@1.2.8",
        "pug@2.0.4-tuxcare.2|neo-async@2.6.2",
        "pug@2.0.4-tuxcare.2|source-map@0.6.1",
        "pug@2.0.4-tuxcare.2|handlebars@4.7.8|uglify-js@3.19.3",
        "pug@2.0.4-tuxcare.2|wordwrap@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|handlebars@4.7.8|uglify-js@3.19.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@types/minimist@1.2.5",
        "pug@2.0.4-tuxcare.2|camelcase-keys@6.2.2",
        "pug@2.0.4-tuxcare.2|decamelize-keys@1.1.1",
        "pug@2.0.4-tuxcare.2|hard-rejection@2.1.0",
        "pug@2.0.4-tuxcare.2|minimist-options@4.1.0",
        "pug@2.0.4-tuxcare.2|meow@8.1.2|normalize-package-data@3.0.3",
        "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg-up@7.0.1",
        "pug@2.0.4-tuxcare.2|redent@3.0.0",
        "pug@2.0.4-tuxcare.2|trim-newlines@3.0.1",
        "pug@2.0.4-tuxcare.2|type-fest@0.18.1",
        "pug@2.0.4-tuxcare.2|yargs-parser@20.2.9"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|normalize-package-data@3.0.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|meow@8.1.2|hosted-git-info@4.1.0",
        "pug@2.0.4-tuxcare.2|is-core-module@2.16.1",
        "pug@2.0.4-tuxcare.2|meow@8.1.2|semver@7.7.3",
        "pug@2.0.4-tuxcare.2|validate-npm-package-license@3.0.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg-up@7.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|meow@8.1.2|find-up@4.1.0",
        "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg@5.2.0",
        "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg-up@7.0.1|type-fest@0.8.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg-up@7.0.1|type-fest@0.8.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|hosted-git-info@4.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|meow@8.1.2|lru-cache@6.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|semver@7.7.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|find-up@4.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|meow@8.1.2|locate-path@5.0.0",
        "pug@2.0.4-tuxcare.2|meow@8.1.2|path-exists@4.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg@5.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@types/normalize-package-data@2.4.4",
        "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg@5.2.0|normalize-package-data@2.5.0",
        "pug@2.0.4-tuxcare.2|meow@8.1.2|parse-json@5.2.0",
        "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg@5.2.0|type-fest@0.6.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg@5.2.0|normalize-package-data@2.5.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg@5.2.0|hosted-git-info@2.8.9",
        "pug@2.0.4-tuxcare.2|meow@8.1.2|resolve@1.22.11",
        "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg@5.2.0|semver@5.7.2",
        "pug@2.0.4-tuxcare.2|validate-npm-package-license@3.0.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg@5.2.0|type-fest@0.6.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg@5.2.0|hosted-git-info@2.8.9"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|read-pkg@5.2.0|semver@5.7.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|lru-cache@6.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|meow@8.1.2|yallist@4.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|locate-path@5.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|meow@8.1.2|p-locate@4.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|path-exists@4.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|parse-json@5.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|@babel/code-frame@7.27.1",
        "pug@2.0.4-tuxcare.2|error-ex@1.3.4",
        "pug@2.0.4-tuxcare.2|json-parse-even-better-errors@2.3.1",
        "pug@2.0.4-tuxcare.2|lines-and-columns@1.2.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|yallist@4.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|p-locate@4.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|p-limit@2.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|meow@8.1.2|resolve@1.22.11",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-core-module@2.16.1",
        "pug@2.0.4-tuxcare.2|path-parse@1.0.7",
        "pug@2.0.4-tuxcare.2|supports-preserve-symlinks-flag@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|split@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|through@2.3.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-text-path@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|text-extensions@1.9.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|split2@3.2.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|readable-stream@3.6.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|parse-github-repo-url@1.4.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|dargs@4.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lodash.template@4.5.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|lodash._reinterpolate@3.0.0",
        "pug@2.0.4-tuxcare.2|lodash.templatesettings@4.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|gitconfiglocal@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|ini@1.3.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|readable-stream@3.6.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|string_decoder@1.3.0",
        "pug@2.0.4-tuxcare.2|util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|typedarray@0.0.6"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lodash.ismatch@4.4.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|modify-values@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|decamelize-keys@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|decamelize@1.2.0",
        "pug@2.0.4-tuxcare.2|decamelize-keys@1.1.1|map-obj@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|decamelize-keys@1.1.1|map-obj@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|loud-rejection@1.6.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|currently-unhandled@0.4.1",
        "pug@2.0.4-tuxcare.2|signal-exit@3.0.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-core-module@2.16.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|hasown@2.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|path-parse@1.0.7"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|supports-preserve-symlinks-flag@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|abbrev@1.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|humanize-ms@1.2.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|ms@2.1.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|agent-base@4.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|es6-promisify@5.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|encoding@0.1.13",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|encoding@0.1.13|iconv-lite@0.6.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|encoding@0.1.13|iconv-lite@0.6.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|safer-buffer@2.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|json-parse-better-errors@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|socks@2.3.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|ip@1.1.5",
        "pug@2.0.4-tuxcare.2|smart-buffer@4.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|process-nextick-args@2.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|util-deprecate@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|code-point-at@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|copy-concurrently@1.0.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|aproba@1.2.0",
        "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10",
        "pug@2.0.4-tuxcare.2|iferr@0.1.5",
        "pug@2.0.4-tuxcare.2|mkdirp@0.5.6",
        "pug@2.0.4-tuxcare.2|rimraf@2.7.1",
        "pug@2.0.4-tuxcare.2|run-queue@1.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|graceful-fs@4.2.11",
        "pug@2.0.4-tuxcare.2|iferr@0.1.5",
        "pug@2.0.4-tuxcare.2|imurmurhash@0.1.4",
        "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10|readable-stream@2.3.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10|readable-stream@2.3.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|core-util-is@1.0.2",
        "pug@2.0.4-tuxcare.2|inherits@2.0.4",
        "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10|isarray@1.0.0",
        "pug@2.0.4-tuxcare.2|process-nextick-args@2.0.1",
        "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10|safe-buffer@5.1.2",
        "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10|string_decoder@1.1.1",
        "pug@2.0.4-tuxcare.2|util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10|isarray@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10|safe-buffer@5.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10|string_decoder@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|fs-write-stream-atomic@1.0.10|safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|run-queue@1.0.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|aproba@1.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|stream-shift@1.0.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|cyclist@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|xtend@4.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|longest@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|repeat-string@1.6.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|p-limit@2.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|p-try@2.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|remove-trailing-separator@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|node-int64@0.4.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|rsvp@4.8.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|tmpl@1.0.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-number@3.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-number@3.0.0|kind-of@3.2.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-number@3.0.0|kind-of@3.2.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|to-regex-range@2.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-number@3.0.0",
        "pug@2.0.4-tuxcare.2|repeat-string@1.6.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|snapdragon-util@3.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|snapdragon-util@3.0.1|kind-of@3.2.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|snapdragon-util@3.0.1|kind-of@3.2.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-accessor-descriptor@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|hasown@2.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-data-descriptor@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|hasown@2.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-plain-object@2.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|isobject@3.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|posix-character-classes@0.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|ret@0.1.15"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|cache-base@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|collection-visit@1.0.0",
        "pug@2.0.4-tuxcare.2|component-emitter@1.3.1",
        "pug@2.0.4-tuxcare.2|get-value@2.0.6",
        "pug@2.0.4-tuxcare.2|has-value@1.0.0",
        "pug@2.0.4-tuxcare.2|isobject@3.0.1",
        "pug@2.0.4-tuxcare.2|set-value@2.0.1",
        "pug@2.0.4-tuxcare.2|to-object-path@0.3.0",
        "pug@2.0.4-tuxcare.2|union-value@1.0.1",
        "pug@2.0.4-tuxcare.2|unset-value@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|class-utils@0.3.6",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|arr-union@3.1.0",
        "pug@2.0.4-tuxcare.2|class-utils@0.3.6|define-property@0.2.5",
        "pug@2.0.4-tuxcare.2|isobject@3.0.1",
        "pug@2.0.4-tuxcare.2|static-extend@0.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|class-utils@0.3.6|define-property@0.2.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|class-utils@0.3.6|is-descriptor@0.1.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|class-utils@0.3.6|is-descriptor@0.1.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-accessor-descriptor@1.0.1",
        "pug@2.0.4-tuxcare.2|is-data-descriptor@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|component-emitter@1.3.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mixin-deep@1.3.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|for-in@1.0.2",
        "pug@2.0.4-tuxcare.2|is-extendable@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pascalcase@0.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@jridgewell/sourcemap-codec@1.5.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@jridgewell/resolve-uri@3.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|baseline-browser-mapping@2.8.25"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|caniuse-lite@1.0.30001754"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|electron-to-chromium@1.5.245"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|node-releases@2.0.27"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|update-browserslist-db@1.1.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|browserslist@4.27.0",
        "pug@2.0.4-tuxcare.2|escalade@3.2.0",
        "pug@2.0.4-tuxcare.2|picocolors@1.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|acorn-walk@6.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|estraverse@4.3.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|optionator@0.8.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|deep-is@0.1.4",
        "pug@2.0.4-tuxcare.2|fast-levenshtein@2.0.6",
        "pug@2.0.4-tuxcare.2|levn@0.3.0",
        "pug@2.0.4-tuxcare.2|prelude-ls@1.1.2",
        "pug@2.0.4-tuxcare.2|type-check@0.3.2",
        "pug@2.0.4-tuxcare.2|word-wrap@1.2.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|request-promise-core@1.1.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|lodash@4.17.21",
        "pug@2.0.4-tuxcare.2|request@2.88.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|stealthy-require@1.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|browser-process-hrtime@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|async-limiter@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|es-array-method-boxes-properly@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-string@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|has-tostringtag@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|array-buffer-byte-length@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|is-array-buffer@3.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|arraybuffer.prototype.slice@1.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|array-buffer-byte-length@1.0.2",
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|define-properties@1.2.1",
        "pug@2.0.4-tuxcare.2|es-abstract@1.24.0",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0",
        "pug@2.0.4-tuxcare.2|is-array-buffer@3.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|available-typed-arrays@1.0.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|possible-typed-array-names@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|data-view-buffer@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|is-data-view@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|data-view-byte-length@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|is-data-view@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|data-view-byte-offset@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|is-data-view@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|es-set-tostringtag@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0",
        "pug@2.0.4-tuxcare.2|has-tostringtag@1.0.2",
        "pug@2.0.4-tuxcare.2|hasown@2.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|es-to-primitive@1.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-callable@1.2.7",
        "pug@2.0.4-tuxcare.2|is-date-object@1.1.0",
        "pug@2.0.4-tuxcare.2|is-symbol@1.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|function.prototype.name@1.1.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|define-properties@1.2.1",
        "pug@2.0.4-tuxcare.2|functions-have-names@1.2.3",
        "pug@2.0.4-tuxcare.2|hasown@2.0.2",
        "pug@2.0.4-tuxcare.2|is-callable@1.2.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-symbol-description@1.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|globalthis@1.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|define-properties@1.2.1",
        "pug@2.0.4-tuxcare.2|gopd@1.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|internal-slot@1.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|hasown@2.0.2",
        "pug@2.0.4-tuxcare.2|side-channel@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-array-buffer@3.0.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-data-view@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0",
        "pug@2.0.4-tuxcare.2|is-typed-array@1.1.15"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-negative-zero@2.0.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-set@2.0.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-shared-array-buffer@1.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-typed-array@1.1.15",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|which-typed-array@1.1.19"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-weakref@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|object-inspect@1.13.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|object.assign@4.1.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|define-properties@1.2.1",
        "pug@2.0.4-tuxcare.2|es-object-atoms@1.1.1",
        "pug@2.0.4-tuxcare.2|has-symbols@1.1.0",
        "pug@2.0.4-tuxcare.2|object-keys@1.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|own-keys@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0",
        "pug@2.0.4-tuxcare.2|object-keys@1.1.1",
        "pug@2.0.4-tuxcare.2|safe-push-apply@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|regexp.prototype.flags@1.5.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|define-properties@1.2.1",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|get-proto@1.0.1",
        "pug@2.0.4-tuxcare.2|gopd@1.2.0",
        "pug@2.0.4-tuxcare.2|set-function-name@2.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|safe-push-apply@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|isarray@2.0.5"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|safe-regex-test@1.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|is-regex@1.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|set-proto@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|dunder-proto@1.0.1",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|es-object-atoms@1.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|stop-iteration-iterator@1.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|internal-slot@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|string.prototype.trim@1.2.10",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|define-data-property@1.1.4",
        "pug@2.0.4-tuxcare.2|define-properties@1.2.1",
        "pug@2.0.4-tuxcare.2|es-abstract@1.24.0",
        "pug@2.0.4-tuxcare.2|es-object-atoms@1.1.1",
        "pug@2.0.4-tuxcare.2|has-property-descriptors@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|string.prototype.trimend@1.0.9",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|define-properties@1.2.1",
        "pug@2.0.4-tuxcare.2|es-object-atoms@1.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|string.prototype.trimstart@1.0.8",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|define-properties@1.2.1",
        "pug@2.0.4-tuxcare.2|es-object-atoms@1.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|typed-array-buffer@1.0.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|is-typed-array@1.1.15"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|typed-array-byte-length@1.0.3",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|for-each@0.3.5",
        "pug@2.0.4-tuxcare.2|gopd@1.2.0",
        "pug@2.0.4-tuxcare.2|has-proto@1.2.0",
        "pug@2.0.4-tuxcare.2|is-typed-array@1.1.15"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|typed-array-byte-offset@1.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|available-typed-arrays@1.0.7",
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|for-each@0.3.5",
        "pug@2.0.4-tuxcare.2|gopd@1.2.0",
        "pug@2.0.4-tuxcare.2|has-proto@1.2.0",
        "pug@2.0.4-tuxcare.2|is-typed-array@1.1.15",
        "pug@2.0.4-tuxcare.2|reflect.getprototypeof@1.0.10"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|typed-array-length@1.0.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|for-each@0.3.5",
        "pug@2.0.4-tuxcare.2|gopd@1.2.0",
        "pug@2.0.4-tuxcare.2|is-typed-array@1.1.15",
        "pug@2.0.4-tuxcare.2|possible-typed-array-names@1.1.0",
        "pug@2.0.4-tuxcare.2|reflect.getprototypeof@1.0.10"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|unbox-primitive@1.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|has-bigints@1.1.0",
        "pug@2.0.4-tuxcare.2|has-symbols@1.1.0",
        "pug@2.0.4-tuxcare.2|which-boxed-primitive@1.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|which-typed-array@1.1.19",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|available-typed-arrays@1.0.7",
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|for-each@0.3.5",
        "pug@2.0.4-tuxcare.2|get-proto@1.0.1",
        "pug@2.0.4-tuxcare.2|gopd@1.2.0",
        "pug@2.0.4-tuxcare.2|has-tostringtag@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|jsonify@0.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|caller-path@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|caller-callsite@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|error-ex@1.3.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-arrayish@0.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|shebang-regex@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|onetime@2.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|mimic-fn@1.2.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|p-defer@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|neo-async@2.6.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|wordwrap@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@types/minimist@1.2.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|camelcase-keys@6.2.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|camelcase@5.3.1",
        "pug@2.0.4-tuxcare.2|map-obj@4.3.0",
        "pug@2.0.4-tuxcare.2|quick-lru@4.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|hard-rejection@2.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|minimist-options@4.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|arrify@1.0.1",
        "pug@2.0.4-tuxcare.2|is-plain-obj@1.1.0",
        "pug@2.0.4-tuxcare.2|kind-of@6.0.3"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|redent@3.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|indent-string@4.0.0",
        "pug@2.0.4-tuxcare.2|strip-indent@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|trim-newlines@3.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|type-fest@0.18.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|yargs-parser@20.2.9"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|text-extensions@1.9.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|number-is-nan@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lodash._reinterpolate@3.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lodash.templatesettings@4.2.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|lodash._reinterpolate@3.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|string_decoder@1.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|currently-unhandled@0.4.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|array-find-index@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|es6-promisify@5.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|es6-promise@4.2.8"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|ip@1.1.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|smart-buffer@4.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-buffer@1.1.6"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|p-try@2.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|collection-visit@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|map-visit@1.0.0",
        "pug@2.0.4-tuxcare.2|object-visit@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-value@2.0.6"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|has-value@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|get-value@2.0.6",
        "pug@2.0.4-tuxcare.2|has-values@1.0.0",
        "pug@2.0.4-tuxcare.2|isobject@3.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|set-value@2.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|set-value@2.0.1|extend-shallow@2.0.1",
        "pug@2.0.4-tuxcare.2|set-value@2.0.1|is-extendable@0.1.1",
        "pug@2.0.4-tuxcare.2|is-plain-object@2.0.4",
        "pug@2.0.4-tuxcare.2|split-string@3.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|set-value@2.0.1|extend-shallow@2.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|set-value@2.0.1|is-extendable@0.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|set-value@2.0.1|is-extendable@0.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|to-object-path@0.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|to-object-path@0.3.0|kind-of@3.2.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|to-object-path@0.3.0|kind-of@3.2.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|union-value@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|arr-union@3.1.0",
        "pug@2.0.4-tuxcare.2|get-value@2.0.6",
        "pug@2.0.4-tuxcare.2|union-value@1.0.1|is-extendable@0.1.1",
        "pug@2.0.4-tuxcare.2|set-value@2.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|union-value@1.0.1|is-extendable@0.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|unset-value@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|unset-value@1.0.0|has-value@0.3.1",
        "pug@2.0.4-tuxcare.2|isobject@3.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|unset-value@1.0.0|has-value@0.3.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|get-value@2.0.6",
        "pug@2.0.4-tuxcare.2|unset-value@1.0.0|has-values@0.1.4",
        "pug@2.0.4-tuxcare.2|unset-value@1.0.0|has-value@0.3.1|isobject@2.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|unset-value@1.0.0|has-value@0.3.1|isobject@2.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|unset-value@1.0.0|isarray@1.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|unset-value@1.0.0|has-values@0.1.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|unset-value@1.0.0|isarray@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|arr-union@3.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|static-extend@0.1.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|static-extend@0.1.2|define-property@0.2.5",
        "pug@2.0.4-tuxcare.2|object-copy@0.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|static-extend@0.1.2|define-property@0.2.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|static-extend@0.1.2|is-descriptor@0.1.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|static-extend@0.1.2|is-descriptor@0.1.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-accessor-descriptor@1.0.1",
        "pug@2.0.4-tuxcare.2|is-data-descriptor@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|for-in@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|escalade@3.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|deep-is@0.1.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|fast-levenshtein@2.0.6"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|levn@0.3.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|prelude-ls@1.1.2",
        "pug@2.0.4-tuxcare.2|type-check@0.3.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|prelude-ls@1.1.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|type-check@0.3.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|prelude-ls@1.1.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|word-wrap@1.2.5"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|possible-typed-array-names@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-date-object@1.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|has-tostringtag@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-symbol@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|has-symbols@1.1.0",
        "pug@2.0.4-tuxcare.2|safe-regex-test@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|functions-have-names@1.2.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|side-channel@1.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|object-inspect@1.13.4",
        "pug@2.0.4-tuxcare.2|side-channel-list@1.0.0",
        "pug@2.0.4-tuxcare.2|side-channel-map@1.0.1",
        "pug@2.0.4-tuxcare.2|side-channel-weakmap@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|set-function-name@2.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|define-data-property@1.1.4",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|functions-have-names@1.2.3",
        "pug@2.0.4-tuxcare.2|has-property-descriptors@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|reflect.getprototypeof@1.0.10",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bind@1.0.8",
        "pug@2.0.4-tuxcare.2|define-properties@1.2.1",
        "pug@2.0.4-tuxcare.2|es-abstract@1.24.0",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|es-object-atoms@1.1.1",
        "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0",
        "pug@2.0.4-tuxcare.2|get-proto@1.0.1",
        "pug@2.0.4-tuxcare.2|which-builtin-type@1.2.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|has-bigints@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|which-boxed-primitive@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-bigint@1.1.0",
        "pug@2.0.4-tuxcare.2|is-boolean-object@1.2.2",
        "pug@2.0.4-tuxcare.2|is-number-object@1.1.1",
        "pug@2.0.4-tuxcare.2|is-string@1.1.1",
        "pug@2.0.4-tuxcare.2|is-symbol@1.1.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|caller-callsite@2.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|caller-callsite@2.0.0|callsites@2.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|caller-callsite@2.0.0|callsites@2.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-arrayish@0.2.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|mimic-fn@1.2.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|map-obj@4.3.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|quick-lru@4.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|indent-string@4.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|strip-indent@3.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|min-indent@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|array-find-index@1.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|es6-promise@4.2.8"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|map-visit@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|object-visit@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|object-visit@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|isobject@3.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|has-values@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-number@3.0.0",
        "pug@2.0.4-tuxcare.2|has-values@1.0.0|kind-of@4.0.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|has-values@1.0.0|kind-of@4.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|object-copy@0.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|copy-descriptor@0.1.1",
        "pug@2.0.4-tuxcare.2|object-copy@0.1.0|define-property@0.2.5",
        "pug@2.0.4-tuxcare.2|object-copy@0.1.0|kind-of@3.2.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|object-copy@0.1.0|define-property@0.2.5",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|object-copy@0.1.0|is-descriptor@0.1.7"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|object-copy@0.1.0|kind-of@3.2.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|object-copy@0.1.0|is-descriptor@0.1.7",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-accessor-descriptor@1.0.1",
        "pug@2.0.4-tuxcare.2|is-data-descriptor@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|side-channel-list@1.0.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|object-inspect@1.13.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|side-channel-map@1.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0",
        "pug@2.0.4-tuxcare.2|object-inspect@1.13.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|side-channel-weakmap@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|es-errors@1.3.0",
        "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0",
        "pug@2.0.4-tuxcare.2|object-inspect@1.13.4",
        "pug@2.0.4-tuxcare.2|side-channel-map@1.0.1"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|which-builtin-type@1.2.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|function.prototype.name@1.1.8",
        "pug@2.0.4-tuxcare.2|has-tostringtag@1.0.2",
        "pug@2.0.4-tuxcare.2|is-async-function@2.1.1",
        "pug@2.0.4-tuxcare.2|is-date-object@1.1.0",
        "pug@2.0.4-tuxcare.2|is-finalizationregistry@1.1.1",
        "pug@2.0.4-tuxcare.2|is-generator-function@1.1.2",
        "pug@2.0.4-tuxcare.2|is-regex@1.2.1",
        "pug@2.0.4-tuxcare.2|is-weakref@1.1.1",
        "pug@2.0.4-tuxcare.2|isarray@2.0.5",
        "pug@2.0.4-tuxcare.2|which-boxed-primitive@1.1.1",
        "pug@2.0.4-tuxcare.2|which-collection@1.0.2",
        "pug@2.0.4-tuxcare.2|which-typed-array@1.1.19"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-bigint@1.1.0",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|has-bigints@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-boolean-object@1.2.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|has-tostringtag@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-number-object@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|has-tostringtag@1.0.2"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|@types/normalize-package-data@2.4.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|min-indent@1.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pinkie-promise@2.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|pinkie@2.0.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|repeating@2.0.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-finite@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|get-stdin@4.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|copy-descriptor@0.1.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-async-function@2.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|async-function@1.0.0",
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|get-proto@1.0.1",
        "pug@2.0.4-tuxcare.2|has-tostringtag@1.0.2",
        "pug@2.0.4-tuxcare.2|safe-regex-test@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-finalizationregistry@1.1.1",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-generator-function@1.1.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|generator-function@2.0.1",
        "pug@2.0.4-tuxcare.2|get-proto@1.0.1",
        "pug@2.0.4-tuxcare.2|has-tostringtag@1.0.2",
        "pug@2.0.4-tuxcare.2|safe-regex-test@1.1.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|which-collection@1.0.2",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|is-map@2.0.3",
        "pug@2.0.4-tuxcare.2|is-set@2.0.3",
        "pug@2.0.4-tuxcare.2|is-weakmap@2.0.2",
        "pug@2.0.4-tuxcare.2|is-weakset@2.0.4"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|lines-and-columns@1.2.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|pinkie@2.0.4"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-finite@1.1.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|async-function@1.0.0"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|generator-function@2.0.1"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-map@2.0.3"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-weakmap@2.0.2"
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-weakset@2.0.4",
      "dependsOn": [
        "pug@2.0.4-tuxcare.2|call-bound@1.0.4",
        "pug@2.0.4-tuxcare.2|get-intrinsic@1.3.0"
      ]
    },
    {
      "ref": "pug@2.0.4-tuxcare.2|is-utf8@0.2.1"
    }
  ]
}