{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "version": 1,
  "serialNumber": "urn:uuid:b8b98eac-4cf9-4e5e-9e4c-36f38a4b16d4",
  "metadata": {
    "timestamp": "2026-01-26T18:09:00.381Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "npm",
          "version": "11.4.2"
        },
        {
          "type": "application",
          "name": "cyclonedx-npm",
          "group": "@cyclonedx",
          "version": "4.1.2",
          "author": "Jan Kowalleck",
          "description": "Create CycloneDX Software Bill of Materials (SBOM) from NPM projects.",
          "licenses": [
            {
              "license": {
                "id": "Apache-2.0"
              }
            }
          ],
          "externalReferences": [
            {
              "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ]
        },
        {
          "type": "library",
          "name": "cyclonedx-library",
          "group": "@cyclonedx",
          "version": "9.4.1",
          "author": "Jan Kowalleck",
          "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).",
          "licenses": [
            {
              "license": {
                "id": "Apache-2.0"
              }
            }
          ],
          "externalReferences": [
            {
              "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ]
        }
      ]
    },
    "component": {
      "type": "application",
      "name": "qs",
      "version": "4.0.0-tuxcare.3",
      "bom-ref": "qs@4.0.0-tuxcare.3",
      "description": "A querystring parser that supports nesting and arrays, with a depth limit",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/qs@4.0.0-tuxcare.3?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Fhapijs%2Fqs.git",
      "externalReferences": [
        {
          "url": "git+https://github.com/hapijs/qs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hapijs/qs",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hapijs/qs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": ""
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "name": "browserify",
      "version": "10.2.6",
      "bom-ref": "qs@4.0.0-tuxcare.3|browserify@10.2.6",
      "author": "James Halliday",
      "description": "browser-side require() the node way",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browserify@10.2.6",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/substack/node-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-browserify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browserify/-/browserify-10.2.6.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browserify"
        }
      ]
    },
    {
      "type": "library",
      "name": "code",
      "version": "1.5.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|code@1.5.0",
      "description": "assertion library",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/code@1.5.0",
      "externalReferences": [
        {
          "url": "git://github.com/hapijs/code.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hapijs/code#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hapijs/code/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/code/-/code-1.5.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/code"
        }
      ]
    },
    {
      "type": "library",
      "name": "lab",
      "version": "5.18.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|lab@5.18.1",
      "description": "Test utility",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lab@5.18.1",
      "externalReferences": [
        {
          "url": "git://github.com/hapijs/lab.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hapijs/lab#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hapijs/lab/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lab/-/lab-5.18.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lab"
        }
      ]
    },
    {
      "type": "library",
      "name": "assert",
      "version": "1.3.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|assert@1.3.0",
      "description": "commonjs assert - node.js api compatible",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/assert@1.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/defunctzombie/commonjs-assert.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/defunctzombie/commonjs-assert",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/defunctzombie/commonjs-assert/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/assert/-/assert-1.3.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/assert"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "util",
          "version": "0.10.3",
          "bom-ref": "qs@4.0.0-tuxcare.3|assert@1.3.0|util@0.10.3",
          "author": "Joyent",
          "description": "Node.JS util module",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/util@0.10.3",
          "externalReferences": [
            {
              "url": "git://github.com/defunctzombie/node-util.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/defunctzombie/node-util",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/defunctzombie/node-util/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/util/-/util-0.10.3.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/assert/node_modules/util"
            }
          ]
        },
        {
          "type": "library",
          "name": "inherits",
          "version": "2.0.1",
          "bom-ref": "qs@4.0.0-tuxcare.3|assert@1.3.0|inherits@2.0.1",
          "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/inherits@2.0.1",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/inherits.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/inherits#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/inherits/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/assert/node_modules/inherits"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "browser-pack",
      "version": "5.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|browser-pack@5.0.1",
      "author": "James Halliday",
      "description": "pack node-style source files from a json stream into a browser bundle",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browser-pack@5.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/substack/browser-pack.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/browser-pack",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/browser-pack/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browser-pack/-/browser-pack-5.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browser-pack"
        }
      ]
    },
    {
      "type": "library",
      "name": "browser-resolve",
      "version": "1.11.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|browser-resolve@1.11.3",
      "author": "Roman Shtylman",
      "description": "resolve which handles browser field support in package.json",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browser-resolve@1.11.3",
      "externalReferences": [
        {
          "url": "git://github.com/shtylman/node-browser-resolve.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/shtylman/node-browser-resolve#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/shtylman/node-browser-resolve/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browser-resolve/-/browser-resolve-1.11.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browser-resolve"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "resolve",
          "version": "1.1.7",
          "bom-ref": "qs@4.0.0-tuxcare.3|browser-resolve@1.11.3|resolve@1.1.7",
          "author": "James Halliday",
          "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/resolve@1.1.7",
          "externalReferences": [
            {
              "url": "git://github.com/substack/node-resolve.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/node-resolve#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/node-resolve/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/resolve/-/resolve-1.1.7.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/browser-resolve/node_modules/resolve"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "browserify-zlib",
      "version": "0.1.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|browserify-zlib@0.1.4",
      "author": "Devon Govett",
      "description": "Full zlib module for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browserify-zlib@0.1.4",
      "externalReferences": [
        {
          "url": "git://github.com/devongovett/browserify-zlib.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/devongovett/browserify-zlib#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/devongovett/browserify-zlib/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browserify-zlib/-/browserify-zlib-0.1.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browserify-zlib"
        }
      ]
    },
    {
      "type": "library",
      "name": "buffer",
      "version": "3.6.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|buffer@3.6.2",
      "author": "Feross Aboukhadijeh",
      "description": "Node.js Buffer API, for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/buffer@3.6.2",
      "externalReferences": [
        {
          "url": "git://github.com/feross/buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/buffer",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/buffer/-/buffer-3.6.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/buffer"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "isarray",
          "version": "1.0.0",
          "bom-ref": "qs@4.0.0-tuxcare.3|buffer@3.6.2|isarray@1.0.0",
          "author": "Julian Gruber",
          "description": "Array#isArray for older browsers",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isarray@1.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/isarray.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/isarray",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/isarray/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/buffer/node_modules/isarray"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "builtins",
      "version": "0.0.7",
      "bom-ref": "qs@4.0.0-tuxcare.3|builtins@0.0.7",
      "description": "List of node.js builtin modules",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/builtins@0.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/juliangruber/builtins.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/builtins#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/builtins/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/builtins/-/builtins-0.0.7.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/builtins"
        }
      ]
    },
    {
      "type": "library",
      "name": "commondir",
      "version": "0.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|commondir@0.0.1",
      "author": "James Halliday",
      "description": "Compute the closest common parent for file paths",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/commondir@0.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/substack/node-commondir.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-commondir#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-commondir/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/commondir/-/commondir-0.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/commondir"
        }
      ]
    },
    {
      "type": "library",
      "name": "concat-stream",
      "version": "1.4.11",
      "bom-ref": "qs@4.0.0-tuxcare.3|concat-stream@1.4.11",
      "author": "Max Ogden",
      "description": "writable stream that concatenates strings or binary data and calls a callback with the result",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/concat-stream@1.4.11",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/maxogden/concat-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/maxogden/concat-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/maxogden/concat-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.4.11.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/concat-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "console-browserify",
      "version": "1.2.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|console-browserify@1.2.0",
      "author": "Raynos",
      "description": "Emulate console for all the browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "http://github.com/browserify/console-browserify/raw/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/console-browserify@1.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/console-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/console-browserify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/console-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/console-browserify/-/console-browserify-1.2.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/console-browserify"
        }
      ]
    },
    {
      "type": "library",
      "name": "constants-browserify",
      "version": "0.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|constants-browserify@0.0.1",
      "author": "Julian Gruber",
      "description": "node's constants module for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/constants-browserify@0.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/constants-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/constants-browserify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/constants-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/constants-browserify/-/constants-browserify-0.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/constants-browserify"
        }
      ]
    },
    {
      "type": "library",
      "name": "crypto-browserify",
      "version": "3.12.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|crypto-browserify@3.12.1",
      "author": "Dominic Tarr",
      "description": "implementation of crypto for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/crypto-browserify@3.12.1",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/crypto-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/crypto-browserify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/crypto-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/crypto-browserify/-/crypto-browserify-3.12.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/crypto-browserify"
        }
      ]
    },
    {
      "type": "library",
      "name": "defined",
      "version": "1.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|defined@1.0.1",
      "author": "James Halliday",
      "description": "return the first argument that is `!== undefined`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/defined@1.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/defined.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/defined",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/defined/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/defined/-/defined-1.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/defined"
        }
      ]
    },
    {
      "type": "library",
      "name": "deps-sort",
      "version": "1.3.9",
      "bom-ref": "qs@4.0.0-tuxcare.3|deps-sort@1.3.9",
      "author": "James Halliday",
      "description": "sort module-deps output for deterministic browserify bundles",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/deps-sort@1.3.9",
      "externalReferences": [
        {
          "url": "git://github.com/substack/deps-sort.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/deps-sort",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/deps-sort/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/deps-sort/-/deps-sort-1.3.9.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/deps-sort"
        }
      ]
    },
    {
      "type": "library",
      "name": "domain-browser",
      "version": "1.1.7",
      "bom-ref": "qs@4.0.0-tuxcare.3|domain-browser@1.1.7",
      "author": "2013+ Bevry Pty Ltd",
      "description": "Node's domain module for the web browser. This is merely an evented try...catch with the same API as node, nothing more.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/domain-browser@1.1.7",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/bevry/domain-browser.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/bevry/domain-browser",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/bevry/domain-browser/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/domain-browser/-/domain-browser-1.1.7.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/domain-browser"
        }
      ]
    },
    {
      "type": "library",
      "name": "duplexer2",
      "version": "0.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|duplexer2@0.0.2",
      "author": "Conrad Pankoff",
      "description": "Like duplexer (http://npm.im/duplexer) but using streams2",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/duplexer2@0.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/deoxxa/duplexer2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/deoxxa/duplexer2#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/deoxxa/duplexer2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/duplexer2"
        }
      ]
    },
    {
      "type": "library",
      "name": "events",
      "version": "1.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|events@1.0.2",
      "author": "Irakli Gozalishvili",
      "description": "Node's event emitter for all engines.",
      "purl": "pkg:npm/events@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/Gozala/events.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Gozala/events#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/Gozala/events/issues/",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/events/-/events-1.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/events"
        }
      ]
    },
    {
      "type": "library",
      "name": "glob",
      "version": "4.5.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|glob@4.5.3",
      "author": "Isaac Z. Schlueter",
      "description": "a little globber",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/glob@4.5.3",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-glob.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/node-glob#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/node-glob/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/glob/-/glob-4.5.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/glob"
        }
      ]
    },
    {
      "type": "library",
      "name": "has",
      "version": "1.0.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|has@1.0.4",
      "author": "Thiago de Arruda",
      "description": "Object.prototype.hasOwnProperty.call shortcut",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        },
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/tarruda/has/blob/master/LICENSE-MIT"
          }
        }
      ],
      "purl": "pkg:npm/has@1.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/tarruda/has.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tarruda/has",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tarruda/has/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has/-/has-1.0.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has"
        }
      ]
    },
    {
      "type": "library",
      "name": "htmlescape",
      "version": "1.1.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|htmlescape@1.1.1",
      "author": "Andres Suarez",
      "description": "Properly escape JSON for usage as an object literal inside of a `<script>` tag",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/htmlescape@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/zertosh/htmlescape.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zertosh/htmlescape",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zertosh/htmlescape/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/htmlescape/-/htmlescape-1.1.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/htmlescape"
        }
      ]
    },
    {
      "type": "library",
      "name": "http-browserify",
      "version": "1.7.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|http-browserify@1.7.0",
      "author": "James Halliday",
      "description": "http module compatability for browserify",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/http-browserify@1.7.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/substack/http-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/http-browserify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/http-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/http-browserify/-/http-browserify-1.7.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/http-browserify"
        }
      ]
    },
    {
      "type": "library",
      "name": "https-browserify",
      "version": "0.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|https-browserify@0.0.1",
      "author": "James Halliday",
      "description": "https module compatability for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/https-browserify@0.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/substack/https-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/https-browserify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/https-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/https-browserify/-/https-browserify-0.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/https-browserify"
        }
      ]
    },
    {
      "type": "library",
      "name": "inherits",
      "version": "2.0.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|inherits@2.0.4",
      "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/inherits.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/inherits#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/inherits/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/inherits"
        }
      ]
    },
    {
      "type": "library",
      "name": "insert-module-globals",
      "version": "6.6.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|insert-module-globals@6.6.3",
      "author": "James Halliday",
      "description": "insert implicit module globals into a module-deps stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/insert-module-globals@6.6.3",
      "externalReferences": [
        {
          "url": "git://github.com/substack/insert-module-globals.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/insert-module-globals",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/insert-module-globals/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/insert-module-globals/-/insert-module-globals-6.6.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/insert-module-globals"
        }
      ]
    },
    {
      "type": "library",
      "name": "isarray",
      "version": "0.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|isarray@0.0.1",
      "author": "Julian Gruber",
      "description": "Array#isArray for older browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/isarray@0.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/isarray.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/isarray",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/isarray/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/isarray"
        }
      ]
    },
    {
      "type": "library",
      "name": "JSONStream",
      "version": "1.3.5",
      "bom-ref": "qs@4.0.0-tuxcare.3|JSONStream@1.3.5",
      "author": "Dominic Tarr",
      "description": "rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)",
      "licenses": [
        {
          "expression": "(MIT OR Apache-2.0)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/jsonstream@1.3.5",
      "externalReferences": [
        {
          "url": "git://github.com/dominictarr/JSONStream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/dominictarr/JSONStream",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dominictarr/JSONStream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/JSONStream/-/JSONStream-1.3.5.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/JSONStream"
        }
      ]
    },
    {
      "type": "library",
      "name": "labeled-stream-splicer",
      "version": "1.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|labeled-stream-splicer@1.0.2",
      "author": "James Halliday",
      "description": "stream splicer with labels",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/labeled-stream-splicer@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/substack/labeled-stream-splicer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/labeled-stream-splicer",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/labeled-stream-splicer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/labeled-stream-splicer/-/labeled-stream-splicer-1.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/labeled-stream-splicer"
        }
      ]
    },
    {
      "type": "library",
      "name": "module-deps",
      "version": "3.9.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|module-deps@3.9.1",
      "author": "James Halliday",
      "description": "walk the dependency graph to generate json output that can be fed into browser-pack",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/module-deps@3.9.1",
      "externalReferences": [
        {
          "url": "git://github.com/substack/module-deps.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/module-deps",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/module-deps/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/module-deps/-/module-deps-3.9.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/module-deps"
        }
      ]
    },
    {
      "type": "library",
      "name": "os-browserify",
      "version": "0.1.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|os-browserify@0.1.2",
      "author": "Drew Young",
      "description": "os-browserify =============",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/os-browserify@0.1.2",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/drewyoung1/os-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/drewyoung1/os-browserify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/drewyoung1/os-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/os-browserify/-/os-browserify-0.1.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/os-browserify"
        }
      ]
    },
    {
      "type": "library",
      "name": "parents",
      "version": "1.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|parents@1.0.1",
      "author": "James Halliday",
      "description": "return all the parent directories for a directory",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/parents@1.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/substack/node-parents.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-parents",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-parents/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/parents/-/parents-1.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/parents"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-browserify",
      "version": "0.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|path-browserify@0.0.1",
      "author": "James Halliday",
      "description": "the path module from node core for browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-browserify@0.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/substack/path-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/path-browserify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/path-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-browserify/-/path-browserify-0.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-browserify"
        }
      ]
    },
    {
      "type": "library",
      "name": "process",
      "version": "0.11.10",
      "bom-ref": "qs@4.0.0-tuxcare.3|process@0.11.10",
      "author": "Roman Shtylman",
      "description": "process information for node.js and browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/process@0.11.10",
      "externalReferences": [
        {
          "url": "git://github.com/shtylman/node-process.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/shtylman/node-process#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/shtylman/node-process/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/process/-/process-0.11.10.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/process"
        }
      ]
    },
    {
      "type": "library",
      "name": "punycode",
      "version": "1.4.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|punycode@1.4.1",
      "author": "Mathias Bynens",
      "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/punycode@1.4.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/bestiejs/punycode.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://mths.be/punycode",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/bestiejs/punycode.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/punycode"
        }
      ]
    },
    {
      "type": "library",
      "name": "querystring-es3",
      "version": "0.2.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|querystring-es3@0.2.1",
      "author": "Irakli Gozalishvili",
      "description": "Node's querystring module for all engines. (ES3 compat fork)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/Gozala/enchain/License.md"
          }
        }
      ],
      "purl": "pkg:npm/querystring-es3@0.2.1",
      "externalReferences": [
        {
          "url": "git://github.com/mike-spainhower/querystring.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mike-spainhower/querystring#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/mike-spainhower/querystring/issues/",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/querystring-es3/-/querystring-es3-0.2.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/querystring-es3"
        }
      ]
    },
    {
      "type": "library",
      "name": "read-only-stream",
      "version": "1.1.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|read-only-stream@1.1.1",
      "author": "James Halliday",
      "description": "wrap a readable/writable stream to be read-only",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/read-only-stream@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/substack/read-only-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/read-only-stream",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/read-only-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/read-only-stream/-/read-only-stream-1.1.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/read-only-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "readable-stream",
      "version": "1.1.14",
      "bom-ref": "qs@4.0.0-tuxcare.3|readable-stream@1.1.14",
      "author": "Isaac Z. Schlueter",
      "description": "Streams3, a user-land copy of the stream library from Node.js v0.11.x",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@1.1.14",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/readable-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/readable-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/readable-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/readable-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "resolve",
      "version": "1.22.11",
      "bom-ref": "qs@4.0.0-tuxcare.3|resolve@1.22.11",
      "author": "James Halliday",
      "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/resolve@1.22.11",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/browserify/resolve.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/resolve#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/resolve/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.22.11.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/resolve"
        }
      ]
    },
    {
      "type": "library",
      "name": "shasum",
      "version": "1.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|shasum@1.0.2",
      "author": "'Dominic Tarr'",
      "description": "Single function that return the sha1sum. Installing this is just a little bit quicker than reading the crypto documentation.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/shasum@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/dominictarr/shasum.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/dominictarr/shasum",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dominictarr/shasum/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/shasum/-/shasum-1.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/shasum"
        }
      ]
    },
    {
      "type": "library",
      "name": "shell-quote",
      "version": "0.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|shell-quote@0.0.1",
      "author": "James Halliday",
      "description": "quote and parse shell commands",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/shell-quote@0.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/substack/node-shell-quote.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-shell-quote#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-shell-quote/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/shell-quote/-/shell-quote-0.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/shell-quote"
        }
      ]
    },
    {
      "type": "library",
      "name": "stream-browserify",
      "version": "1.0.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|stream-browserify@1.0.0",
      "author": "James Halliday",
      "description": "the stream module from node core for browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stream-browserify@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/stream-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/stream-browserify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/stream-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stream-browserify/-/stream-browserify-1.0.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stream-browserify"
        }
      ]
    },
    {
      "type": "library",
      "name": "string_decoder",
      "version": "0.10.31",
      "bom-ref": "qs@4.0.0-tuxcare.3|string_decoder@0.10.31",
      "description": "The string_decoder module from Node core",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@0.10.31",
      "externalReferences": [
        {
          "url": "git://github.com/rvagg/string_decoder.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/rvagg/string_decoder",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/rvagg/string_decoder/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/string_decoder"
        }
      ]
    },
    {
      "type": "library",
      "name": "subarg",
      "version": "1.0.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|subarg@1.0.0",
      "author": "James Halliday",
      "description": "parse arguments with recursive contexts",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/subarg@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/subarg.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/subarg",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/subarg/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/subarg/-/subarg-1.0.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/subarg"
        }
      ]
    },
    {
      "type": "library",
      "name": "syntax-error",
      "version": "1.4.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|syntax-error@1.4.0",
      "author": "James Halliday",
      "description": "detect and report syntax errors in source code strings",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/syntax-error@1.4.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/node-syntax-error.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-syntax-error",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-syntax-error/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/syntax-error/-/syntax-error-1.4.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/syntax-error"
        }
      ]
    },
    {
      "type": "library",
      "name": "through2",
      "version": "1.1.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|through2@1.1.1",
      "author": "Rod Vagg",
      "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/through2@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/rvagg/through2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/rvagg/through2#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/rvagg/through2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/through2/-/through2-1.1.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/through2"
        }
      ]
    },
    {
      "type": "library",
      "name": "timers-browserify",
      "version": "1.4.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|timers-browserify@1.4.2",
      "author": "J. Ryan Stinnett",
      "description": "timers module for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/jryans/timers-browserify/blob/master/LICENSE.md"
          }
        }
      ],
      "purl": "pkg:npm/timers-browserify@1.4.2",
      "externalReferences": [
        {
          "url": "git://github.com/jryans/timers-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jryans/timers-browserify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jryans/timers-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/timers-browserify/-/timers-browserify-1.4.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/timers-browserify"
        }
      ]
    },
    {
      "type": "library",
      "name": "tty-browserify",
      "version": "0.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|tty-browserify@0.0.1",
      "author": "James Halliday",
      "description": "the tty module from node core for browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tty-browserify@0.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/tty-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/tty-browserify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/tty-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tty-browserify/-/tty-browserify-0.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tty-browserify"
        }
      ]
    },
    {
      "type": "library",
      "name": "url",
      "version": "0.10.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|url@0.10.3",
      "description": "The core `url` packaged standalone for use with Browserify.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/url@0.10.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/defunctzombie/node-url.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/defunctzombie/node-url#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/defunctzombie/node-url/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/url/-/url-0.10.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/url"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "punycode",
          "version": "1.3.2",
          "bom-ref": "qs@4.0.0-tuxcare.3|url@0.10.3|punycode@1.3.2",
          "author": "Mathias Bynens",
          "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/punycode@1.3.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/bestiejs/punycode.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://mths.be/punycode",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/bestiejs/punycode.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/punycode/-/punycode-1.3.2.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/url/node_modules/punycode"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "util",
      "version": "0.10.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|util@0.10.4",
      "author": "Joyent",
      "description": "Node.JS util module",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/util@0.10.4",
      "externalReferences": [
        {
          "url": "git://github.com/defunctzombie/node-util.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/defunctzombie/node-util",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/defunctzombie/node-util/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/util/-/util-0.10.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/util"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "inherits",
          "version": "2.0.3",
          "bom-ref": "qs@4.0.0-tuxcare.3|util@0.10.4|inherits@2.0.3",
          "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/inherits@2.0.3",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/inherits.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/inherits#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/inherits/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/util/node_modules/inherits"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "vm-browserify",
      "version": "0.0.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|vm-browserify@0.0.4",
      "author": "James Halliday",
      "description": "vm module for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/vm-browserify@0.0.4",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/substack/vm-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/vm-browserify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/vm-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/vm-browserify/-/vm-browserify-0.0.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/vm-browserify"
        }
      ]
    },
    {
      "type": "library",
      "name": "xtend",
      "version": "4.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|xtend@4.0.2",
      "author": "Raynos",
      "description": "extend like a boss",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/xtend@4.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/Raynos/xtend.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Raynos/xtend",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Raynos/xtend/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/xtend"
        }
      ]
    },
    {
      "type": "library",
      "name": "hoek",
      "version": "2.16.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|hoek@2.16.3",
      "description": "General purpose node utilities",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hoek@2.16.3",
      "externalReferences": [
        {
          "url": "git://github.com/hapijs/hoek.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hapijs/hoek#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hapijs/hoek/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hoek/-/hoek-2.16.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hoek"
        }
      ]
    },
    {
      "type": "library",
      "name": "bossy",
      "version": "1.0.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|bossy@1.0.3",
      "description": "Command line options parser",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "acknowledgement": "declared",
            "url": "http://github.com/hapijs/bossy/raw/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/bossy@1.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/hapijs/bossy.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hapijs/bossy#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hapijs/bossy/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/bossy/-/bossy-1.0.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/bossy"
        }
      ]
    },
    {
      "type": "library",
      "name": "diff",
      "version": "2.2.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|diff@2.2.3",
      "description": "A javascript text diff implementation.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/diff@2.2.3",
      "externalReferences": [
        {
          "url": "git://github.com/kpdecker/jsdiff.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kpdecker/jsdiff#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/kpdecker/jsdiff/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/diff/-/diff-2.2.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/diff"
        }
      ]
    },
    {
      "type": "library",
      "name": "eslint-config-hapi",
      "version": "2.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|eslint-config-hapi@2.0.1",
      "author": "Continuation Labs",
      "description": "Shareable ESLint config for the hapi ecosystem",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/eslint-config-hapi@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/continuationlabs/eslint-config-hapi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/continuationlabs/eslint-config-hapi",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/continuationlabs/eslint-config-hapi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/eslint-config-hapi/-/eslint-config-hapi-2.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/eslint-config-hapi"
        }
      ]
    },
    {
      "type": "library",
      "name": "eslint-plugin-hapi",
      "version": "1.2.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|eslint-plugin-hapi@1.2.2",
      "author": "Continuation Labs",
      "description": "ESLint plugin containing hapi style guide rules",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-hapi@1.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/continuationlabs/eslint-plugin-hapi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/continuationlabs/eslint-plugin-hapi",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/continuationlabs/eslint-plugin-hapi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/eslint-plugin-hapi/-/eslint-plugin-hapi-1.2.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/eslint-plugin-hapi"
        }
      ]
    },
    {
      "type": "library",
      "name": "eslint",
      "version": "1.5.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|eslint@1.5.1",
      "author": "Nicholas C. Zakas",
      "description": "An AST-based pattern checker for JavaScript.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/eslint@1.5.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/eslint/eslint.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://eslint.org",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/eslint/eslint/issues/",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/eslint/-/eslint-1.5.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/eslint"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "glob",
          "version": "5.0.15",
          "bom-ref": "qs@4.0.0-tuxcare.3|eslint@1.5.1|glob@5.0.15",
          "author": "Isaac Z. Schlueter",
          "description": "a little globber",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/glob@5.0.15",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/node-glob.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/node-glob#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/node-glob/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/glob/-/glob-5.0.15.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/eslint/node_modules/glob"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "espree",
      "version": "2.2.5",
      "bom-ref": "qs@4.0.0-tuxcare.3|espree@2.2.5",
      "author": "Nicholas C. Zakas",
      "description": "An actively-maintained fork of Esprima, the ECMAScript parsing infrastructure for multipurpose analysis",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "acknowledgement": "declared",
            "url": "http://github.com/nzakas/espree/raw/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/espree@2.2.5",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/eslint/espree.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/eslint/espree",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/eslint/espree.git",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/espree/-/espree-2.2.5.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/espree"
        }
      ]
    },
    {
      "type": "library",
      "name": "handlebars",
      "version": "4.7.8",
      "bom-ref": "qs@4.0.0-tuxcare.3|handlebars@4.7.8",
      "author": "Yehuda Katz",
      "description": "Handlebars provides the power necessary to let you build semantic templates effectively with no frustration",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/handlebars@4.7.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/handlebars-lang/handlebars.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://www.handlebarsjs.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/handlebars-lang/handlebars.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.8.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/handlebars"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "source-map",
          "version": "0.6.1",
          "bom-ref": "qs@4.0.0-tuxcare.3|handlebars@4.7.8|source-map@0.6.1",
          "author": "Nick Fitzgerald",
          "description": "Generates and consumes source maps",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/source-map@0.6.1",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/mozilla/source-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mozilla/source-map",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mozilla/source-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/handlebars/node_modules/source-map"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "items",
      "version": "1.1.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|items@1.1.1",
      "description": "Bare minimum async methods",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/items@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/hapijs/items.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hapijs/items#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hapijs/items/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/items/-/items-1.1.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/items"
        }
      ]
    },
    {
      "type": "library",
      "name": "jslint",
      "version": "0.9.8",
      "bom-ref": "qs@4.0.0-tuxcare.3|jslint@0.9.8",
      "author": "Reid Burke",
      "description": "The JavaScript Code Quality Tool",
      "licenses": [
        {
          "license": {
            "name": "Modified MIT / BSD",
            "acknowledgement": "declared",
            "url": "https://github.com/reid/node-jslint/blob/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/jslint@0.9.8",
      "externalReferences": [
        {
          "url": "git://github.com/reid/node-jslint.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/reid/node-jslint",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/reid/node-jslint/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jslint/-/jslint-0.9.8.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jslint"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "readable-stream",
          "version": "1.0.34",
          "bom-ref": "qs@4.0.0-tuxcare.3|jslint@0.9.8|readable-stream@1.0.34",
          "author": "Isaac Z. Schlueter",
          "description": "Streams2, a user-land copy of the stream library from Node.js v0.10.x",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@1.0.34",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/jslint/node_modules/readable-stream"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|json-stringify-safe@5.0.1",
      "author": "Isaac Z. Schlueter",
      "description": "Like JSON.stringify, but doesn't blow up on circular refs.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/json-stringify-safe.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/json-stringify-safe",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/json-stringify-safe/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/json-stringify-safe"
        }
      ]
    },
    {
      "type": "library",
      "name": "mkdirp",
      "version": "0.5.6",
      "bom-ref": "qs@4.0.0-tuxcare.3|mkdirp@0.5.6",
      "author": "James Halliday",
      "description": "Recursively mkdir, like `mkdir -p`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/substack/node-mkdirp.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-mkdirp#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-mkdirp/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mkdirp"
        }
      ]
    },
    {
      "type": "library",
      "name": "source-map-support",
      "version": "0.3.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|source-map-support@0.3.3",
      "description": "Fixes stack traces for files with source maps",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/source-map-support@0.3.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/evanw/node-source-map-support.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/evanw/node-source-map-support#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/evanw/node-source-map-support/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.3.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/source-map-support"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "source-map",
          "version": "0.1.32",
          "bom-ref": "qs@4.0.0-tuxcare.3|source-map-support@0.3.3|source-map@0.1.32",
          "author": "Nick Fitzgerald",
          "description": "Generates and consumes source maps",
          "licenses": [
            {
              "license": {
                "name": "BSD",
                "acknowledgement": "declared",
                "url": "http://opensource.org/licenses/BSD-3-Clause"
              }
            }
          ],
          "purl": "pkg:npm/source-map@0.1.32",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/mozilla/source-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mozilla/source-map",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mozilla/source-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/source-map/-/source-map-0.1.32.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/source-map-support/node_modules/source-map"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "combine-source-map",
      "version": "0.6.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|combine-source-map@0.6.1",
      "author": "Thorsten Lorenz",
      "description": "Add source maps of multiple files, offset them and then combine them into one source map",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/combine-source-map@0.6.1",
      "externalReferences": [
        {
          "url": "git://github.com/thlorenz/combine-source-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/thlorenz/combine-source-map",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/thlorenz/combine-source-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/combine-source-map/-/combine-source-map-0.6.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/combine-source-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "umd",
      "version": "3.0.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|umd@3.0.3",
      "author": "ForbesLindesay",
      "description": "Universal Module Definition for use in automated build systems",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/umd@3.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/ForbesLindesay/umd.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ForbesLindesay/umd#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ForbesLindesay/umd/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/umd/-/umd-3.0.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/umd"
        }
      ]
    },
    {
      "type": "library",
      "name": "pako",
      "version": "0.2.9",
      "bom-ref": "qs@4.0.0-tuxcare.3|pako@0.2.9",
      "description": "zlib port to javascript - fast, modularized, with browser support",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pako@0.2.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/nodeca/pako.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodeca/pako",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodeca/pako/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pako/-/pako-0.2.9.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pako"
        }
      ]
    },
    {
      "type": "library",
      "name": "base64-js",
      "version": "0.0.8",
      "bom-ref": "qs@4.0.0-tuxcare.3|base64-js@0.0.8",
      "author": "T. Jameson Little",
      "description": "Base64 encoding/decoding in pure JS",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/base64-js@0.0.8",
      "externalReferences": [
        {
          "url": "git://github.com/beatgammit/base64-js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/beatgammit/base64-js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/beatgammit/base64-js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/base64-js/-/base64-js-0.0.8.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/base64-js"
        }
      ]
    },
    {
      "type": "library",
      "name": "ieee754",
      "version": "1.2.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|ieee754@1.2.1",
      "author": "Feross Aboukhadijeh",
      "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ieee754@1.2.1",
      "externalReferences": [
        {
          "url": "git://github.com/feross/ieee754.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/ieee754#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/ieee754/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ieee754"
        }
      ]
    },
    {
      "type": "library",
      "name": "typedarray",
      "version": "0.0.7",
      "bom-ref": "qs@4.0.0-tuxcare.3|typedarray@0.0.7",
      "author": "James Halliday",
      "description": "TypedArray polyfill for old browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/typedarray@0.0.7",
      "externalReferences": [
        {
          "url": "git://github.com/es-shims/typedarray.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/typedarray",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/typedarray/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.7.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/typedarray"
        }
      ]
    },
    {
      "type": "library",
      "name": "browserify-cipher",
      "version": "1.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|browserify-cipher@1.0.1",
      "author": "Calvin Metcalf",
      "description": "ciphers for the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browserify-cipher@1.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/crypto-browserify/browserify-cipher.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-cipher#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-cipher/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browserify-cipher/-/browserify-cipher-1.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browserify-cipher"
        }
      ]
    },
    {
      "type": "library",
      "name": "browserify-sign",
      "version": "4.2.5",
      "bom-ref": "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5",
      "description": "adds node crypto signing for browsers",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browserify-sign@4.2.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/browserify-sign.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-sign#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-sign/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browserify-sign/-/browserify-sign-4.2.5.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browserify-sign"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "readable-stream",
          "version": "2.3.8",
          "bom-ref": "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5|readable-stream@2.3.8",
          "description": "Streams3, a user-land copy of the stream library from Node.js",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@2.3.8",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/browserify-sign/node_modules/readable-stream"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "safe-buffer",
              "version": "5.1.2",
              "bom-ref": "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5|readable-stream@2.3.8|safe-buffer@5.1.2",
              "author": "Feross Aboukhadijeh",
              "description": "Safer Node.js Buffer API",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/safe-buffer@5.1.2",
              "externalReferences": [
                {
                  "url": "git://github.com/feross/safe-buffer.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/feross/safe-buffer",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/feross/safe-buffer/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
                  "type": "distribution",
                  "comment": "as detected from npm-ls property \"resolved\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/browserify-sign/node_modules/readable-stream/node_modules/safe-buffer"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "isarray",
          "version": "1.0.0",
          "bom-ref": "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5|isarray@1.0.0",
          "author": "Julian Gruber",
          "description": "Array#isArray for older browsers",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isarray@1.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/isarray.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/isarray",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/isarray/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/browserify-sign/node_modules/isarray"
            }
          ]
        },
        {
          "type": "library",
          "name": "string_decoder",
          "version": "1.1.1",
          "bom-ref": "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5|string_decoder@1.1.1",
          "description": "The string_decoder module from Node core",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string_decoder@1.1.1",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/string_decoder.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/browserify-sign/node_modules/string_decoder"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "safe-buffer",
              "version": "5.1.2",
              "bom-ref": "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5|string_decoder@1.1.1|safe-buffer@5.1.2",
              "author": "Feross Aboukhadijeh",
              "description": "Safer Node.js Buffer API",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/safe-buffer@5.1.2",
              "externalReferences": [
                {
                  "url": "git://github.com/feross/safe-buffer.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/feross/safe-buffer",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/feross/safe-buffer/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
                  "type": "distribution",
                  "comment": "as detected from npm-ls property \"resolved\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/browserify-sign/node_modules/string_decoder/node_modules/safe-buffer"
                }
              ]
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "create-ecdh",
      "version": "4.0.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|create-ecdh@4.0.4",
      "author": "Calvin Metcalf",
      "description": "createECDH but browserifiable",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/create-ecdh@4.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/createECDH.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/createECDH",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/createECDH/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/create-ecdh/-/create-ecdh-4.0.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/create-ecdh"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "bn.js",
          "version": "4.12.2",
          "bom-ref": "qs@4.0.0-tuxcare.3|create-ecdh@4.0.4|bn.js@4.12.2",
          "author": "Fedor Indutny",
          "description": "Big number implementation in pure javascript",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/bn.js@4.12.2",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/indutny/bn.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/indutny/bn.js",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/indutny/bn.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/bn.js/-/bn.js-4.12.2.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/create-ecdh/node_modules/bn.js"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "create-hash",
      "version": "1.2.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|create-hash@1.2.0",
      "description": "create hashes for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/create-hash@1.2.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/crypto-browserify/createHash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/createHash",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/createHash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/create-hash/-/create-hash-1.2.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/create-hash"
        }
      ]
    },
    {
      "type": "library",
      "name": "create-hmac",
      "version": "1.1.7",
      "bom-ref": "qs@4.0.0-tuxcare.3|create-hmac@1.1.7",
      "description": "node style hmacs in the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/create-hmac@1.1.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/createHmac.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/createHmac",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/createHmac/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/create-hmac/-/create-hmac-1.1.7.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/create-hmac"
        }
      ]
    },
    {
      "type": "library",
      "name": "diffie-hellman",
      "version": "5.0.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|diffie-hellman@5.0.3",
      "author": "Calvin Metcalf",
      "description": "pure js diffie-hellman",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/diffie-hellman@5.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/diffie-hellman.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/diffie-hellman",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/diffie-hellman/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/diffie-hellman/-/diffie-hellman-5.0.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/diffie-hellman"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "bn.js",
          "version": "4.12.2",
          "bom-ref": "qs@4.0.0-tuxcare.3|diffie-hellman@5.0.3|bn.js@4.12.2",
          "author": "Fedor Indutny",
          "description": "Big number implementation in pure javascript",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/bn.js@4.12.2",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/indutny/bn.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/indutny/bn.js",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/indutny/bn.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/bn.js/-/bn.js-4.12.2.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/diffie-hellman/node_modules/bn.js"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "hash-base",
      "version": "3.0.5",
      "bom-ref": "qs@4.0.0-tuxcare.3|hash-base@3.0.5",
      "author": "Kirill Fomichev",
      "description": "abstract base class for hash-streams",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hash-base@3.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/hash-base.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/hash-base",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/hash-base/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hash-base/-/hash-base-3.0.5.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hash-base"
        }
      ]
    },
    {
      "type": "library",
      "name": "pbkdf2",
      "version": "3.1.5",
      "bom-ref": "qs@4.0.0-tuxcare.3|pbkdf2@3.1.5",
      "author": "Daniel Cousens",
      "description": "This library provides the functionality of PBKDF2 with the ability to use any supported hashing algorithm returned from crypto.getHashes()",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pbkdf2@3.1.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/browserify/pbkdf2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/pbkdf2",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/pbkdf2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pbkdf2/-/pbkdf2-3.1.5.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pbkdf2"
        }
      ]
    },
    {
      "type": "library",
      "name": "public-encrypt",
      "version": "4.0.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|public-encrypt@4.0.3",
      "author": "Calvin Metcalf",
      "description": "browserify version of publicEncrypt & privateDecrypt",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/public-encrypt@4.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/publicEncrypt.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/publicEncrypt",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/publicEncrypt/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/public-encrypt/-/public-encrypt-4.0.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/public-encrypt"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "bn.js",
          "version": "4.12.2",
          "bom-ref": "qs@4.0.0-tuxcare.3|public-encrypt@4.0.3|bn.js@4.12.2",
          "author": "Fedor Indutny",
          "description": "Big number implementation in pure javascript",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/bn.js@4.12.2",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/indutny/bn.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/indutny/bn.js",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/indutny/bn.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/bn.js/-/bn.js-4.12.2.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/public-encrypt/node_modules/bn.js"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "randombytes",
      "version": "2.1.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|randombytes@2.1.0",
      "description": "random bytes from browserify stand alone",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/randombytes@2.1.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/crypto-browserify/randombytes.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/randombytes",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/randombytes/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/randombytes"
        }
      ]
    },
    {
      "type": "library",
      "name": "randomfill",
      "version": "1.0.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|randomfill@1.0.4",
      "description": "random fill from browserify stand alone",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/randomfill@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/randomfill.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/randomfill",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/randomfill/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/randomfill/-/randomfill-1.0.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/randomfill"
        }
      ]
    },
    {
      "type": "library",
      "name": "inflight",
      "version": "1.0.6",
      "bom-ref": "qs@4.0.0-tuxcare.3|inflight@1.0.6",
      "author": "Isaac Z. Schlueter",
      "description": "Add callbacks to requests in flight to avoid async duplication",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/inflight.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/inflight",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/inflight/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/inflight"
        }
      ]
    },
    {
      "type": "library",
      "name": "minimatch",
      "version": "2.0.10",
      "bom-ref": "qs@4.0.0-tuxcare.3|minimatch@2.0.10",
      "author": "Isaac Z. Schlueter",
      "description": "a glob matcher in javascript",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minimatch@2.0.10",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/minimatch.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/minimatch#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/minimatch/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-2.0.10.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minimatch"
        }
      ]
    },
    {
      "type": "library",
      "name": "once",
      "version": "1.4.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|once@1.4.0",
      "author": "Isaac Z. Schlueter",
      "description": "Run a function exactly one time",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/once.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/once#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/once/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/once"
        }
      ]
    },
    {
      "type": "library",
      "name": "Base64",
      "version": "0.2.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|Base64@0.2.1",
      "author": "David Chambers",
      "description": "Base64 encoding and decoding",
      "licenses": [
        {
          "license": {
            "id": "WTFPL",
            "acknowledgement": "declared",
            "url": "https://raw.github.com/davidchambers/Base64.js/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/base64@0.2.1",
      "externalReferences": [
        {
          "url": "git://github.com/davidchambers/Base64.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/davidchambers/Base64.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/davidchambers/Base64.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/Base64/-/Base64-0.2.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/Base64"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-buffer",
      "version": "1.1.6",
      "bom-ref": "qs@4.0.0-tuxcare.3|is-buffer@1.1.6",
      "author": "Feross Aboukhadijeh",
      "description": "Determine if an object is a Buffer",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-buffer@1.1.6",
      "externalReferences": [
        {
          "url": "git://github.com/feross/is-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/is-buffer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/is-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-buffer"
        }
      ]
    },
    {
      "type": "library",
      "name": "lexical-scope",
      "version": "1.2.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|lexical-scope@1.2.0",
      "author": "James Halliday",
      "description": "detect global and local lexical identifiers from javascript source code",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lexical-scope@1.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/lexical-scope.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/lexical-scope",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/lexical-scope/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lexical-scope/-/lexical-scope-1.2.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lexical-scope"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsonparse",
      "version": "1.3.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|jsonparse@1.3.1",
      "author": "Tim Caswell",
      "description": "This is a pure-js JSON streaming parser for node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsonparse@1.3.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/creationix/jsonparse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/creationix/jsonparse#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/creationix/jsonparse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsonparse/-/jsonparse-1.3.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsonparse"
        }
      ]
    },
    {
      "type": "library",
      "name": "through",
      "version": "2.3.8",
      "bom-ref": "qs@4.0.0-tuxcare.3|through@2.3.8",
      "author": "Dominic Tarr",
      "description": "simplified stream construction",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/through@2.3.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/dominictarr/through.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/dominictarr/through",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dominictarr/through/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/through/-/through-2.3.8.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/through"
        }
      ]
    },
    {
      "type": "library",
      "name": "stream-splicer",
      "version": "1.3.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|stream-splicer@1.3.2",
      "author": "James Halliday",
      "description": "streaming pipeline with a mutable configuration",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stream-splicer@1.3.2",
      "externalReferences": [
        {
          "url": "git://github.com/substack/stream-splicer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/stream-splicer",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/stream-splicer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stream-splicer/-/stream-splicer-1.3.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stream-splicer"
        }
      ]
    },
    {
      "type": "library",
      "name": "detective",
      "version": "4.7.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|detective@4.7.1",
      "author": "James Halliday",
      "description": "find all require() calls by walking the AST",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/detective@4.7.1",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/detective.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/detective#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/detective/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/detective/-/detective-4.7.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/detective"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "acorn",
          "version": "5.7.4",
          "bom-ref": "qs@4.0.0-tuxcare.3|detective@4.7.1|acorn@5.7.4",
          "description": "ECMAScript parser",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/acorn@5.7.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/acornjs/acorn.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/acornjs/acorn",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/acornjs/acorn/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/acorn/-/acorn-5.7.4.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/detective/node_modules/acorn"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "stream-combiner2",
      "version": "1.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|stream-combiner2@1.0.2",
      "author": "'Dominic Tarr'",
      "description": "This is a sequel to [stream-combiner](https://npmjs.org/package/stream-combiner) for streams2.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stream-combiner2@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/substack/stream-combiner2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/stream-combiner2",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/stream-combiner2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stream-combiner2/-/stream-combiner2-1.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stream-combiner2"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "through2",
          "version": "0.5.1",
          "bom-ref": "qs@4.0.0-tuxcare.3|stream-combiner2@1.0.2|through2@0.5.1",
          "author": "Rod Vagg",
          "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/through2@0.5.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/rvagg/through2.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/rvagg/through2#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/rvagg/through2/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/through2/-/through2-0.5.1.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/stream-combiner2/node_modules/through2"
            }
          ]
        },
        {
          "type": "library",
          "name": "readable-stream",
          "version": "1.0.34",
          "bom-ref": "qs@4.0.0-tuxcare.3|stream-combiner2@1.0.2|readable-stream@1.0.34",
          "author": "Isaac Z. Schlueter",
          "description": "Streams2, a user-land copy of the stream library from Node.js v0.10.x",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@1.0.34",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/stream-combiner2/node_modules/readable-stream"
            }
          ]
        },
        {
          "type": "library",
          "name": "xtend",
          "version": "3.0.0",
          "bom-ref": "qs@4.0.0-tuxcare.3|stream-combiner2@1.0.2|xtend@3.0.0",
          "author": "Raynos",
          "description": "extend like a boss",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared",
                "url": "http://github.com/raynos/xtend/raw/master/LICENSE"
              }
            }
          ],
          "purl": "pkg:npm/xtend@3.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/Raynos/xtend.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/Raynos/xtend",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/Raynos/xtend/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/xtend/-/xtend-3.0.0.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/stream-combiner2/node_modules/xtend"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "path-platform",
      "version": "0.11.15",
      "bom-ref": "qs@4.0.0-tuxcare.3|path-platform@0.11.15",
      "author": "Timothy J Fontaine",
      "description": "Provide access to win32 and posix path operations; sourced directly from upstream Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-platform@0.11.15",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/tjfontaine/node-path-platform.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/tjfontaine/node-path-platform",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/tjfontaine/node-path-platform/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-platform/-/path-platform-0.11.15.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-platform"
        }
      ]
    },
    {
      "type": "library",
      "name": "readable-wrap",
      "version": "1.0.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|readable-wrap@1.0.0",
      "author": "James Halliday",
      "description": "upgrade streams1 to streams2 streams as a standalone module",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/readable-wrap@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/readable-wrap.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/readable-wrap",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/readable-wrap/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/readable-wrap/-/readable-wrap-1.0.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/readable-wrap"
        }
      ]
    },
    {
      "type": "library",
      "name": "core-util-is",
      "version": "1.0.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|core-util-is@1.0.3",
      "author": "Isaac Z. Schlueter",
      "description": "The `util.is*` functions introduced in Node v0.12.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/core-util-is.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/core-util-is#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/core-util-is/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/core-util-is"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-core-module",
      "version": "2.16.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|is-core-module@2.16.1",
      "author": "Jordan Harband",
      "description": "Is this specifier a node.js core module?",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-core-module@2.16.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/is-core-module.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-core-module",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-core-module/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-core-module/-/is-core-module-2.16.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-core-module"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-parse",
      "version": "1.0.7",
      "bom-ref": "qs@4.0.0-tuxcare.3|path-parse@1.0.7",
      "author": "Javier Blanco",
      "description": "Node.js path.parse() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/jbgutierrez/path-parse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jbgutierrez/path-parse#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jbgutierrez/path-parse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-parse"
        }
      ]
    },
    {
      "type": "library",
      "name": "supports-preserve-symlinks-flag",
      "version": "1.0.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|supports-preserve-symlinks-flag@1.0.0",
      "author": "Jordan Harband",
      "description": "Determine if the current node version supports the `--preserve-symlinks` flag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/node-supports-preserve-symlinks-flag.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/node-supports-preserve-symlinks-flag/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/supports-preserve-symlinks-flag"
        }
      ]
    },
    {
      "type": "library",
      "name": "json-stable-stringify",
      "version": "0.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|json-stable-stringify@0.0.1",
      "author": "James Halliday",
      "description": "deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/json-stable-stringify@0.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/substack/json-stable-stringify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/json-stable-stringify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/json-stable-stringify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-0.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/json-stable-stringify"
        }
      ]
    },
    {
      "type": "library",
      "name": "sha.js",
      "version": "2.4.12",
      "bom-ref": "qs@4.0.0-tuxcare.3|sha.js@2.4.12",
      "author": "Dominic Tarr",
      "description": "Streamable SHA hashes in pure javascript",
      "licenses": [
        {
          "expression": "(MIT AND BSD-3-Clause)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/sha.js@2.4.12",
      "externalReferences": [
        {
          "url": "git://github.com/crypto-browserify/sha.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/sha.js",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/sha.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/sha.js/-/sha.js-2.4.12.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/sha.js"
        }
      ]
    },
    {
      "type": "library",
      "name": "minimist",
      "version": "1.2.8",
      "bom-ref": "qs@4.0.0-tuxcare.3|minimist@1.2.8",
      "author": "James Halliday",
      "description": "parse argument options",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minimist@1.2.8",
      "externalReferences": [
        {
          "url": "git://github.com/minimistjs/minimist.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/minimistjs/minimist",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/minimistjs/minimist/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minimist"
        }
      ]
    },
    {
      "type": "library",
      "name": "acorn-node",
      "version": "1.8.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|acorn-node@1.8.2",
      "author": "Renée Kooi",
      "description": "the acorn javascript parser, preloaded with plugins for syntax parity with recent node versions",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/acorn-node@1.8.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/browserify/acorn-node.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/acorn-node",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/acorn-node/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/acorn-node/-/acorn-node-1.8.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/acorn-node"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "acorn",
          "version": "7.4.1",
          "bom-ref": "qs@4.0.0-tuxcare.3|acorn-node@1.8.2|acorn@7.4.1",
          "description": "ECMAScript parser",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/acorn@7.4.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/acornjs/acorn.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/acornjs/acorn",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/acornjs/acorn/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/acorn/-/acorn-7.4.1.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/acorn-node/node_modules/acorn"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "querystring",
      "version": "0.2.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|querystring@0.2.0",
      "author": "Irakli Gozalishvili",
      "description": "Node's querystring module for all engines.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/Gozala/enchain/License.md"
          }
        }
      ],
      "purl": "pkg:npm/querystring@0.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/Gozala/querystring.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Gozala/querystring#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/Gozala/querystring/issues/",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/querystring/-/querystring-0.2.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/querystring"
        }
      ]
    },
    {
      "type": "library",
      "name": "indexof",
      "version": "0.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|indexof@0.0.1",
      "description": "Microsoft sucks",
      "purl": "pkg:npm/indexof@0.0.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/indexof/-/indexof-0.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/indexof"
        }
      ]
    },
    {
      "type": "library",
      "name": "hapi-capitalize-modules",
      "version": "1.1.6",
      "bom-ref": "qs@4.0.0-tuxcare.3|hapi-capitalize-modules@1.1.6",
      "author": "Continuation Labs",
      "description": "ESLint rule to enforce the capitalization of imported module variables",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hapi-capitalize-modules@1.1.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/continuationlabs/hapi-capitalize-modules.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/continuationlabs/hapi-capitalize-modules#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/continuationlabs/hapi-capitalize-modules/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hapi-capitalize-modules/-/hapi-capitalize-modules-1.1.6.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hapi-capitalize-modules"
        }
      ]
    },
    {
      "type": "library",
      "name": "hapi-scope-start",
      "version": "1.1.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|hapi-scope-start@1.1.4",
      "author": "Continuation Labs",
      "description": "ESLint rule to enforce new line at the beginning of function scope",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hapi-scope-start@1.1.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/continuationlabs/hapi-scope-start.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/continuationlabs/hapi-scope-start",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/continuationlabs/hapi-scope-start/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hapi-scope-start/-/hapi-scope-start-1.1.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hapi-scope-start"
        }
      ]
    },
    {
      "type": "library",
      "name": "no-shadow-relaxed",
      "version": "1.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|no-shadow-relaxed@1.0.1",
      "author": "Wyatt Preul",
      "description": "ESLint rule for preventing variable shadowing, with options for more relaxed enforcement",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/no-shadow-relaxed@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/geek/eslint-no-shadow.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/geek/eslint-no-shadow",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/geek/eslint-no-shadow/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/no-shadow-relaxed/-/no-shadow-relaxed-1.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/no-shadow-relaxed"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "eslint",
          "version": "0.24.1",
          "bom-ref": "qs@4.0.0-tuxcare.3|no-shadow-relaxed@1.0.1|eslint@0.24.1",
          "author": "Nicholas C. Zakas",
          "description": "An AST-based pattern checker for JavaScript.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/eslint@0.24.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/eslint/eslint.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "http://eslint.org",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/eslint/eslint/issues/",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/eslint/-/eslint-0.24.1.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/no-shadow-relaxed/node_modules/eslint"
            }
          ]
        },
        {
          "type": "library",
          "name": "doctrine",
          "version": "0.6.4",
          "bom-ref": "qs@4.0.0-tuxcare.3|no-shadow-relaxed@1.0.1|doctrine@0.6.4",
          "description": "JSDoc parser",
          "licenses": [
            {
              "license": {
                "name": "BSD",
                "acknowledgement": "declared",
                "url": "http://github.com/Constellation/doctrine/raw/master/LICENSE.BSD"
              }
            }
          ],
          "purl": "pkg:npm/doctrine@0.6.4",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/Constellation/doctrine.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "http://github.com/Constellation/doctrine.html",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/Constellation/doctrine/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/doctrine/-/doctrine-0.6.4.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/no-shadow-relaxed/node_modules/doctrine"
            }
          ]
        },
        {
          "type": "library",
          "name": "inquirer",
          "version": "0.8.5",
          "bom-ref": "qs@4.0.0-tuxcare.3|no-shadow-relaxed@1.0.1|inquirer@0.8.5",
          "author": "Simon Boudrias",
          "description": "A collection of common interactive command line user interfaces.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/inquirer@0.8.5",
          "externalReferences": [
            {
              "url": "git+https://github.com/SBoudrias/Inquirer.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/SBoudrias/Inquirer.js#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/SBoudrias/Inquirer.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/inquirer/-/inquirer-0.8.5.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/no-shadow-relaxed/node_modules/inquirer"
            }
          ]
        },
        {
          "type": "library",
          "name": "ansi-regex",
          "version": "1.1.1",
          "bom-ref": "qs@4.0.0-tuxcare.3|no-shadow-relaxed@1.0.1|ansi-regex@1.1.1",
          "author": "Sindre Sorhus",
          "description": "Regular expression for matching ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ansi-regex@1.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/ansi-regex.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/ansi-regex#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/ansi-regex/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-1.1.1.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/no-shadow-relaxed/node_modules/ansi-regex"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "chalk",
      "version": "1.1.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|chalk@1.1.3",
      "description": "Terminal string styling done right. Much color.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/chalk@1.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/chalk.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/chalk#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/chalk/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/chalk"
        }
      ]
    },
    {
      "type": "library",
      "name": "debug",
      "version": "2.6.9",
      "bom-ref": "qs@4.0.0-tuxcare.3|debug@2.6.9",
      "author": "TJ Holowaychuk",
      "description": "small debugging utility",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/debug@2.6.9",
      "externalReferences": [
        {
          "url": "git://github.com/visionmedia/debug.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/visionmedia/debug#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/visionmedia/debug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/debug"
        }
      ]
    },
    {
      "type": "library",
      "name": "doctrine",
      "version": "0.7.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|doctrine@0.7.2",
      "description": "JSDoc parser",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "acknowledgement": "declared",
            "url": "http://github.com/eslint/doctrine/raw/master/LICENSE.BSD"
          }
        }
      ],
      "purl": "pkg:npm/doctrine@0.7.2",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/eslint/doctrine.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/eslint/doctrine",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/eslint/doctrine/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/doctrine/-/doctrine-0.7.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/doctrine"
        }
      ]
    },
    {
      "type": "library",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "bom-ref": "qs@4.0.0-tuxcare.3|escape-string-regexp@1.0.5",
      "author": "Sindre Sorhus",
      "description": "Escape RegExp special characters",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/escape-string-regexp.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/escape-string-regexp#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/escape-string-regexp/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/escape-string-regexp"
        }
      ]
    },
    {
      "type": "library",
      "name": "escope",
      "version": "3.6.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|escope@3.6.0",
      "description": "ECMAScript scope analyzer",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/escope@3.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/estools/escope.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/estools/escope",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/estools/escope/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/escope/-/escope-3.6.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/escope"
        }
      ]
    },
    {
      "type": "library",
      "name": "estraverse-fb",
      "version": "1.3.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|estraverse-fb@1.3.2",
      "author": "Ingvar Stepanyan",
      "description": "Drop-in for estraverse that enables traversal over React's JSX nodes.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/estraverse-fb@1.3.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/RReverser/estraverse-fb.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/RReverser/estraverse-fb#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/RReverser/estraverse-fb/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/estraverse-fb/-/estraverse-fb-1.3.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/estraverse-fb"
        }
      ]
    },
    {
      "type": "library",
      "name": "estraverse",
      "version": "4.3.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|estraverse@4.3.0",
      "description": "ECMAScript JS AST traversal functions",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/estraverse@4.3.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/estools/estraverse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/estools/estraverse",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/estools/estraverse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-4.3.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/estraverse"
        }
      ]
    },
    {
      "type": "library",
      "name": "file-entry-cache",
      "version": "1.3.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|file-entry-cache@1.3.1",
      "author": "Roy Riojas",
      "description": "Super simple cache for file metadata, useful for process that work o a given series of files and that only need to repeat the job on the changed ones since the previous run of the process",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/file-entry-cache@1.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/royriojas/file-entry-cache.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/royriojas/file-entry-cache#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/royriojas/file-entry-cache/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-1.3.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/file-entry-cache"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "object-assign",
          "version": "4.1.1",
          "bom-ref": "qs@4.0.0-tuxcare.3|file-entry-cache@1.3.1|object-assign@4.1.1",
          "author": "Sindre Sorhus",
          "description": "ES2015 `Object.assign()` ponyfill",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/object-assign@4.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/object-assign.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/object-assign#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/object-assign/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/file-entry-cache/node_modules/object-assign"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "globals",
      "version": "8.18.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|globals@8.18.0",
      "author": "Sindre Sorhus",
      "description": "Global identifiers from different JavaScript environments",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/globals@8.18.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/globals.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/globals#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/globals/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/globals/-/globals-8.18.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/globals"
        }
      ]
    },
    {
      "type": "library",
      "name": "inquirer",
      "version": "0.9.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|inquirer@0.9.0",
      "author": "Simon Boudrias",
      "description": "A collection of common interactive command line user interfaces.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/inquirer@0.9.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/SBoudrias/Inquirer.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/SBoudrias/Inquirer.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/SBoudrias/Inquirer.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/inquirer/-/inquirer-0.9.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/inquirer"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-my-json-valid",
      "version": "2.20.6",
      "bom-ref": "qs@4.0.0-tuxcare.3|is-my-json-valid@2.20.6",
      "description": "A [JSONSchema](https://json-schema.org/) validator that uses code generation to be extremely fast.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-my-json-valid@2.20.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/mafintosh/is-my-json-valid.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mafintosh/is-my-json-valid#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mafintosh/is-my-json-valid/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-my-json-valid/-/is-my-json-valid-2.20.6.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-my-json-valid"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-resolvable",
      "version": "1.1.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|is-resolvable@1.1.0",
      "author": "Shinnosuke Watanabe",
      "description": "Check if a module ID is resolvable with require()",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-resolvable@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/shinnn/is-resolvable.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/shinnn/is-resolvable#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/shinnn/is-resolvable/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-resolvable/-/is-resolvable-1.1.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-resolvable"
        }
      ]
    },
    {
      "type": "library",
      "name": "js-yaml",
      "version": "3.14.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|js-yaml@3.14.2",
      "author": "Vladimir Zapparov",
      "description": "YAML 1.2 parser and serializer",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/js-yaml@3.14.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/nodeca/js-yaml.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodeca/js-yaml",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodeca/js-yaml/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.14.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/js-yaml"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "esprima",
          "version": "4.0.1",
          "bom-ref": "qs@4.0.0-tuxcare.3|js-yaml@3.14.2|esprima@4.0.1",
          "author": "Ariya Hidayat",
          "description": "ECMAScript parsing infrastructure for multipurpose analysis",
          "licenses": [
            {
              "license": {
                "id": "BSD-2-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/esprima@4.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jquery/esprima.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "http://esprima.org",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jquery/esprima/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/js-yaml/node_modules/esprima"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.clonedeep",
      "version": "3.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash.clonedeep@3.0.2",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s `_.cloneDeep` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.clonedeep@3.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.clonedeep/-/lodash.clonedeep-3.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.clonedeep"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.merge",
      "version": "3.3.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash.merge@3.3.2",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s `_.merge` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.merge@3.3.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.merge/-/lodash.merge-3.3.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.merge"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.omit",
      "version": "3.1.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash.omit@3.1.0",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s `_.omit` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.omit@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.omit/-/lodash.omit-3.1.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.omit"
        }
      ]
    },
    {
      "type": "library",
      "name": "object-assign",
      "version": "2.1.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|object-assign@2.1.1",
      "author": "Sindre Sorhus",
      "description": "ES6 Object.assign() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/object-assign@2.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/object-assign.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/object-assign#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/object-assign/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-2.1.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/object-assign"
        }
      ]
    },
    {
      "type": "library",
      "name": "optionator",
      "version": "0.5.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|optionator@0.5.0",
      "author": "George Zahariev",
      "description": "option parsing and help generation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://raw.githubusercontent.com/gkz/optionator/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/optionator@0.5.0",
      "externalReferences": [
        {
          "url": "git://github.com/gkz/optionator.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/gkz/optionator",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/gkz/optionator/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/optionator/-/optionator-0.5.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/optionator"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "wordwrap",
          "version": "0.0.3",
          "bom-ref": "qs@4.0.0-tuxcare.3|optionator@0.5.0|wordwrap@0.0.3",
          "author": "James Halliday",
          "description": "Wrap those words. Show them at what columns to start and stop.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/wordwrap@0.0.3",
          "externalReferences": [
            {
              "url": "git://github.com/substack/node-wordwrap.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/node-wordwrap#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/node-wordwrap/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/optionator/node_modules/wordwrap"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|path-is-absolute@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Node.js 0.12 path.isAbsolute() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/path-is-absolute.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/path-is-absolute#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/path-is-absolute/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-is-absolute"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-is-inside",
      "version": "1.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|path-is-inside@1.0.2",
      "author": "Domenic Denicola",
      "description": "Tests whether one path is inside another path",
      "licenses": [
        {
          "expression": "(WTFPL OR MIT)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/path-is-inside@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/domenic/path-is-inside.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/domenic/path-is-inside#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/domenic/path-is-inside/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-is-inside"
        }
      ]
    },
    {
      "type": "library",
      "name": "shelljs",
      "version": "0.3.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|shelljs@0.3.0",
      "author": "Artur Adib",
      "description": "Portable Unix shell commands for Node.js",
      "licenses": [
        {
          "license": {
            "name": "BSD*",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/shelljs@0.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/arturadib/shelljs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/arturadib/shelljs",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/arturadib/shelljs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/shelljs/-/shelljs-0.3.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/shelljs"
        }
      ]
    },
    {
      "type": "library",
      "name": "strip-json-comments",
      "version": "1.0.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|strip-json-comments@1.0.4",
      "author": "Sindre Sorhus",
      "description": "Strip comments from JSON. Lets you use comments in your JSON files!",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/strip-json-comments@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/strip-json-comments.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-json-comments#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-json-comments/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-1.0.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/strip-json-comments"
        }
      ]
    },
    {
      "type": "library",
      "name": "text-table",
      "version": "0.2.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|text-table@0.2.0",
      "author": "James Halliday",
      "description": "borderless text tables with alignment",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/text-table@0.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/text-table.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/text-table",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/text-table/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/text-table"
        }
      ]
    },
    {
      "type": "library",
      "name": "to-double-quotes",
      "version": "1.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|to-double-quotes@1.0.2",
      "author": "Sindre Sorhus",
      "description": "Convert matching single-quotes to double-quotes: I 'love' unicorns => I \"love\" unicorns",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/to-double-quotes@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/to-double-quotes.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/to-double-quotes#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/to-double-quotes/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/to-double-quotes/-/to-double-quotes-1.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/to-double-quotes"
        }
      ]
    },
    {
      "type": "library",
      "name": "to-single-quotes",
      "version": "1.0.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|to-single-quotes@1.0.4",
      "author": "Sindre Sorhus",
      "description": "Convert matching double-quotes to single-quotes: I \"love\" unicorns => I 'love' unicorns",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/to-single-quotes@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/to-single-quotes.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/to-single-quotes#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/to-single-quotes/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/to-single-quotes/-/to-single-quotes-1.0.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/to-single-quotes"
        }
      ]
    },
    {
      "type": "library",
      "name": "user-home",
      "version": "1.1.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|user-home@1.1.1",
      "author": "Sindre Sorhus",
      "description": "Get the path to the user home directory",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/user-home@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/user-home.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/user-home#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/user-home/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/user-home/-/user-home-1.1.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/user-home"
        }
      ]
    },
    {
      "type": "library",
      "name": "xml-escape",
      "version": "1.0.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|xml-escape@1.0.0",
      "author": "Michael Hernandez - michael.hernandez1988@gmail.com",
      "description": "Escape XML ",
      "licenses": [
        {
          "license": {
            "name": "MIT License",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/xml-escape@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/miketheprogrammer/xml-escape.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/miketheprogrammer/xml-escape",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/miketheprogrammer/xml-escape/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/xml-escape/-/xml-escape-1.0.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/xml-escape"
        }
      ]
    },
    {
      "type": "library",
      "name": "neo-async",
      "version": "2.6.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|neo-async@2.6.2",
      "description": "Neo-Async is a drop-in replacement for Async, it almost fully covers its functionality and runs faster ",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/neo-async@2.6.2",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/suguru03/neo-async.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/suguru03/neo-async",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/suguru03/neo-async/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/neo-async"
        }
      ]
    },
    {
      "type": "library",
      "name": "uglify-js",
      "version": "3.19.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|uglify-js@3.19.3",
      "author": "Mihai Bazon",
      "description": "JavaScript parser, mangler/compressor and beautifier toolkit",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/uglify-js@3.19.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/mishoo/UglifyJS.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mishoo/UglifyJS#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mishoo/UglifyJS/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.19.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/uglify-js"
        }
      ]
    },
    {
      "type": "library",
      "name": "wordwrap",
      "version": "1.0.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|wordwrap@1.0.0",
      "author": "James Halliday",
      "description": "Wrap those words. Show them at what columns to start and stop.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/node-wordwrap.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-wordwrap#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-wordwrap/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/wordwrap"
        }
      ]
    },
    {
      "type": "library",
      "name": "exit",
      "version": "0.1.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|exit@0.1.2",
      "author": "\"Cowboy\" Ben Alman",
      "description": "A replacement for process.exit that ensures stdio are fully drained before exiting.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/cowboy/node-exit/blob/master/LICENSE-MIT"
          }
        }
      ],
      "purl": "pkg:npm/exit@0.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/cowboy/node-exit.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/cowboy/node-exit",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/cowboy/node-exit/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/exit"
        }
      ]
    },
    {
      "type": "library",
      "name": "nopt",
      "version": "3.0.6",
      "bom-ref": "qs@4.0.0-tuxcare.3|nopt@3.0.6",
      "author": "Isaac Z. Schlueter",
      "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/nopt@3.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/nopt.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/nopt#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/nopt/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/nopt/-/nopt-3.0.6.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/nopt"
        }
      ]
    },
    {
      "type": "library",
      "name": "convert-source-map",
      "version": "1.1.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|convert-source-map@1.1.3",
      "author": "Thorsten Lorenz",
      "description": "Converts a source-map from/to  different formats and allows adding/changing properties.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.1.3",
      "externalReferences": [
        {
          "url": "git://github.com/thlorenz/convert-source-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/thlorenz/convert-source-map",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/thlorenz/convert-source-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.1.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/convert-source-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "inline-source-map",
      "version": "0.5.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|inline-source-map@0.5.0",
      "author": "Thorsten Lorenz",
      "description": "Adds source mappings and base64 encodes them, so they can be inlined in your generated file.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/inline-source-map@0.5.0",
      "externalReferences": [
        {
          "url": "git://github.com/thlorenz/inline-source-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/thlorenz/inline-source-map",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/thlorenz/inline-source-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/inline-source-map/-/inline-source-map-0.5.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/inline-source-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.memoize",
      "version": "3.0.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash.memoize@3.0.4",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s `_.memoize` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.memoize@3.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.memoize/-/lodash.memoize-3.0.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.memoize"
        }
      ]
    },
    {
      "type": "library",
      "name": "source-map",
      "version": "0.4.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|source-map@0.4.4",
      "author": "Nick Fitzgerald",
      "description": "Generates and consumes source maps",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.4.4",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/mozilla/source-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mozilla/source-map",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mozilla/source-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.4.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/source-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "browserify-aes",
      "version": "1.2.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|browserify-aes@1.2.0",
      "description": "aes, for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browserify-aes@1.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/crypto-browserify/browserify-aes.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-aes",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-aes/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browserify-aes/-/browserify-aes-1.2.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browserify-aes"
        }
      ]
    },
    {
      "type": "library",
      "name": "browserify-des",
      "version": "1.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|browserify-des@1.0.2",
      "author": "Calvin Metcalf",
      "description": "browserify-des ===",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browserify-des@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/browserify-des.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-des#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-des/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browserify-des/-/browserify-des-1.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browserify-des"
        }
      ]
    },
    {
      "type": "library",
      "name": "evp_bytestokey",
      "version": "1.0.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|evp_bytestokey@1.0.3",
      "author": "Calvin Metcalf",
      "description": "The insecure key derivation algorithm from OpenSSL",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/evp_bytestokey@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/EVP_BytesToKey.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/EVP_BytesToKey",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/EVP_BytesToKey/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/evp_bytestokey/-/evp_bytestokey-1.0.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/evp_bytestokey"
        }
      ]
    },
    {
      "type": "library",
      "name": "bn.js",
      "version": "5.2.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|bn.js@5.2.2",
      "author": "Fedor Indutny",
      "description": "Big number implementation in pure javascript",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/bn.js@5.2.2",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/bn.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/bn.js",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/bn.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/bn.js/-/bn.js-5.2.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/bn.js"
        }
      ]
    },
    {
      "type": "library",
      "name": "browserify-rsa",
      "version": "4.1.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|browserify-rsa@4.1.1",
      "description": "RSA for browserify",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/browserify-rsa@4.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/browserify-rsa.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-rsa#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/browserify-rsa/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/browserify-rsa/-/browserify-rsa-4.1.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/browserify-rsa"
        }
      ]
    },
    {
      "type": "library",
      "name": "elliptic",
      "version": "6.6.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|elliptic@6.6.1",
      "author": "Fedor Indutny",
      "description": "EC cryptography",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/elliptic@6.6.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/elliptic.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/elliptic",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/elliptic/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/elliptic/-/elliptic-6.6.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/elliptic"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "bn.js",
          "version": "4.12.2",
          "bom-ref": "qs@4.0.0-tuxcare.3|elliptic@6.6.1|bn.js@4.12.2",
          "author": "Fedor Indutny",
          "description": "Big number implementation in pure javascript",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/bn.js@4.12.2",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/indutny/bn.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/indutny/bn.js",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/indutny/bn.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/bn.js/-/bn.js-4.12.2.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/elliptic/node_modules/bn.js"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "parse-asn1",
      "version": "5.1.9",
      "bom-ref": "qs@4.0.0-tuxcare.3|parse-asn1@5.1.9",
      "description": "utility library for parsing asn1 files for use with browserify-sign.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/parse-asn1@5.1.9",
      "externalReferences": [
        {
          "url": "git://github.com/crypto-browserify/parse-asn1.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/parse-asn1#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/parse-asn1/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/parse-asn1/-/parse-asn1-5.1.9.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/parse-asn1"
        }
      ]
    },
    {
      "type": "library",
      "name": "safe-buffer",
      "version": "5.2.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1",
      "author": "Feross Aboukhadijeh",
      "description": "Safer Node.js Buffer API",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "url": "git://github.com/feross/safe-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/safe-buffer",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/safe-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/safe-buffer"
        }
      ]
    },
    {
      "type": "library",
      "name": "cipher-base",
      "version": "1.0.7",
      "bom-ref": "qs@4.0.0-tuxcare.3|cipher-base@1.0.7",
      "author": "Calvin Metcalf",
      "description": "abstract base class for crypto-streams",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cipher-base@1.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/cipher-base.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/cipher-base#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/cipher-base/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cipher-base/-/cipher-base-1.0.7.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cipher-base"
        }
      ]
    },
    {
      "type": "library",
      "name": "md5.js",
      "version": "1.3.5",
      "bom-ref": "qs@4.0.0-tuxcare.3|md5.js@1.3.5",
      "author": "Kirill Fomichev",
      "description": "node style md5 on pure JavaScript",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/md5.js@1.3.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/md5.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/md5.js",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/md5.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/md5.js/-/md5.js-1.3.5.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/md5.js"
        }
      ]
    },
    {
      "type": "library",
      "name": "ripemd160",
      "version": "2.0.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|ripemd160@2.0.3",
      "description": "Compute ripemd160 of bytes or strings.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ripemd160@2.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/ripemd160.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/ripemd160#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/ripemd160/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ripemd160/-/ripemd160-2.0.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ripemd160"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "hash-base",
          "version": "3.1.2",
          "bom-ref": "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|hash-base@3.1.2",
          "author": "Kirill Fomichev",
          "description": "abstract base class for hash-streams",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/hash-base@3.1.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/crypto-browserify/hash-base.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/crypto-browserify/hash-base",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/crypto-browserify/hash-base/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/hash-base/-/hash-base-3.1.2.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/ripemd160/node_modules/hash-base"
            }
          ]
        },
        {
          "type": "library",
          "name": "readable-stream",
          "version": "2.3.8",
          "bom-ref": "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|readable-stream@2.3.8",
          "description": "Streams3, a user-land copy of the stream library from Node.js",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/readable-stream@2.3.8",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/readable-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/readable-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/ripemd160/node_modules/readable-stream"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "safe-buffer",
              "version": "5.1.2",
              "bom-ref": "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|readable-stream@2.3.8|safe-buffer@5.1.2",
              "author": "Feross Aboukhadijeh",
              "description": "Safer Node.js Buffer API",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/safe-buffer@5.1.2",
              "externalReferences": [
                {
                  "url": "git://github.com/feross/safe-buffer.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/feross/safe-buffer",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/feross/safe-buffer/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
                  "type": "distribution",
                  "comment": "as detected from npm-ls property \"resolved\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/ripemd160/node_modules/readable-stream/node_modules/safe-buffer"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "isarray",
          "version": "1.0.0",
          "bom-ref": "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|isarray@1.0.0",
          "author": "Julian Gruber",
          "description": "Array#isArray for older browsers",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isarray@1.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/isarray.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/isarray",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/isarray/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/ripemd160/node_modules/isarray"
            }
          ]
        },
        {
          "type": "library",
          "name": "string_decoder",
          "version": "1.1.1",
          "bom-ref": "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|string_decoder@1.1.1",
          "description": "The string_decoder module from Node core",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string_decoder@1.1.1",
          "externalReferences": [
            {
              "url": "git://github.com/nodejs/string_decoder.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodejs/string_decoder/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/ripemd160/node_modules/string_decoder"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "safe-buffer",
              "version": "5.1.2",
              "bom-ref": "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|string_decoder@1.1.1|safe-buffer@5.1.2",
              "author": "Feross Aboukhadijeh",
              "description": "Safer Node.js Buffer API",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/safe-buffer@5.1.2",
              "externalReferences": [
                {
                  "url": "git://github.com/feross/safe-buffer.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/feross/safe-buffer",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/feross/safe-buffer/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz",
                  "type": "distribution",
                  "comment": "as detected from npm-ls property \"resolved\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/ripemd160/node_modules/string_decoder/node_modules/safe-buffer"
                }
              ]
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "miller-rabin",
      "version": "4.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|miller-rabin@4.0.1",
      "author": "Fedor Indutny",
      "description": "Miller Rabin algorithm for primality test",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/miller-rabin@4.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/miller-rabin.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/miller-rabin",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/miller-rabin/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/miller-rabin/-/miller-rabin-4.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/miller-rabin"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "bn.js",
          "version": "4.12.2",
          "bom-ref": "qs@4.0.0-tuxcare.3|miller-rabin@4.0.1|bn.js@4.12.2",
          "author": "Fedor Indutny",
          "description": "Big number implementation in pure javascript",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/bn.js@4.12.2",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/indutny/bn.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/indutny/bn.js",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/indutny/bn.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/bn.js/-/bn.js-4.12.2.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/miller-rabin/node_modules/bn.js"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "to-buffer",
      "version": "1.2.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|to-buffer@1.2.2",
      "author": "Mathias Buus",
      "description": "Pass in a string, array, Buffer, Data View, or Uint8Array, and get a Buffer back.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/to-buffer@1.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/browserify/to-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/to-buffer",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/to-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/to-buffer/-/to-buffer-1.2.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/to-buffer"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "isarray",
          "version": "2.0.5",
          "bom-ref": "qs@4.0.0-tuxcare.3|to-buffer@1.2.2|isarray@2.0.5",
          "author": "Julian Gruber",
          "description": "Array#isArray for older browsers",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isarray@2.0.5",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/isarray.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/isarray",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/isarray/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/isarray/-/isarray-2.0.5.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/to-buffer/node_modules/isarray"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "wrappy",
      "version": "1.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|wrappy@1.0.2",
      "author": "Isaac Z. Schlueter",
      "description": "Callback wrapping utility",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/wrappy.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/wrappy",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/wrappy/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/wrappy"
        }
      ]
    },
    {
      "type": "library",
      "name": "brace-expansion",
      "version": "1.1.12",
      "bom-ref": "qs@4.0.0-tuxcare.3|brace-expansion@1.1.12",
      "author": "Julian Gruber",
      "description": "Brace expansion as known from sh/bash",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.12",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/brace-expansion.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/brace-expansion",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/brace-expansion/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.12.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/brace-expansion"
        }
      ]
    },
    {
      "type": "library",
      "name": "astw",
      "version": "2.2.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|astw@2.2.0",
      "author": "James Halliday",
      "description": "walk the ast with references to parent nodes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/astw@2.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/astw.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/astw",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/astw/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/astw/-/astw-2.2.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/astw"
        }
      ]
    },
    {
      "type": "library",
      "name": "hasown",
      "version": "2.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|hasown@2.0.2",
      "author": "Jordan Harband",
      "description": "A robust, ES3 compatible, \"has own property\" predicate.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hasown@2.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/hasOwn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/hasOwn#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/hasOwn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hasown"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsonify",
      "version": "0.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|jsonify@0.0.1",
      "author": "Douglas Crockford",
      "description": "JSON without touching any globals",
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsonify@0.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/jsonify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/jsonify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/jsonify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsonify"
        }
      ]
    },
    {
      "type": "library",
      "name": "acorn-walk",
      "version": "7.2.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|acorn-walk@7.2.0",
      "description": "ECMAScript (ESTree) AST walker",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/acorn-walk@7.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/acornjs/acorn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/acornjs/acorn",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/acornjs/acorn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/acorn-walk/-/acorn-walk-7.2.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/acorn-walk"
        }
      ]
    },
    {
      "type": "library",
      "name": "ansi-styles",
      "version": "2.2.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|ansi-styles@2.2.1",
      "author": "Sindre Sorhus",
      "description": "ANSI escape codes for styling strings in the terminal",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@2.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/ansi-styles.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/ansi-styles#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/ansi-styles/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ansi-styles"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-ansi",
      "version": "2.0.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|has-ansi@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Check if a string has ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-ansi@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/has-ansi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/has-ansi#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/has-ansi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-ansi"
        }
      ]
    },
    {
      "type": "library",
      "name": "strip-ansi",
      "version": "3.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|strip-ansi@3.0.1",
      "author": "Sindre Sorhus",
      "description": "Strip ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/strip-ansi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/strip-ansi#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/strip-ansi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/strip-ansi"
        }
      ]
    },
    {
      "type": "library",
      "name": "supports-color",
      "version": "2.0.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|supports-color@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Detect whether a terminal supports color",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/supports-color@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/supports-color.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/supports-color#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/supports-color/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/supports-color"
        }
      ]
    },
    {
      "type": "library",
      "name": "ms",
      "version": "2.0.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|ms@2.0.0",
      "description": "Tiny milisecond conversion utility",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/zeit/ms.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zeit/ms#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zeit/ms/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ms"
        }
      ]
    },
    {
      "type": "library",
      "name": "esutils",
      "version": "1.1.6",
      "bom-ref": "qs@4.0.0-tuxcare.3|esutils@1.1.6",
      "description": "utility box for ECMAScript language tools",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "acknowledgement": "declared",
            "url": "http://github.com/Constellation/esutils/raw/master/LICENSE.BSD"
          }
        }
      ],
      "purl": "pkg:npm/esutils@1.1.6",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/Constellation/esutils.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Constellation/esutils",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Constellation/esutils/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/esutils/-/esutils-1.1.6.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/esutils"
        }
      ]
    },
    {
      "type": "library",
      "name": "es6-map",
      "version": "0.1.5",
      "bom-ref": "qs@4.0.0-tuxcare.3|es6-map@0.1.5",
      "author": "Mariusz Nowak",
      "description": "ECMAScript6 Map polyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es6-map@0.1.5",
      "externalReferences": [
        {
          "url": "git://github.com/medikoo/es6-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/es6-map#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/es6-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es6-map/-/es6-map-0.1.5.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es6-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "es6-weak-map",
      "version": "2.0.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|es6-weak-map@2.0.3",
      "author": "Mariusz Nowak",
      "description": "ECMAScript6 WeakMap polyfill",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es6-weak-map@2.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/medikoo/es6-weak-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/es6-weak-map#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/es6-weak-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es6-weak-map/-/es6-weak-map-2.0.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es6-weak-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "esrecurse",
      "version": "4.3.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|esrecurse@4.3.0",
      "description": "ECMAScript AST recursive visitor",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/esrecurse@4.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/estools/esrecurse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/estools/esrecurse",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/estools/esrecurse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.3.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/esrecurse"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "estraverse",
          "version": "5.3.0",
          "bom-ref": "qs@4.0.0-tuxcare.3|esrecurse@4.3.0|estraverse@5.3.0",
          "description": "ECMAScript JS AST traversal functions",
          "licenses": [
            {
              "license": {
                "id": "BSD-2-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/estraverse@5.3.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/estools/estraverse.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/estools/estraverse",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/estools/estraverse/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/estraverse/-/estraverse-5.3.0.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/esrecurse/node_modules/estraverse"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "flat-cache",
      "version": "1.3.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|flat-cache@1.3.4",
      "author": "Roy Riojas",
      "description": "A stupidly simple key/value storage using files to persist some data",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/flat-cache@1.3.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/royriojas/flat-cache.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/royriojas/flat-cache#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/royriojas/flat-cache/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/flat-cache/-/flat-cache-1.3.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/flat-cache"
        }
      ]
    },
    {
      "type": "library",
      "name": "ansi-regex",
      "version": "2.1.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|ansi-regex@2.1.1",
      "author": "Sindre Sorhus",
      "description": "Regular expression for matching ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@2.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/ansi-regex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/ansi-regex#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/ansi-regex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ansi-regex"
        }
      ]
    },
    {
      "type": "library",
      "name": "cli-width",
      "version": "1.1.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|cli-width@1.1.1",
      "author": "Ilya Radchenko",
      "description": "Get stdout window width, with two fallbacks, tty and then a default.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cli-width@1.1.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/knownasilya/cli-width.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/knownasilya/cli-width",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/knownasilya/cli-width/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cli-width/-/cli-width-1.1.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cli-width"
        }
      ]
    },
    {
      "type": "library",
      "name": "figures",
      "version": "1.7.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|figures@1.7.0",
      "author": "Sindre Sorhus",
      "description": "Unicode symbols with Windows CMD fallbacks",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/figures@1.7.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/figures.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/figures#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/figures/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/figures/-/figures-1.7.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/figures"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "object-assign",
          "version": "4.1.1",
          "bom-ref": "qs@4.0.0-tuxcare.3|figures@1.7.0|object-assign@4.1.1",
          "author": "Sindre Sorhus",
          "description": "ES2015 `Object.assign()` ponyfill",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/object-assign@4.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/object-assign.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/object-assign#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/object-assign/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/figures/node_modules/object-assign"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash",
      "version": "3.10.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash@3.10.1",
      "author": "John-David Dalton",
      "description": "The modern build of lodash modular utilities.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash@3.10.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash/-/lodash-3.10.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash"
        }
      ]
    },
    {
      "type": "library",
      "name": "readline2",
      "version": "0.1.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|readline2@0.1.1",
      "author": "Simon Boudrias",
      "description": "Readline Façade fixing bugs and issues found in releases 0.8 and 0.10",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/readline2@0.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/SBoudrias/readline2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/SBoudrias/readline2#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/SBoudrias/readline2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/readline2/-/readline2-0.1.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/readline2"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "strip-ansi",
          "version": "2.0.1",
          "bom-ref": "qs@4.0.0-tuxcare.3|readline2@0.1.1|strip-ansi@2.0.1",
          "author": "Sindre Sorhus",
          "description": "Strip ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-ansi@2.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/strip-ansi.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-ansi#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-ansi/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-2.0.1.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/readline2/node_modules/strip-ansi"
            }
          ]
        },
        {
          "type": "library",
          "name": "ansi-regex",
          "version": "1.1.1",
          "bom-ref": "qs@4.0.0-tuxcare.3|readline2@0.1.1|ansi-regex@1.1.1",
          "author": "Sindre Sorhus",
          "description": "Regular expression for matching ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ansi-regex@1.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/ansi-regex.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/ansi-regex#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/ansi-regex/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-1.1.1.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/readline2/node_modules/ansi-regex"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "run-async",
      "version": "0.1.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|run-async@0.1.0",
      "author": "Simon Boudrias",
      "description": "Utility method to run function either synchronously or asynchronously using the common `this.async()` style.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/run-async@0.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/SBoudrias/run-async.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/SBoudrias/run-async",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/SBoudrias/run-async/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/run-async/-/run-async-0.1.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/run-async"
        }
      ]
    },
    {
      "type": "library",
      "name": "rx-lite",
      "version": "2.5.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|rx-lite@2.5.2",
      "author": "Cloud Programmability Team",
      "description": "Lightweight library for composing asynchronous and event-based operations in JavaScript",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "acknowledgement": "declared",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl": "pkg:npm/rx-lite@2.5.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/Reactive-Extensions/RxJS.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Reactive-Extensions/RxJS",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Reactive-Extensions/RxJS/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/rx-lite/-/rx-lite-2.5.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/rx-lite"
        }
      ]
    },
    {
      "type": "library",
      "name": "generate-function",
      "version": "2.3.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|generate-function@2.3.1",
      "author": "Mathias Buus",
      "description": "Module that helps you write generated functions in Node",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/generate-function@2.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/mafintosh/generate-function.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mafintosh/generate-function",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mafintosh/generate-function/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/generate-function/-/generate-function-2.3.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/generate-function"
        }
      ]
    },
    {
      "type": "library",
      "name": "generate-object-property",
      "version": "1.2.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|generate-object-property@1.2.0",
      "author": "Mathias Buus",
      "description": "Generate safe JS code that can used to reference a object property",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/generate-object-property@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mafintosh/generate-object-property.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mafintosh/generate-object-property",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mafintosh/generate-object-property/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/generate-object-property/-/generate-object-property-1.2.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/generate-object-property"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-my-ip-valid",
      "version": "1.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|is-my-ip-valid@1.0.1",
      "description": "A small lib to validate IP addresses.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-my-ip-valid@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/LinusU/is-my-ip-valid.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/LinusU/is-my-ip-valid#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/LinusU/is-my-ip-valid/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-my-ip-valid/-/is-my-ip-valid-1.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-my-ip-valid"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsonpointer",
      "version": "5.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|jsonpointer@5.0.1",
      "author": "Jan Lehnardt",
      "description": "Simple JSON Addressing.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsonpointer@5.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/janl/node-jsonpointer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/janl/node-jsonpointer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/janl/node-jsonpointer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsonpointer/-/jsonpointer-5.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsonpointer"
        }
      ]
    },
    {
      "type": "library",
      "name": "argparse",
      "version": "1.0.10",
      "bom-ref": "qs@4.0.0-tuxcare.3|argparse@1.0.10",
      "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/argparse@1.0.10",
      "externalReferences": [
        {
          "url": "git+https://github.com/nodeca/argparse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodeca/argparse#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodeca/argparse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/argparse"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._baseclone",
      "version": "3.3.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._baseclone@3.3.0",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `baseClone` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._baseclone@3.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._baseclone/-/lodash._baseclone-3.3.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._baseclone"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._bindcallback",
      "version": "3.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._bindcallback@3.0.1",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `bindCallback` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._bindcallback@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._bindcallback/-/lodash._bindcallback-3.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._bindcallback"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._arraycopy",
      "version": "3.0.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._arraycopy@3.0.0",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `arrayCopy` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._arraycopy@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._arraycopy/-/lodash._arraycopy-3.0.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._arraycopy"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._arrayeach",
      "version": "3.0.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._arrayeach@3.0.0",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `arrayEach` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._arrayeach@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._arrayeach/-/lodash._arrayeach-3.0.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._arrayeach"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._createassigner",
      "version": "3.1.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._createassigner@3.1.1",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `createAssigner` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._createassigner@3.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._createassigner/-/lodash._createassigner-3.1.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._createassigner"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._getnative",
      "version": "3.9.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._getnative@3.9.1",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `getNative` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._getnative@3.9.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._getnative/-/lodash._getnative-3.9.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._getnative"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.isarguments",
      "version": "3.1.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash.isarguments@3.1.0",
      "author": "John-David Dalton",
      "description": "The lodash method `_.isArguments` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.isarguments@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.isarguments/-/lodash.isarguments-3.1.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.isarguments"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.isarray",
      "version": "3.0.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash.isarray@3.0.4",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s `_.isArray` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.isarray@3.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.isarray/-/lodash.isarray-3.0.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.isarray"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.isplainobject",
      "version": "3.2.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash.isplainobject@3.2.0",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s `_.isPlainObject` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.isplainobject@3.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.isplainobject/-/lodash.isplainobject-3.2.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.isplainobject"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.istypedarray",
      "version": "3.0.6",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash.istypedarray@3.0.6",
      "author": "John-David Dalton",
      "description": "The lodash method `_.isTypedArray` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.istypedarray@3.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.istypedarray/-/lodash.istypedarray-3.0.6.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.istypedarray"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.keys",
      "version": "3.1.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash.keys@3.1.2",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s `_.keys` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.keys@3.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.keys/-/lodash.keys-3.1.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.keys"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.keysin",
      "version": "3.0.8",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash.keysin@3.0.8",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s `_.keysIn` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.keysin@3.0.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.keysin/-/lodash.keysin-3.0.8.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.keysin"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.toplainobject",
      "version": "3.0.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash.toplainobject@3.0.0",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s `_.toPlainObject` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.toplainobject@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.toplainobject/-/lodash.toplainobject-3.0.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.toplainobject"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._arraymap",
      "version": "3.0.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._arraymap@3.0.0",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `arrayMap` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._arraymap@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._arraymap/-/lodash._arraymap-3.0.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._arraymap"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._basedifference",
      "version": "3.0.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._basedifference@3.0.3",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `baseDifference` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._basedifference@3.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._basedifference/-/lodash._basedifference-3.0.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._basedifference"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._baseflatten",
      "version": "3.1.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._baseflatten@3.1.4",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `baseFlatten` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._baseflatten@3.1.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._baseflatten/-/lodash._baseflatten-3.1.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._baseflatten"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._pickbyarray",
      "version": "3.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._pickbyarray@3.0.2",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `pickByArray` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._pickbyarray@3.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._pickbyarray/-/lodash._pickbyarray-3.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._pickbyarray"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._pickbycallback",
      "version": "3.0.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._pickbycallback@3.0.0",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `pickByCallback` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._pickbycallback@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._pickbycallback/-/lodash._pickbycallback-3.0.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._pickbycallback"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.restparam",
      "version": "3.6.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash.restparam@3.6.1",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s `_.restParam` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.restparam@3.6.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.restparam/-/lodash.restparam-3.6.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.restparam"
        }
      ]
    },
    {
      "type": "library",
      "name": "deep-is",
      "version": "0.1.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|deep-is@0.1.4",
      "author": "Thorsten Lorenz",
      "description": "node's assert.deepEqual algorithm except for NaN being equal to NaN",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/deep-is@0.1.4",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/thlorenz/deep-is.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/thlorenz/deep-is#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/thlorenz/deep-is/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/deep-is"
        }
      ]
    },
    {
      "type": "library",
      "name": "fast-levenshtein",
      "version": "1.0.7",
      "bom-ref": "qs@4.0.0-tuxcare.3|fast-levenshtein@1.0.7",
      "author": "Ramesh Nair",
      "description": "Efficient implementation of Levenshtein algorithm with asynchronous callback support",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fast-levenshtein@1.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/hiddentao/fast-levenshtein.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hiddentao/fast-levenshtein#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hiddentao/fast-levenshtein/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-1.0.7.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fast-levenshtein"
        }
      ]
    },
    {
      "type": "library",
      "name": "levn",
      "version": "0.2.5",
      "bom-ref": "qs@4.0.0-tuxcare.3|levn@0.2.5",
      "author": "George Zahariev",
      "description": "Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://raw.github.com/gkz/levn/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/levn@0.2.5",
      "externalReferences": [
        {
          "url": "git://github.com/gkz/levn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/gkz/levn",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/gkz/levn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/levn/-/levn-0.2.5.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/levn"
        }
      ]
    },
    {
      "type": "library",
      "name": "prelude-ls",
      "version": "1.1.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|prelude-ls@1.1.2",
      "author": "George Zahariev",
      "description": "prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://raw.github.com/gkz/prelude-ls/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/prelude-ls@1.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/gkz/prelude-ls.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://preludels.com",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/gkz/prelude-ls/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.1.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/prelude-ls"
        }
      ]
    },
    {
      "type": "library",
      "name": "type-check",
      "version": "0.3.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|type-check@0.3.2",
      "author": "George Zahariev",
      "description": "type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/type-check@0.3.2",
      "externalReferences": [
        {
          "url": "git://github.com/gkz/type-check.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/gkz/type-check",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/gkz/type-check/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/type-check/-/type-check-0.3.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/type-check"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-stdin",
      "version": "3.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|get-stdin@3.0.2",
      "author": "Sindre Sorhus",
      "description": "Easier stdin",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-stdin@3.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/get-stdin.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/get-stdin#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/get-stdin/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-stdin/-/get-stdin-3.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-stdin"
        }
      ]
    },
    {
      "type": "library",
      "name": "abbrev",
      "version": "1.1.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|abbrev@1.1.1",
      "author": "Isaac Z. Schlueter",
      "description": "Like ruby's abbrev module, but in js",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/abbrev@1.1.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/isaacs/abbrev-js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/abbrev-js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/abbrev-js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/abbrev"
        }
      ]
    },
    {
      "type": "library",
      "name": "amdefine",
      "version": "1.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|amdefine@1.0.1",
      "author": "James Burke",
      "description": "Provide AMD's define() API for declaring modules in the AMD format",
      "licenses": [
        {
          "expression": "BSD-3-Clause OR MIT",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/amdefine@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jrburke/amdefine.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/jrburke/amdefine",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jrburke/amdefine/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/amdefine"
        }
      ]
    },
    {
      "type": "library",
      "name": "buffer-xor",
      "version": "1.0.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|buffer-xor@1.0.3",
      "author": "Daniel Cousens",
      "description": "A simple module for bitwise-xor on buffers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/buffer-xor@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/crypto-browserify/buffer-xor.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/crypto-browserify/buffer-xor",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/crypto-browserify/buffer-xor/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/buffer-xor/-/buffer-xor-1.0.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/buffer-xor"
        }
      ]
    },
    {
      "type": "library",
      "name": "des.js",
      "version": "1.1.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|des.js@1.1.0",
      "author": "Fedor Indutny",
      "description": "DES implementation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/des.js@1.1.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/des.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/des.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/des.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/des.js/-/des.js-1.1.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/des.js"
        }
      ]
    },
    {
      "type": "library",
      "name": "brorand",
      "version": "1.1.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|brorand@1.1.0",
      "author": "Fedor Indutny",
      "description": "Random number generator for browsers and node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/brorand@1.1.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/brorand.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/brorand",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/brorand/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/brorand/-/brorand-1.1.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/brorand"
        }
      ]
    },
    {
      "type": "library",
      "name": "hash.js",
      "version": "1.1.7",
      "bom-ref": "qs@4.0.0-tuxcare.3|hash.js@1.1.7",
      "author": "Fedor Indutny",
      "description": "Various hash functions that could be run by both browser and node",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hash.js@1.1.7",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/hash.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/hash.js",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/hash.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hash.js/-/hash.js-1.1.7.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hash.js"
        }
      ]
    },
    {
      "type": "library",
      "name": "hmac-drbg",
      "version": "1.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|hmac-drbg@1.0.1",
      "author": "Fedor Indutny",
      "description": "Deterministic random bit generator (hmac)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hmac-drbg@1.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/hmac-drbg.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/hmac-drbg#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/hmac-drbg/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hmac-drbg/-/hmac-drbg-1.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hmac-drbg"
        }
      ]
    },
    {
      "type": "library",
      "name": "minimalistic-assert",
      "version": "1.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|minimalistic-assert@1.0.1",
      "description": "minimalistic-assert ===",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minimalistic-assert@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/calvinmetcalf/minimalistic-assert.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/calvinmetcalf/minimalistic-assert",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/calvinmetcalf/minimalistic-assert/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minimalistic-assert/-/minimalistic-assert-1.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minimalistic-assert"
        }
      ]
    },
    {
      "type": "library",
      "name": "minimalistic-crypto-utils",
      "version": "1.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|minimalistic-crypto-utils@1.0.1",
      "author": "Fedor Indutny",
      "description": "Minimalistic tools for JS crypto modules",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minimalistic-crypto-utils@1.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/minimalistic-crypto-utils.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/minimalistic-crypto-utils#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/minimalistic-crypto-utils/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minimalistic-crypto-utils/-/minimalistic-crypto-utils-1.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minimalistic-crypto-utils"
        }
      ]
    },
    {
      "type": "library",
      "name": "asn1.js",
      "version": "4.10.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|asn1.js@4.10.1",
      "author": "Fedor Indutny",
      "description": "ASN.1 encoder and decoder",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/asn1.js@4.10.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/indutny/asn1.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/indutny/asn1.js",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/indutny/asn1.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/asn1.js/-/asn1.js-4.10.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/asn1.js"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "bn.js",
          "version": "4.12.2",
          "bom-ref": "qs@4.0.0-tuxcare.3|asn1.js@4.10.1|bn.js@4.12.2",
          "author": "Fedor Indutny",
          "description": "Big number implementation in pure javascript",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/bn.js@4.12.2",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/indutny/bn.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/indutny/bn.js",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/indutny/bn.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/bn.js/-/bn.js-4.12.2.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/asn1.js/node_modules/bn.js"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "process-nextick-args",
      "version": "2.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|process-nextick-args@2.0.1",
      "description": "process.nextTick but always with args",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/process-nextick-args@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/calvinmetcalf/process-nextick-args.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/calvinmetcalf/process-nextick-args",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/calvinmetcalf/process-nextick-args/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/process-nextick-args"
        }
      ]
    },
    {
      "type": "library",
      "name": "util-deprecate",
      "version": "1.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|util-deprecate@1.0.2",
      "author": "Nathan Rajlich",
      "description": "The Node.js `util.deprecate()` function with browser support",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/TooTallNate/util-deprecate.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/TooTallNate/util-deprecate",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/TooTallNate/util-deprecate/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/util-deprecate"
        }
      ]
    },
    {
      "type": "library",
      "name": "typed-array-buffer",
      "version": "1.0.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|typed-array-buffer@1.0.3",
      "author": "Jordan Harband",
      "description": "Get the ArrayBuffer out of a TypedArray, robustly.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/typed-array-buffer@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/typed-array-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/typed-array-buffer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/typed-array-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/typed-array-buffer/-/typed-array-buffer-1.0.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/typed-array-buffer"
        }
      ]
    },
    {
      "type": "library",
      "name": "balanced-match",
      "version": "1.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|balanced-match@1.0.2",
      "author": "Julian Gruber",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/balanced-match.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/balanced-match",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/balanced-match/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/balanced-match"
        }
      ]
    },
    {
      "type": "library",
      "name": "concat-map",
      "version": "0.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|concat-map@0.0.1",
      "author": "James Halliday",
      "description": "concatenative mapdashery",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/substack/node-concat-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-concat-map#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-concat-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/concat-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "acorn",
      "version": "4.0.13",
      "bom-ref": "qs@4.0.0-tuxcare.3|acorn@4.0.13",
      "description": "ECMAScript parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/acorn@4.0.13",
      "externalReferences": [
        {
          "url": "git+https://github.com/ternjs/acorn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ternjs/acorn",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ternjs/acorn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/acorn/-/acorn-4.0.13.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/acorn"
        }
      ]
    },
    {
      "type": "library",
      "name": "function-bind",
      "version": "1.1.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|function-bind@1.1.2",
      "author": "Raynos",
      "description": "Implementation of Function.prototype.bind",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/Raynos/function-bind.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Raynos/function-bind",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Raynos/function-bind/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/function-bind"
        }
      ]
    },
    {
      "type": "library",
      "name": "d",
      "version": "1.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|d@1.0.2",
      "author": "Mariusz Nowak",
      "description": "Property descriptor factory",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/d@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/medikoo/d.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/d#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/d/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/d/-/d-1.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/d"
        }
      ]
    },
    {
      "type": "library",
      "name": "es5-ext",
      "version": "0.10.64",
      "bom-ref": "qs@4.0.0-tuxcare.3|es5-ext@0.10.64",
      "author": "Mariusz Nowak",
      "description": "ECMAScript extensions and shims",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es5-ext@0.10.64",
      "externalReferences": [
        {
          "url": "git+https://github.com/medikoo/es5-ext.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/es5-ext#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/es5-ext/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.64.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es5-ext"
        }
      ]
    },
    {
      "type": "library",
      "name": "es6-iterator",
      "version": "2.0.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|es6-iterator@2.0.3",
      "author": "Mariusz Nowak",
      "description": "Iterator abstraction based on ES6 specification",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es6-iterator@2.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/medikoo/es6-iterator.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/es6-iterator#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/es6-iterator/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es6-iterator/-/es6-iterator-2.0.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es6-iterator"
        }
      ]
    },
    {
      "type": "library",
      "name": "es6-set",
      "version": "0.1.6",
      "bom-ref": "qs@4.0.0-tuxcare.3|es6-set@0.1.6",
      "author": "Mariusz Nowak",
      "description": "ECMAScript6 Set polyfill",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es6-set@0.1.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/medikoo/es6-set.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/es6-set#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/es6-set/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es6-set/-/es6-set-0.1.6.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es6-set"
        }
      ]
    },
    {
      "type": "library",
      "name": "es6-symbol",
      "version": "3.1.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|es6-symbol@3.1.4",
      "author": "Mariusz Nowak",
      "description": "ECMAScript 6 Symbol polyfill",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es6-symbol@3.1.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/medikoo/es6-symbol.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/es6-symbol#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/es6-symbol/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-3.1.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es6-symbol"
        }
      ]
    },
    {
      "type": "library",
      "name": "event-emitter",
      "version": "0.3.5",
      "bom-ref": "qs@4.0.0-tuxcare.3|event-emitter@0.3.5",
      "author": "Mariusz Nowak",
      "description": "Environment agnostic event emitter",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/event-emitter@0.3.5",
      "externalReferences": [
        {
          "url": "git://github.com/medikoo/event-emitter.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/event-emitter#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/event-emitter/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.5.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/event-emitter"
        }
      ]
    },
    {
      "type": "library",
      "name": "circular-json",
      "version": "0.3.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|circular-json@0.3.3",
      "author": "Andrea Giammarchi",
      "description": "JSON does not handle circular references. This version does",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/circular-json@0.3.3",
      "externalReferences": [
        {
          "url": "git://github.com/WebReflection/circular-json.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/WebReflection/circular-json",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/WebReflection/circular-json/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/circular-json/-/circular-json-0.3.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/circular-json"
        }
      ]
    },
    {
      "type": "library",
      "name": "graceful-fs",
      "version": "4.2.11",
      "bom-ref": "qs@4.0.0-tuxcare.3|graceful-fs@4.2.11",
      "description": "A drop-in replacement for fs, making various improvements.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.11",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/node-graceful-fs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/node-graceful-fs#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/node-graceful-fs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/graceful-fs"
        }
      ]
    },
    {
      "type": "library",
      "name": "rimraf",
      "version": "2.6.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|rimraf@2.6.3",
      "author": "Isaac Z. Schlueter",
      "description": "A deep deletion module for node (like `rm -rf`)",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/rimraf@2.6.3",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/rimraf.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/rimraf#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/rimraf/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.6.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/rimraf"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "glob",
          "version": "7.2.3",
          "bom-ref": "qs@4.0.0-tuxcare.3|rimraf@2.6.3|glob@7.2.3",
          "author": "Isaac Z. Schlueter",
          "description": "a little globber",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/glob@7.2.3",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/node-glob.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/node-glob#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/node-glob/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/glob/-/glob-7.2.3.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/rimraf/node_modules/glob"
            }
          ]
        },
        {
          "type": "library",
          "name": "minimatch",
          "version": "3.1.2",
          "bom-ref": "qs@4.0.0-tuxcare.3|rimraf@2.6.3|minimatch@3.1.2",
          "author": "Isaac Z. Schlueter",
          "description": "a glob matcher in javascript",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/minimatch@3.1.2",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/minimatch.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/minimatch#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/minimatch/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.1.2.tgz",
              "type": "distribution",
              "comment": "as detected from npm-ls property \"resolved\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/rimraf/node_modules/minimatch"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "write",
      "version": "0.2.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|write@0.2.1",
      "author": "Jon Schlinkert",
      "description": "Write files to disk, creating intermediate directories if they don't exist.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/write@0.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/write.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/write",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/write/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/write/-/write-0.2.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/write"
        }
      ]
    },
    {
      "type": "library",
      "name": "mute-stream",
      "version": "0.0.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|mute-stream@0.0.4",
      "author": "Isaac Z. Schlueter",
      "description": "Bytes go in, but they don't come out (when muted).",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mute-stream@0.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/mute-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/mute-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/mute-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mute-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-property",
      "version": "1.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|is-property@1.0.2",
      "author": "Mikola Lysenko",
      "description": "Tests if a JSON property can be accessed using . syntax",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-property@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/mikolalysenko/is-property.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mikolalysenko/is-property#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mikolalysenko/is-property/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-property/-/is-property-1.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-property"
        }
      ]
    },
    {
      "type": "library",
      "name": "sprintf-js",
      "version": "1.0.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|sprintf-js@1.0.3",
      "author": "Alexandru Marasteanu",
      "description": "JavaScript sprintf implementation",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/alexei/sprintf.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/alexei/sprintf.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/alexei/sprintf.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/sprintf-js"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._baseassign",
      "version": "3.2.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._baseassign@3.2.0",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `baseAssign` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._baseassign@3.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._baseassign/-/lodash._baseassign-3.2.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._baseassign"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._basefor",
      "version": "3.0.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._basefor@3.0.3",
      "author": "John-David Dalton",
      "description": "The internal lodash function `baseFor` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._basefor@3.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._basefor/-/lodash._basefor-3.0.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._basefor"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._isiterateecall",
      "version": "3.0.9",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._isiterateecall@3.0.9",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `isIterateeCall` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._isiterateecall@3.0.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._isiterateecall/-/lodash._isiterateecall-3.0.9.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._isiterateecall"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._basecopy",
      "version": "3.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._basecopy@3.0.1",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `baseCopy` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._basecopy@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._basecopy/-/lodash._basecopy-3.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._basecopy"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._baseindexof",
      "version": "3.1.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._baseindexof@3.1.0",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `baseIndexOf` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._baseindexof@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._baseindexof/-/lodash._baseindexof-3.1.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._baseindexof"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._cacheindexof",
      "version": "3.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._cacheindexof@3.0.2",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `cacheIndexOf` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._cacheindexof@3.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._cacheindexof/-/lodash._cacheindexof-3.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._cacheindexof"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._createcache",
      "version": "3.1.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|lodash._createcache@3.1.2",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `createCache` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._createcache@3.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._createcache/-/lodash._createcache-3.1.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._createcache"
        }
      ]
    },
    {
      "type": "library",
      "name": "call-bound",
      "version": "1.0.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|call-bound@1.0.4",
      "author": "Jordan Harband",
      "description": "Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/call-bound@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/call-bound.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/call-bound#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/call-bound/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/call-bound/-/call-bound-1.0.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/call-bound"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-errors",
      "version": "1.3.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|es-errors@1.3.0",
      "author": "Jordan Harband",
      "description": "A simple cache for a few of the JS Error constructors.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-errors@1.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/es-errors.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/es-errors#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/es-errors/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-errors/-/es-errors-1.3.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-errors"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-typed-array",
      "version": "1.1.15",
      "bom-ref": "qs@4.0.0-tuxcare.3|is-typed-array@1.1.15",
      "author": "Jordan Harband",
      "description": "Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-typed-array@1.1.15",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-typed-array.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-typed-array#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-typed-array/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-typed-array/-/is-typed-array-1.1.15.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-typed-array"
        }
      ]
    },
    {
      "type": "library",
      "name": "rx",
      "version": "2.5.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|rx@2.5.3",
      "author": "Cloud Programmability Team",
      "description": "Library for composing asynchronous and event-based operations in JavaScript",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/rx@2.5.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/Reactive-Extensions/RxJS.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Reactive-Extensions/RxJS",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Reactive-Extensions/RxJS/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/rx/-/rx-2.5.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/rx"
        }
      ]
    },
    {
      "type": "library",
      "name": "type",
      "version": "2.7.3",
      "bom-ref": "qs@4.0.0-tuxcare.3|type@2.7.3",
      "author": "Mariusz Nowak",
      "description": "Runtime validation and processing of JavaScript types",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/type@2.7.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/medikoo/type.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/type#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/type/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/type/-/type-2.7.3.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/type"
        }
      ]
    },
    {
      "type": "library",
      "name": "esniff",
      "version": "2.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|esniff@2.0.1",
      "author": "Mariusz Nowak",
      "description": "Low footprint ECMAScript source code parser",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/esniff@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/medikoo/esniff.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/esniff#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/esniff/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/esniff/-/esniff-2.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/esniff"
        }
      ]
    },
    {
      "type": "library",
      "name": "next-tick",
      "version": "1.1.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|next-tick@1.1.0",
      "author": "Mariusz Nowak",
      "description": "Environment agnostic nextTick polyfill",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/next-tick@1.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/medikoo/next-tick.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/next-tick#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/next-tick/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/next-tick/-/next-tick-1.1.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/next-tick"
        }
      ]
    },
    {
      "type": "library",
      "name": "ext",
      "version": "1.7.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|ext@1.7.0",
      "author": "Mariusz Nowak",
      "description": "JavaScript utilities with respect to emerging standard",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ext@1.7.0#ext",
      "externalReferences": [
        {
          "url": "git+https://github.com/medikoo/es5-ext.git#ext",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/es5-ext/tree/ext#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/es5-ext/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ext/-/ext-1.7.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ext"
        }
      ]
    },
    {
      "type": "library",
      "name": "call-bind-apply-helpers",
      "version": "1.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|call-bind-apply-helpers@1.0.2",
      "author": "Jordan Harband",
      "description": "Helper functions around Function call/apply/bind, for use in `call-bind`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/call-bind-apply-helpers.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/call-bind-apply-helpers#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/call-bind-apply-helpers/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/call-bind-apply-helpers"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-intrinsic",
      "version": "1.3.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|get-intrinsic@1.3.0",
      "author": "Jordan Harband",
      "description": "Get and robustly cache all JS language-level intrinsics at first require time",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-intrinsic@1.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/get-intrinsic.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/get-intrinsic#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/get-intrinsic/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.3.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-intrinsic"
        }
      ]
    },
    {
      "type": "library",
      "name": "which-typed-array",
      "version": "1.1.20",
      "bom-ref": "qs@4.0.0-tuxcare.3|which-typed-array@1.1.20",
      "author": "Jordan Harband",
      "description": "Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/which-typed-array@1.1.20",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/which-typed-array.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/which-typed-array#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/which-typed-array/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/which-typed-array/-/which-typed-array-1.1.20.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/which-typed-array"
        }
      ]
    },
    {
      "type": "library",
      "name": "fs.realpath",
      "version": "1.0.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|fs.realpath@1.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/fs.realpath.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/fs.realpath#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/fs.realpath/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fs.realpath"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-define-property",
      "version": "1.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|es-define-property@1.0.1",
      "author": "Jordan Harband",
      "description": "`Object.defineProperty`, but not IE 8's broken one.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-define-property@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/es-define-property.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/es-define-property#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/es-define-property/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-define-property/-/es-define-property-1.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-define-property"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-object-atoms",
      "version": "1.1.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|es-object-atoms@1.1.1",
      "author": "Jordan Harband",
      "description": "ES Object-related atoms: Object, ToObject, RequireObjectCoercible",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-object-atoms@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/es-object-atoms.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/es-object-atoms#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/es-object-atoms/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-object-atoms"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-proto",
      "version": "1.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|get-proto@1.0.1",
      "author": "Jordan Harband",
      "description": "Robustly get the [[Prototype]] of an object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-proto@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/get-proto.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/get-proto#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/get-proto/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-proto/-/get-proto-1.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-proto"
        }
      ]
    },
    {
      "type": "library",
      "name": "gopd",
      "version": "1.2.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|gopd@1.2.0",
      "author": "Jordan Harband",
      "description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/gopd@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/gopd.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/gopd#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/gopd/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/gopd/-/gopd-1.2.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/gopd"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-symbols",
      "version": "1.1.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|has-symbols@1.1.0",
      "author": "Jordan Harband",
      "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-symbols@1.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/has-symbols.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/has-symbols#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/has-symbols/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.1.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-symbols"
        }
      ]
    },
    {
      "type": "library",
      "name": "math-intrinsics",
      "version": "1.1.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|math-intrinsics@1.1.0",
      "author": "Jordan Harband",
      "description": "ES Math-related intrinsics and helpers, robustly cached.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/math-intrinsics@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/es-shims/math-intrinsics.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/math-intrinsics#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/math-intrinsics/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/math-intrinsics/-/math-intrinsics-1.1.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/math-intrinsics"
        }
      ]
    },
    {
      "type": "library",
      "name": "available-typed-arrays",
      "version": "1.0.7",
      "bom-ref": "qs@4.0.0-tuxcare.3|available-typed-arrays@1.0.7",
      "author": "Jordan Harband",
      "description": "Returns an array of Typed Array names that are available in the current environment",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/available-typed-arrays@1.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/available-typed-arrays.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/available-typed-arrays#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/available-typed-arrays/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/available-typed-arrays/-/available-typed-arrays-1.0.7.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/available-typed-arrays"
        }
      ]
    },
    {
      "type": "library",
      "name": "call-bind",
      "version": "1.0.8",
      "bom-ref": "qs@4.0.0-tuxcare.3|call-bind@1.0.8",
      "author": "Jordan Harband",
      "description": "Robustly `.call.bind()` a function",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/call-bind@1.0.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/call-bind.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/call-bind#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/call-bind/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/call-bind/-/call-bind-1.0.8.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/call-bind"
        }
      ]
    },
    {
      "type": "library",
      "name": "for-each",
      "version": "0.3.5",
      "bom-ref": "qs@4.0.0-tuxcare.3|for-each@0.3.5",
      "author": "Raynos",
      "description": "A better forEach",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/for-each@0.3.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/Raynos/for-each.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Raynos/for-each",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Raynos/for-each/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/for-each/-/for-each-0.3.5.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/for-each"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-tostringtag",
      "version": "1.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|has-tostringtag@1.0.2",
      "author": "Jordan Harband",
      "description": "Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-tostringtag@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/has-tostringtag.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/has-tostringtag#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/has-tostringtag/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-tostringtag/-/has-tostringtag-1.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-tostringtag"
        }
      ]
    },
    {
      "type": "library",
      "name": "dunder-proto",
      "version": "1.0.1",
      "bom-ref": "qs@4.0.0-tuxcare.3|dunder-proto@1.0.1",
      "author": "Jordan Harband",
      "description": "If available, the `Object.prototype.__proto__` accessor and mutator, call-bound",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/dunder-proto@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/es-shims/dunder-proto.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/es-shims/dunder-proto#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/es-shims/dunder-proto/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/dunder-proto/-/dunder-proto-1.0.1.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/dunder-proto"
        }
      ]
    },
    {
      "type": "library",
      "name": "possible-typed-array-names",
      "version": "1.1.0",
      "bom-ref": "qs@4.0.0-tuxcare.3|possible-typed-array-names@1.1.0",
      "author": "Jordan Harband",
      "description": "A simple list of possible Typed Array names.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/possible-typed-array-names@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/possible-typed-array-names.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/possible-typed-array-names#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/possible-typed-array-names/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/possible-typed-array-names/-/possible-typed-array-names-1.1.0.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/possible-typed-array-names"
        }
      ]
    },
    {
      "type": "library",
      "name": "set-function-length",
      "version": "1.2.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|set-function-length@1.2.2",
      "author": "Jordan Harband",
      "description": "Set a function's length property",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/set-function-length@1.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/set-function-length.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/set-function-length#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/set-function-length/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/set-function-length/-/set-function-length-1.2.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/set-function-length"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-callable",
      "version": "1.2.7",
      "bom-ref": "qs@4.0.0-tuxcare.3|is-callable@1.2.7",
      "author": "Jordan Harband",
      "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-callable@1.2.7",
      "externalReferences": [
        {
          "url": "git://github.com/inspect-js/is-callable.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/is-callable#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/is-callable/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-callable/-/is-callable-1.2.7.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-callable"
        }
      ]
    },
    {
      "type": "library",
      "name": "define-data-property",
      "version": "1.1.4",
      "bom-ref": "qs@4.0.0-tuxcare.3|define-data-property@1.1.4",
      "author": "Jordan Harband",
      "description": "Define a data property on an object. Will fall back to assignment in an engine without descriptors.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/define-data-property@1.1.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/define-data-property.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/define-data-property#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/define-data-property/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/define-data-property/-/define-data-property-1.1.4.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/define-data-property"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-property-descriptors",
      "version": "1.0.2",
      "bom-ref": "qs@4.0.0-tuxcare.3|has-property-descriptors@1.0.2",
      "author": "Jordan Harband",
      "description": "Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-property-descriptors@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/inspect-js/has-property-descriptors.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/inspect-js/has-property-descriptors#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/inspect-js/has-property-descriptors/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-property-descriptors/-/has-property-descriptors-1.0.2.tgz",
          "type": "distribution",
          "comment": "as detected from npm-ls property \"resolved\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-property-descriptors"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "qs@4.0.0-tuxcare.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|browserify@10.2.6",
        "qs@4.0.0-tuxcare.3|code@1.5.0",
        "qs@4.0.0-tuxcare.3|lab@5.18.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|browserify@10.2.6",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|assert@1.3.0",
        "qs@4.0.0-tuxcare.3|browser-pack@5.0.1",
        "qs@4.0.0-tuxcare.3|browser-resolve@1.11.3",
        "qs@4.0.0-tuxcare.3|browserify-zlib@0.1.4",
        "qs@4.0.0-tuxcare.3|buffer@3.6.2",
        "qs@4.0.0-tuxcare.3|builtins@0.0.7",
        "qs@4.0.0-tuxcare.3|commondir@0.0.1",
        "qs@4.0.0-tuxcare.3|concat-stream@1.4.11",
        "qs@4.0.0-tuxcare.3|console-browserify@1.2.0",
        "qs@4.0.0-tuxcare.3|constants-browserify@0.0.1",
        "qs@4.0.0-tuxcare.3|crypto-browserify@3.12.1",
        "qs@4.0.0-tuxcare.3|defined@1.0.1",
        "qs@4.0.0-tuxcare.3|deps-sort@1.3.9",
        "qs@4.0.0-tuxcare.3|domain-browser@1.1.7",
        "qs@4.0.0-tuxcare.3|duplexer2@0.0.2",
        "qs@4.0.0-tuxcare.3|events@1.0.2",
        "qs@4.0.0-tuxcare.3|glob@4.5.3",
        "qs@4.0.0-tuxcare.3|has@1.0.4",
        "qs@4.0.0-tuxcare.3|htmlescape@1.1.1",
        "qs@4.0.0-tuxcare.3|http-browserify@1.7.0",
        "qs@4.0.0-tuxcare.3|https-browserify@0.0.1",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|insert-module-globals@6.6.3",
        "qs@4.0.0-tuxcare.3|isarray@0.0.1",
        "qs@4.0.0-tuxcare.3|JSONStream@1.3.5",
        "qs@4.0.0-tuxcare.3|labeled-stream-splicer@1.0.2",
        "qs@4.0.0-tuxcare.3|module-deps@3.9.1",
        "qs@4.0.0-tuxcare.3|os-browserify@0.1.2",
        "qs@4.0.0-tuxcare.3|parents@1.0.1",
        "qs@4.0.0-tuxcare.3|path-browserify@0.0.1",
        "qs@4.0.0-tuxcare.3|process@0.11.10",
        "qs@4.0.0-tuxcare.3|punycode@1.4.1",
        "qs@4.0.0-tuxcare.3|querystring-es3@0.2.1",
        "qs@4.0.0-tuxcare.3|read-only-stream@1.1.1",
        "qs@4.0.0-tuxcare.3|readable-stream@1.1.14",
        "qs@4.0.0-tuxcare.3|resolve@1.22.11",
        "qs@4.0.0-tuxcare.3|shasum@1.0.2",
        "qs@4.0.0-tuxcare.3|shell-quote@0.0.1",
        "qs@4.0.0-tuxcare.3|stream-browserify@1.0.0",
        "qs@4.0.0-tuxcare.3|string_decoder@0.10.31",
        "qs@4.0.0-tuxcare.3|subarg@1.0.0",
        "qs@4.0.0-tuxcare.3|syntax-error@1.4.0",
        "qs@4.0.0-tuxcare.3|through2@1.1.1",
        "qs@4.0.0-tuxcare.3|timers-browserify@1.4.2",
        "qs@4.0.0-tuxcare.3|tty-browserify@0.0.1",
        "qs@4.0.0-tuxcare.3|url@0.10.3",
        "qs@4.0.0-tuxcare.3|util@0.10.4",
        "qs@4.0.0-tuxcare.3|vm-browserify@0.0.4",
        "qs@4.0.0-tuxcare.3|xtend@4.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|code@1.5.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|hoek@2.16.3"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lab@5.18.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|bossy@1.0.3",
        "qs@4.0.0-tuxcare.3|diff@2.2.3",
        "qs@4.0.0-tuxcare.3|eslint-config-hapi@2.0.1",
        "qs@4.0.0-tuxcare.3|eslint-plugin-hapi@1.2.2",
        "qs@4.0.0-tuxcare.3|eslint@1.5.1",
        "qs@4.0.0-tuxcare.3|espree@2.2.5",
        "qs@4.0.0-tuxcare.3|handlebars@4.7.8",
        "qs@4.0.0-tuxcare.3|hoek@2.16.3",
        "qs@4.0.0-tuxcare.3|items@1.1.1",
        "qs@4.0.0-tuxcare.3|jslint@0.9.8",
        "qs@4.0.0-tuxcare.3|json-stringify-safe@5.0.1",
        "qs@4.0.0-tuxcare.3|mkdirp@0.5.6",
        "qs@4.0.0-tuxcare.3|source-map-support@0.3.3"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|assert@1.3.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|assert@1.3.0|util@0.10.3"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|assert@1.3.0|util@0.10.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|assert@1.3.0|inherits@2.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|assert@1.3.0|inherits@2.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|browser-pack@5.0.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|combine-source-map@0.6.1",
        "qs@4.0.0-tuxcare.3|defined@1.0.1",
        "qs@4.0.0-tuxcare.3|JSONStream@1.3.5",
        "qs@4.0.0-tuxcare.3|through2@1.1.1",
        "qs@4.0.0-tuxcare.3|umd@3.0.3"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|browser-resolve@1.11.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|browser-resolve@1.11.3|resolve@1.1.7"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|browser-resolve@1.11.3|resolve@1.1.7"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|browserify-zlib@0.1.4",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|pako@0.2.9"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|buffer@3.6.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|base64-js@0.0.8",
        "qs@4.0.0-tuxcare.3|ieee754@1.2.1",
        "qs@4.0.0-tuxcare.3|buffer@3.6.2|isarray@1.0.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|buffer@3.6.2|isarray@1.0.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|builtins@0.0.7"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|commondir@0.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|concat-stream@1.4.11",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|readable-stream@1.1.14",
        "qs@4.0.0-tuxcare.3|typedarray@0.0.7"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|console-browserify@1.2.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|constants-browserify@0.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|crypto-browserify@3.12.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|browserify-cipher@1.0.1",
        "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5",
        "qs@4.0.0-tuxcare.3|create-ecdh@4.0.4",
        "qs@4.0.0-tuxcare.3|create-hash@1.2.0",
        "qs@4.0.0-tuxcare.3|create-hmac@1.1.7",
        "qs@4.0.0-tuxcare.3|diffie-hellman@5.0.3",
        "qs@4.0.0-tuxcare.3|hash-base@3.0.5",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|pbkdf2@3.1.5",
        "qs@4.0.0-tuxcare.3|public-encrypt@4.0.3",
        "qs@4.0.0-tuxcare.3|randombytes@2.1.0",
        "qs@4.0.0-tuxcare.3|randomfill@1.0.4"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|defined@1.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|deps-sort@1.3.9",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|JSONStream@1.3.5",
        "qs@4.0.0-tuxcare.3|shasum@1.0.2",
        "qs@4.0.0-tuxcare.3|subarg@1.0.0",
        "qs@4.0.0-tuxcare.3|through2@1.1.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|domain-browser@1.1.7"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|duplexer2@0.0.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|readable-stream@1.1.14"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|events@1.0.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|glob@4.5.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|inflight@1.0.6",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|minimatch@2.0.10",
        "qs@4.0.0-tuxcare.3|once@1.4.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|has@1.0.4"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|htmlescape@1.1.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|http-browserify@1.7.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|Base64@0.2.1",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|https-browserify@0.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|inherits@2.0.4"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|insert-module-globals@6.6.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|combine-source-map@0.6.1",
        "qs@4.0.0-tuxcare.3|concat-stream@1.4.11",
        "qs@4.0.0-tuxcare.3|is-buffer@1.1.6",
        "qs@4.0.0-tuxcare.3|JSONStream@1.3.5",
        "qs@4.0.0-tuxcare.3|lexical-scope@1.2.0",
        "qs@4.0.0-tuxcare.3|process@0.11.10",
        "qs@4.0.0-tuxcare.3|through2@1.1.1",
        "qs@4.0.0-tuxcare.3|xtend@4.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|isarray@0.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|JSONStream@1.3.5",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|jsonparse@1.3.1",
        "qs@4.0.0-tuxcare.3|through@2.3.8"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|labeled-stream-splicer@1.0.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|isarray@0.0.1",
        "qs@4.0.0-tuxcare.3|stream-splicer@1.3.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|module-deps@3.9.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|browser-resolve@1.11.3",
        "qs@4.0.0-tuxcare.3|concat-stream@1.4.11",
        "qs@4.0.0-tuxcare.3|defined@1.0.1",
        "qs@4.0.0-tuxcare.3|detective@4.7.1",
        "qs@4.0.0-tuxcare.3|duplexer2@0.0.2",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|JSONStream@1.3.5",
        "qs@4.0.0-tuxcare.3|parents@1.0.1",
        "qs@4.0.0-tuxcare.3|readable-stream@1.1.14",
        "qs@4.0.0-tuxcare.3|resolve@1.22.11",
        "qs@4.0.0-tuxcare.3|stream-combiner2@1.0.2",
        "qs@4.0.0-tuxcare.3|subarg@1.0.0",
        "qs@4.0.0-tuxcare.3|through2@1.1.1",
        "qs@4.0.0-tuxcare.3|xtend@4.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|os-browserify@0.1.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|parents@1.0.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|path-platform@0.11.15"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|path-browserify@0.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|process@0.11.10"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|punycode@1.4.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|querystring-es3@0.2.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|read-only-stream@1.1.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|readable-stream@1.1.14",
        "qs@4.0.0-tuxcare.3|readable-wrap@1.0.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|readable-stream@1.1.14",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|core-util-is@1.0.3",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|isarray@0.0.1",
        "qs@4.0.0-tuxcare.3|string_decoder@0.10.31"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|resolve@1.22.11",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|is-core-module@2.16.1",
        "qs@4.0.0-tuxcare.3|path-parse@1.0.7",
        "qs@4.0.0-tuxcare.3|supports-preserve-symlinks-flag@1.0.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|shasum@1.0.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|json-stable-stringify@0.0.1",
        "qs@4.0.0-tuxcare.3|sha.js@2.4.12"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|shell-quote@0.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|stream-browserify@1.0.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|readable-stream@1.1.14"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|string_decoder@0.10.31"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|subarg@1.0.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|minimist@1.2.8"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|syntax-error@1.4.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|acorn-node@1.8.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|through2@1.1.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|readable-stream@1.1.14",
        "qs@4.0.0-tuxcare.3|xtend@4.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|timers-browserify@1.4.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|process@0.11.10"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|tty-browserify@0.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|url@0.10.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|url@0.10.3|punycode@1.3.2",
        "qs@4.0.0-tuxcare.3|querystring@0.2.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|url@0.10.3|punycode@1.3.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|util@0.10.4",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|util@0.10.4|inherits@2.0.3"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|util@0.10.4|inherits@2.0.3"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|vm-browserify@0.0.4",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|indexof@0.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|xtend@4.0.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|hoek@2.16.3"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|bossy@1.0.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|hoek@2.16.3"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|diff@2.2.3"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|eslint-config-hapi@2.0.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|eslint-plugin-hapi@1.2.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|eslint-plugin-hapi@1.2.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|hapi-capitalize-modules@1.1.6",
        "qs@4.0.0-tuxcare.3|hapi-scope-start@1.1.4",
        "qs@4.0.0-tuxcare.3|no-shadow-relaxed@1.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|eslint@1.5.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|chalk@1.1.3",
        "qs@4.0.0-tuxcare.3|concat-stream@1.4.11",
        "qs@4.0.0-tuxcare.3|debug@2.6.9",
        "qs@4.0.0-tuxcare.3|doctrine@0.7.2",
        "qs@4.0.0-tuxcare.3|escape-string-regexp@1.0.5",
        "qs@4.0.0-tuxcare.3|escope@3.6.0",
        "qs@4.0.0-tuxcare.3|espree@2.2.5",
        "qs@4.0.0-tuxcare.3|estraverse-fb@1.3.2",
        "qs@4.0.0-tuxcare.3|estraverse@4.3.0",
        "qs@4.0.0-tuxcare.3|file-entry-cache@1.3.1",
        "qs@4.0.0-tuxcare.3|eslint@1.5.1|glob@5.0.15",
        "qs@4.0.0-tuxcare.3|globals@8.18.0",
        "qs@4.0.0-tuxcare.3|handlebars@4.7.8",
        "qs@4.0.0-tuxcare.3|inquirer@0.9.0",
        "qs@4.0.0-tuxcare.3|is-my-json-valid@2.20.6",
        "qs@4.0.0-tuxcare.3|is-resolvable@1.1.0",
        "qs@4.0.0-tuxcare.3|js-yaml@3.14.2",
        "qs@4.0.0-tuxcare.3|lodash.clonedeep@3.0.2",
        "qs@4.0.0-tuxcare.3|lodash.merge@3.3.2",
        "qs@4.0.0-tuxcare.3|lodash.omit@3.1.0",
        "qs@4.0.0-tuxcare.3|minimatch@2.0.10",
        "qs@4.0.0-tuxcare.3|mkdirp@0.5.6",
        "qs@4.0.0-tuxcare.3|object-assign@2.1.1",
        "qs@4.0.0-tuxcare.3|optionator@0.5.0",
        "qs@4.0.0-tuxcare.3|path-is-absolute@1.0.1",
        "qs@4.0.0-tuxcare.3|path-is-inside@1.0.2",
        "qs@4.0.0-tuxcare.3|shelljs@0.3.0",
        "qs@4.0.0-tuxcare.3|strip-json-comments@1.0.4",
        "qs@4.0.0-tuxcare.3|text-table@0.2.0",
        "qs@4.0.0-tuxcare.3|to-double-quotes@1.0.2",
        "qs@4.0.0-tuxcare.3|to-single-quotes@1.0.4",
        "qs@4.0.0-tuxcare.3|user-home@1.1.1",
        "qs@4.0.0-tuxcare.3|xml-escape@1.0.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|eslint@1.5.1|glob@5.0.15",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|inflight@1.0.6",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|minimatch@2.0.10",
        "qs@4.0.0-tuxcare.3|once@1.4.0",
        "qs@4.0.0-tuxcare.3|path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|espree@2.2.5"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|handlebars@4.7.8",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|minimist@1.2.8",
        "qs@4.0.0-tuxcare.3|neo-async@2.6.2",
        "qs@4.0.0-tuxcare.3|handlebars@4.7.8|source-map@0.6.1",
        "qs@4.0.0-tuxcare.3|uglify-js@3.19.3",
        "qs@4.0.0-tuxcare.3|wordwrap@1.0.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|handlebars@4.7.8|source-map@0.6.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|items@1.1.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|jslint@0.9.8",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|exit@0.1.2",
        "qs@4.0.0-tuxcare.3|glob@4.5.3",
        "qs@4.0.0-tuxcare.3|nopt@3.0.6",
        "qs@4.0.0-tuxcare.3|jslint@0.9.8|readable-stream@1.0.34"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|jslint@0.9.8|readable-stream@1.0.34",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|core-util-is@1.0.3",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|isarray@0.0.1",
        "qs@4.0.0-tuxcare.3|string_decoder@0.10.31"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|json-stringify-safe@5.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|mkdirp@0.5.6",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|minimist@1.2.8"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|source-map-support@0.3.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|source-map-support@0.3.3|source-map@0.1.32"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|source-map-support@0.3.3|source-map@0.1.32",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|amdefine@1.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|combine-source-map@0.6.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|convert-source-map@1.1.3",
        "qs@4.0.0-tuxcare.3|inline-source-map@0.5.0",
        "qs@4.0.0-tuxcare.3|lodash.memoize@3.0.4",
        "qs@4.0.0-tuxcare.3|source-map@0.4.4"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|umd@3.0.3"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|pako@0.2.9"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|base64-js@0.0.8"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|ieee754@1.2.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|typedarray@0.0.7"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|browserify-cipher@1.0.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|browserify-aes@1.2.0",
        "qs@4.0.0-tuxcare.3|browserify-des@1.0.2",
        "qs@4.0.0-tuxcare.3|evp_bytestokey@1.0.3"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|bn.js@5.2.2",
        "qs@4.0.0-tuxcare.3|browserify-rsa@4.1.1",
        "qs@4.0.0-tuxcare.3|create-hash@1.2.0",
        "qs@4.0.0-tuxcare.3|create-hmac@1.1.7",
        "qs@4.0.0-tuxcare.3|elliptic@6.6.1",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|parse-asn1@5.1.9",
        "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5|readable-stream@2.3.8",
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5|readable-stream@2.3.8",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|core-util-is@1.0.3",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5|isarray@1.0.0",
        "qs@4.0.0-tuxcare.3|process-nextick-args@2.0.1",
        "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5|readable-stream@2.3.8|safe-buffer@5.1.2",
        "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5|string_decoder@1.1.1",
        "qs@4.0.0-tuxcare.3|util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5|readable-stream@2.3.8|safe-buffer@5.1.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5|isarray@1.0.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5|string_decoder@1.1.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5|string_decoder@1.1.1|safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|browserify-sign@4.2.5|string_decoder@1.1.1|safe-buffer@5.1.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|create-ecdh@4.0.4",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|create-ecdh@4.0.4|bn.js@4.12.2",
        "qs@4.0.0-tuxcare.3|elliptic@6.6.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|create-ecdh@4.0.4|bn.js@4.12.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|create-hash@1.2.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|cipher-base@1.0.7",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|md5.js@1.3.5",
        "qs@4.0.0-tuxcare.3|ripemd160@2.0.3",
        "qs@4.0.0-tuxcare.3|sha.js@2.4.12"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|create-hmac@1.1.7",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|cipher-base@1.0.7",
        "qs@4.0.0-tuxcare.3|create-hash@1.2.0",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|ripemd160@2.0.3",
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1",
        "qs@4.0.0-tuxcare.3|sha.js@2.4.12"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|diffie-hellman@5.0.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|diffie-hellman@5.0.3|bn.js@4.12.2",
        "qs@4.0.0-tuxcare.3|miller-rabin@4.0.1",
        "qs@4.0.0-tuxcare.3|randombytes@2.1.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|diffie-hellman@5.0.3|bn.js@4.12.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|hash-base@3.0.5",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|pbkdf2@3.1.5",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|create-hash@1.2.0",
        "qs@4.0.0-tuxcare.3|create-hmac@1.1.7",
        "qs@4.0.0-tuxcare.3|ripemd160@2.0.3",
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1",
        "qs@4.0.0-tuxcare.3|sha.js@2.4.12",
        "qs@4.0.0-tuxcare.3|to-buffer@1.2.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|public-encrypt@4.0.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|public-encrypt@4.0.3|bn.js@4.12.2",
        "qs@4.0.0-tuxcare.3|browserify-rsa@4.1.1",
        "qs@4.0.0-tuxcare.3|create-hash@1.2.0",
        "qs@4.0.0-tuxcare.3|parse-asn1@5.1.9",
        "qs@4.0.0-tuxcare.3|randombytes@2.1.0",
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|public-encrypt@4.0.3|bn.js@4.12.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|randombytes@2.1.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|randomfill@1.0.4",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|randombytes@2.1.0",
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|inflight@1.0.6",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|once@1.4.0",
        "qs@4.0.0-tuxcare.3|wrappy@1.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|minimatch@2.0.10",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|brace-expansion@1.1.12"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|once@1.4.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|wrappy@1.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|Base64@0.2.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|is-buffer@1.1.6"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lexical-scope@1.2.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|astw@2.2.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|jsonparse@1.3.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|through@2.3.8"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|stream-splicer@1.3.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|indexof@0.0.1",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|isarray@0.0.1",
        "qs@4.0.0-tuxcare.3|readable-stream@1.1.14",
        "qs@4.0.0-tuxcare.3|readable-wrap@1.0.0",
        "qs@4.0.0-tuxcare.3|through2@1.1.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|detective@4.7.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|detective@4.7.1|acorn@5.7.4",
        "qs@4.0.0-tuxcare.3|defined@1.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|detective@4.7.1|acorn@5.7.4"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|stream-combiner2@1.0.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|duplexer2@0.0.2",
        "qs@4.0.0-tuxcare.3|stream-combiner2@1.0.2|through2@0.5.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|stream-combiner2@1.0.2|through2@0.5.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|stream-combiner2@1.0.2|readable-stream@1.0.34",
        "qs@4.0.0-tuxcare.3|stream-combiner2@1.0.2|xtend@3.0.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|stream-combiner2@1.0.2|readable-stream@1.0.34",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|core-util-is@1.0.3",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|isarray@0.0.1",
        "qs@4.0.0-tuxcare.3|string_decoder@0.10.31"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|stream-combiner2@1.0.2|xtend@3.0.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|path-platform@0.11.15"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|readable-wrap@1.0.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|readable-stream@1.1.14"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|core-util-is@1.0.3"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|is-core-module@2.16.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|hasown@2.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|path-parse@1.0.7"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|supports-preserve-symlinks-flag@1.0.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|json-stable-stringify@0.0.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|jsonify@0.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|sha.js@2.4.12",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1",
        "qs@4.0.0-tuxcare.3|to-buffer@1.2.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|minimist@1.2.8"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|acorn-node@1.8.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|acorn-walk@7.2.0",
        "qs@4.0.0-tuxcare.3|acorn-node@1.8.2|acorn@7.4.1",
        "qs@4.0.0-tuxcare.3|xtend@4.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|acorn-node@1.8.2|acorn@7.4.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|querystring@0.2.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|indexof@0.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|hapi-capitalize-modules@1.1.6"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|hapi-scope-start@1.1.4"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|no-shadow-relaxed@1.0.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|no-shadow-relaxed@1.0.1|eslint@0.24.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|no-shadow-relaxed@1.0.1|eslint@0.24.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|chalk@1.1.3",
        "qs@4.0.0-tuxcare.3|concat-stream@1.4.11",
        "qs@4.0.0-tuxcare.3|debug@2.6.9",
        "qs@4.0.0-tuxcare.3|no-shadow-relaxed@1.0.1|doctrine@0.6.4",
        "qs@4.0.0-tuxcare.3|escape-string-regexp@1.0.5",
        "qs@4.0.0-tuxcare.3|escope@3.6.0",
        "qs@4.0.0-tuxcare.3|espree@2.2.5",
        "qs@4.0.0-tuxcare.3|estraverse-fb@1.3.2",
        "qs@4.0.0-tuxcare.3|estraverse@4.3.0",
        "qs@4.0.0-tuxcare.3|globals@8.18.0",
        "qs@4.0.0-tuxcare.3|no-shadow-relaxed@1.0.1|inquirer@0.8.5",
        "qs@4.0.0-tuxcare.3|is-my-json-valid@2.20.6",
        "qs@4.0.0-tuxcare.3|js-yaml@3.14.2",
        "qs@4.0.0-tuxcare.3|minimatch@2.0.10",
        "qs@4.0.0-tuxcare.3|mkdirp@0.5.6",
        "qs@4.0.0-tuxcare.3|object-assign@2.1.1",
        "qs@4.0.0-tuxcare.3|optionator@0.5.0",
        "qs@4.0.0-tuxcare.3|path-is-absolute@1.0.1",
        "qs@4.0.0-tuxcare.3|strip-json-comments@1.0.4",
        "qs@4.0.0-tuxcare.3|text-table@0.2.0",
        "qs@4.0.0-tuxcare.3|user-home@1.1.1",
        "qs@4.0.0-tuxcare.3|xml-escape@1.0.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|no-shadow-relaxed@1.0.1|doctrine@0.6.4",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|esutils@1.1.6",
        "qs@4.0.0-tuxcare.3|isarray@0.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|no-shadow-relaxed@1.0.1|inquirer@0.8.5",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|no-shadow-relaxed@1.0.1|ansi-regex@1.1.1",
        "qs@4.0.0-tuxcare.3|chalk@1.1.3",
        "qs@4.0.0-tuxcare.3|cli-width@1.1.1",
        "qs@4.0.0-tuxcare.3|figures@1.7.0",
        "qs@4.0.0-tuxcare.3|lodash@3.10.1",
        "qs@4.0.0-tuxcare.3|readline2@0.1.1",
        "qs@4.0.0-tuxcare.3|rx@2.5.3",
        "qs@4.0.0-tuxcare.3|through@2.3.8"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|no-shadow-relaxed@1.0.1|ansi-regex@1.1.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|chalk@1.1.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|ansi-styles@2.2.1",
        "qs@4.0.0-tuxcare.3|escape-string-regexp@1.0.5",
        "qs@4.0.0-tuxcare.3|has-ansi@2.0.0",
        "qs@4.0.0-tuxcare.3|strip-ansi@3.0.1",
        "qs@4.0.0-tuxcare.3|supports-color@2.0.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|debug@2.6.9",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|ms@2.0.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|doctrine@0.7.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|esutils@1.1.6",
        "qs@4.0.0-tuxcare.3|isarray@0.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|escape-string-regexp@1.0.5"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|escope@3.6.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|es6-map@0.1.5",
        "qs@4.0.0-tuxcare.3|es6-weak-map@2.0.3",
        "qs@4.0.0-tuxcare.3|esrecurse@4.3.0",
        "qs@4.0.0-tuxcare.3|estraverse@4.3.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|estraverse-fb@1.3.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|estraverse@4.3.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|estraverse@4.3.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|file-entry-cache@1.3.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|flat-cache@1.3.4",
        "qs@4.0.0-tuxcare.3|file-entry-cache@1.3.1|object-assign@4.1.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|file-entry-cache@1.3.1|object-assign@4.1.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|globals@8.18.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|inquirer@0.9.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|ansi-regex@2.1.1",
        "qs@4.0.0-tuxcare.3|chalk@1.1.3",
        "qs@4.0.0-tuxcare.3|cli-width@1.1.1",
        "qs@4.0.0-tuxcare.3|figures@1.7.0",
        "qs@4.0.0-tuxcare.3|lodash@3.10.1",
        "qs@4.0.0-tuxcare.3|readline2@0.1.1",
        "qs@4.0.0-tuxcare.3|run-async@0.1.0",
        "qs@4.0.0-tuxcare.3|rx-lite@2.5.2",
        "qs@4.0.0-tuxcare.3|strip-ansi@3.0.1",
        "qs@4.0.0-tuxcare.3|through@2.3.8"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|is-my-json-valid@2.20.6",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|generate-function@2.3.1",
        "qs@4.0.0-tuxcare.3|generate-object-property@1.2.0",
        "qs@4.0.0-tuxcare.3|is-my-ip-valid@1.0.1",
        "qs@4.0.0-tuxcare.3|jsonpointer@5.0.1",
        "qs@4.0.0-tuxcare.3|xtend@4.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|is-resolvable@1.1.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|js-yaml@3.14.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|argparse@1.0.10",
        "qs@4.0.0-tuxcare.3|js-yaml@3.14.2|esprima@4.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|js-yaml@3.14.2|esprima@4.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash.clonedeep@3.0.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|lodash._baseclone@3.3.0",
        "qs@4.0.0-tuxcare.3|lodash._bindcallback@3.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash.merge@3.3.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|lodash._arraycopy@3.0.0",
        "qs@4.0.0-tuxcare.3|lodash._arrayeach@3.0.0",
        "qs@4.0.0-tuxcare.3|lodash._createassigner@3.1.1",
        "qs@4.0.0-tuxcare.3|lodash._getnative@3.9.1",
        "qs@4.0.0-tuxcare.3|lodash.isarguments@3.1.0",
        "qs@4.0.0-tuxcare.3|lodash.isarray@3.0.4",
        "qs@4.0.0-tuxcare.3|lodash.isplainobject@3.2.0",
        "qs@4.0.0-tuxcare.3|lodash.istypedarray@3.0.6",
        "qs@4.0.0-tuxcare.3|lodash.keys@3.1.2",
        "qs@4.0.0-tuxcare.3|lodash.keysin@3.0.8",
        "qs@4.0.0-tuxcare.3|lodash.toplainobject@3.0.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash.omit@3.1.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|lodash._arraymap@3.0.0",
        "qs@4.0.0-tuxcare.3|lodash._basedifference@3.0.3",
        "qs@4.0.0-tuxcare.3|lodash._baseflatten@3.1.4",
        "qs@4.0.0-tuxcare.3|lodash._bindcallback@3.0.1",
        "qs@4.0.0-tuxcare.3|lodash._pickbyarray@3.0.2",
        "qs@4.0.0-tuxcare.3|lodash._pickbycallback@3.0.0",
        "qs@4.0.0-tuxcare.3|lodash.keysin@3.0.8",
        "qs@4.0.0-tuxcare.3|lodash.restparam@3.6.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|object-assign@2.1.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|optionator@0.5.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|deep-is@0.1.4",
        "qs@4.0.0-tuxcare.3|fast-levenshtein@1.0.7",
        "qs@4.0.0-tuxcare.3|levn@0.2.5",
        "qs@4.0.0-tuxcare.3|prelude-ls@1.1.2",
        "qs@4.0.0-tuxcare.3|type-check@0.3.2",
        "qs@4.0.0-tuxcare.3|optionator@0.5.0|wordwrap@0.0.3"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|optionator@0.5.0|wordwrap@0.0.3"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|path-is-absolute@1.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|path-is-inside@1.0.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|shelljs@0.3.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|strip-json-comments@1.0.4"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|text-table@0.2.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|to-double-quotes@1.0.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|get-stdin@3.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|to-single-quotes@1.0.4",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|get-stdin@3.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|user-home@1.1.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|xml-escape@1.0.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|neo-async@2.6.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|uglify-js@3.19.3"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|wordwrap@1.0.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|exit@0.1.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|nopt@3.0.6",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|abbrev@1.1.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|convert-source-map@1.1.3"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|inline-source-map@0.5.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|source-map@0.4.4"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash.memoize@3.0.4"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|source-map@0.4.4",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|amdefine@1.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|browserify-aes@1.2.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|buffer-xor@1.0.3",
        "qs@4.0.0-tuxcare.3|cipher-base@1.0.7",
        "qs@4.0.0-tuxcare.3|create-hash@1.2.0",
        "qs@4.0.0-tuxcare.3|evp_bytestokey@1.0.3",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|browserify-des@1.0.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|cipher-base@1.0.7",
        "qs@4.0.0-tuxcare.3|des.js@1.1.0",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|evp_bytestokey@1.0.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|md5.js@1.3.5",
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|bn.js@5.2.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|browserify-rsa@4.1.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|bn.js@5.2.2",
        "qs@4.0.0-tuxcare.3|randombytes@2.1.0",
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|elliptic@6.6.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|elliptic@6.6.1|bn.js@4.12.2",
        "qs@4.0.0-tuxcare.3|brorand@1.1.0",
        "qs@4.0.0-tuxcare.3|hash.js@1.1.7",
        "qs@4.0.0-tuxcare.3|hmac-drbg@1.0.1",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|minimalistic-assert@1.0.1",
        "qs@4.0.0-tuxcare.3|minimalistic-crypto-utils@1.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|elliptic@6.6.1|bn.js@4.12.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|parse-asn1@5.1.9",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|asn1.js@4.10.1",
        "qs@4.0.0-tuxcare.3|browserify-aes@1.2.0",
        "qs@4.0.0-tuxcare.3|evp_bytestokey@1.0.3",
        "qs@4.0.0-tuxcare.3|pbkdf2@3.1.5",
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|cipher-base@1.0.7",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1",
        "qs@4.0.0-tuxcare.3|to-buffer@1.2.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|md5.js@1.3.5",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|hash-base@3.0.5",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|ripemd160@2.0.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|hash-base@3.1.2",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|hash-base@3.1.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|readable-stream@2.3.8",
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1",
        "qs@4.0.0-tuxcare.3|to-buffer@1.2.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|readable-stream@2.3.8",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|core-util-is@1.0.3",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|isarray@1.0.0",
        "qs@4.0.0-tuxcare.3|process-nextick-args@2.0.1",
        "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|readable-stream@2.3.8|safe-buffer@5.1.2",
        "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|string_decoder@1.1.1",
        "qs@4.0.0-tuxcare.3|util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|readable-stream@2.3.8|safe-buffer@5.1.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|isarray@1.0.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|string_decoder@1.1.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|string_decoder@1.1.1|safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|ripemd160@2.0.3|string_decoder@1.1.1|safe-buffer@5.1.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|miller-rabin@4.0.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|miller-rabin@4.0.1|bn.js@4.12.2",
        "qs@4.0.0-tuxcare.3|brorand@1.1.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|miller-rabin@4.0.1|bn.js@4.12.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|to-buffer@1.2.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|to-buffer@1.2.2|isarray@2.0.5",
        "qs@4.0.0-tuxcare.3|safe-buffer@5.2.1",
        "qs@4.0.0-tuxcare.3|typed-array-buffer@1.0.3"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|to-buffer@1.2.2|isarray@2.0.5"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|wrappy@1.0.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|brace-expansion@1.1.12",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|balanced-match@1.0.2",
        "qs@4.0.0-tuxcare.3|concat-map@0.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|astw@2.2.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|acorn@4.0.13"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|hasown@2.0.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|function-bind@1.1.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|jsonify@0.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|acorn-walk@7.2.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|ansi-styles@2.2.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|has-ansi@2.0.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|strip-ansi@3.0.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|supports-color@2.0.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|ms@2.0.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|esutils@1.1.6"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|es6-map@0.1.5",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|d@1.0.2",
        "qs@4.0.0-tuxcare.3|es5-ext@0.10.64",
        "qs@4.0.0-tuxcare.3|es6-iterator@2.0.3",
        "qs@4.0.0-tuxcare.3|es6-set@0.1.6",
        "qs@4.0.0-tuxcare.3|es6-symbol@3.1.4",
        "qs@4.0.0-tuxcare.3|event-emitter@0.3.5"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|es6-weak-map@2.0.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|d@1.0.2",
        "qs@4.0.0-tuxcare.3|es5-ext@0.10.64",
        "qs@4.0.0-tuxcare.3|es6-iterator@2.0.3",
        "qs@4.0.0-tuxcare.3|es6-symbol@3.1.4"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|esrecurse@4.3.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|esrecurse@4.3.0|estraverse@5.3.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|esrecurse@4.3.0|estraverse@5.3.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|flat-cache@1.3.4",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|circular-json@0.3.3",
        "qs@4.0.0-tuxcare.3|graceful-fs@4.2.11",
        "qs@4.0.0-tuxcare.3|rimraf@2.6.3",
        "qs@4.0.0-tuxcare.3|write@0.2.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|ansi-regex@2.1.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|cli-width@1.1.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|figures@1.7.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|escape-string-regexp@1.0.5",
        "qs@4.0.0-tuxcare.3|figures@1.7.0|object-assign@4.1.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|figures@1.7.0|object-assign@4.1.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash@3.10.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|readline2@0.1.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|mute-stream@0.0.4",
        "qs@4.0.0-tuxcare.3|readline2@0.1.1|strip-ansi@2.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|readline2@0.1.1|strip-ansi@2.0.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|readline2@0.1.1|ansi-regex@1.1.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|readline2@0.1.1|ansi-regex@1.1.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|run-async@0.1.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|once@1.4.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|rx-lite@2.5.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|generate-function@2.3.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|is-property@1.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|generate-object-property@1.2.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|is-property@1.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|is-my-ip-valid@1.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|jsonpointer@5.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|argparse@1.0.10",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|sprintf-js@1.0.3"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._baseclone@3.3.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|lodash._arraycopy@3.0.0",
        "qs@4.0.0-tuxcare.3|lodash._arrayeach@3.0.0",
        "qs@4.0.0-tuxcare.3|lodash._baseassign@3.2.0",
        "qs@4.0.0-tuxcare.3|lodash._basefor@3.0.3",
        "qs@4.0.0-tuxcare.3|lodash.isarray@3.0.4",
        "qs@4.0.0-tuxcare.3|lodash.keys@3.1.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._bindcallback@3.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._arraycopy@3.0.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._arrayeach@3.0.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._createassigner@3.1.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|lodash._bindcallback@3.0.1",
        "qs@4.0.0-tuxcare.3|lodash._isiterateecall@3.0.9",
        "qs@4.0.0-tuxcare.3|lodash.restparam@3.6.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._getnative@3.9.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash.isarguments@3.1.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash.isarray@3.0.4"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash.isplainobject@3.2.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|lodash._basefor@3.0.3",
        "qs@4.0.0-tuxcare.3|lodash.isarguments@3.1.0",
        "qs@4.0.0-tuxcare.3|lodash.keysin@3.0.8"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash.istypedarray@3.0.6"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash.keys@3.1.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|lodash._getnative@3.9.1",
        "qs@4.0.0-tuxcare.3|lodash.isarguments@3.1.0",
        "qs@4.0.0-tuxcare.3|lodash.isarray@3.0.4"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash.keysin@3.0.8",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|lodash.isarguments@3.1.0",
        "qs@4.0.0-tuxcare.3|lodash.isarray@3.0.4"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash.toplainobject@3.0.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|lodash._basecopy@3.0.1",
        "qs@4.0.0-tuxcare.3|lodash.keysin@3.0.8"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._arraymap@3.0.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._basedifference@3.0.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|lodash._baseindexof@3.1.0",
        "qs@4.0.0-tuxcare.3|lodash._cacheindexof@3.0.2",
        "qs@4.0.0-tuxcare.3|lodash._createcache@3.1.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._baseflatten@3.1.4",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|lodash.isarguments@3.1.0",
        "qs@4.0.0-tuxcare.3|lodash.isarray@3.0.4"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._pickbyarray@3.0.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._pickbycallback@3.0.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|lodash._basefor@3.0.3",
        "qs@4.0.0-tuxcare.3|lodash.keysin@3.0.8"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash.restparam@3.6.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|deep-is@0.1.4"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|fast-levenshtein@1.0.7"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|levn@0.2.5",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|prelude-ls@1.1.2",
        "qs@4.0.0-tuxcare.3|type-check@0.3.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|prelude-ls@1.1.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|type-check@0.3.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|prelude-ls@1.1.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|get-stdin@3.0.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|abbrev@1.1.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|amdefine@1.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|buffer-xor@1.0.3"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|des.js@1.1.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|minimalistic-assert@1.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|brorand@1.1.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|hash.js@1.1.7",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|minimalistic-assert@1.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|hmac-drbg@1.0.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|hash.js@1.1.7",
        "qs@4.0.0-tuxcare.3|minimalistic-assert@1.0.1",
        "qs@4.0.0-tuxcare.3|minimalistic-crypto-utils@1.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|minimalistic-assert@1.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|minimalistic-crypto-utils@1.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|asn1.js@4.10.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|asn1.js@4.10.1|bn.js@4.12.2",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|minimalistic-assert@1.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|asn1.js@4.10.1|bn.js@4.12.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|process-nextick-args@2.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|util-deprecate@1.0.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|typed-array-buffer@1.0.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|call-bound@1.0.4",
        "qs@4.0.0-tuxcare.3|es-errors@1.3.0",
        "qs@4.0.0-tuxcare.3|is-typed-array@1.1.15"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|balanced-match@1.0.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|concat-map@0.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|acorn@4.0.13"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|function-bind@1.1.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|d@1.0.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|es5-ext@0.10.64",
        "qs@4.0.0-tuxcare.3|type@2.7.3"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|es5-ext@0.10.64",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|es6-iterator@2.0.3",
        "qs@4.0.0-tuxcare.3|es6-symbol@3.1.4",
        "qs@4.0.0-tuxcare.3|esniff@2.0.1",
        "qs@4.0.0-tuxcare.3|next-tick@1.1.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|es6-iterator@2.0.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|d@1.0.2",
        "qs@4.0.0-tuxcare.3|es5-ext@0.10.64",
        "qs@4.0.0-tuxcare.3|es6-symbol@3.1.4"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|es6-set@0.1.6",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|d@1.0.2",
        "qs@4.0.0-tuxcare.3|es5-ext@0.10.64",
        "qs@4.0.0-tuxcare.3|es6-iterator@2.0.3",
        "qs@4.0.0-tuxcare.3|es6-symbol@3.1.4",
        "qs@4.0.0-tuxcare.3|event-emitter@0.3.5",
        "qs@4.0.0-tuxcare.3|type@2.7.3"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|es6-symbol@3.1.4",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|d@1.0.2",
        "qs@4.0.0-tuxcare.3|ext@1.7.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|event-emitter@0.3.5",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|d@1.0.2",
        "qs@4.0.0-tuxcare.3|es5-ext@0.10.64"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|circular-json@0.3.3"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|graceful-fs@4.2.11"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|rimraf@2.6.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|rimraf@2.6.3|glob@7.2.3"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|rimraf@2.6.3|glob@7.2.3",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|fs.realpath@1.0.0",
        "qs@4.0.0-tuxcare.3|inflight@1.0.6",
        "qs@4.0.0-tuxcare.3|inherits@2.0.4",
        "qs@4.0.0-tuxcare.3|rimraf@2.6.3|minimatch@3.1.2",
        "qs@4.0.0-tuxcare.3|once@1.4.0",
        "qs@4.0.0-tuxcare.3|path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|rimraf@2.6.3|minimatch@3.1.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|brace-expansion@1.1.12"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|write@0.2.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|mkdirp@0.5.6"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|mute-stream@0.0.4"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|is-property@1.0.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|sprintf-js@1.0.3"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._baseassign@3.2.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|lodash._basecopy@3.0.1",
        "qs@4.0.0-tuxcare.3|lodash.keys@3.1.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._basefor@3.0.3"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._isiterateecall@3.0.9"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._basecopy@3.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._baseindexof@3.1.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._cacheindexof@3.0.2"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|lodash._createcache@3.1.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|lodash._getnative@3.9.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|call-bound@1.0.4",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|call-bind-apply-helpers@1.0.2",
        "qs@4.0.0-tuxcare.3|get-intrinsic@1.3.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|es-errors@1.3.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|is-typed-array@1.1.15",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|which-typed-array@1.1.20"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|rx@2.5.3"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|type@2.7.3"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|esniff@2.0.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|d@1.0.2",
        "qs@4.0.0-tuxcare.3|es5-ext@0.10.64",
        "qs@4.0.0-tuxcare.3|event-emitter@0.3.5",
        "qs@4.0.0-tuxcare.3|type@2.7.3"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|next-tick@1.1.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|ext@1.7.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|type@2.7.3"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|call-bind-apply-helpers@1.0.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|es-errors@1.3.0",
        "qs@4.0.0-tuxcare.3|function-bind@1.1.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|get-intrinsic@1.3.0",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|call-bind-apply-helpers@1.0.2",
        "qs@4.0.0-tuxcare.3|es-define-property@1.0.1",
        "qs@4.0.0-tuxcare.3|es-errors@1.3.0",
        "qs@4.0.0-tuxcare.3|es-object-atoms@1.1.1",
        "qs@4.0.0-tuxcare.3|function-bind@1.1.2",
        "qs@4.0.0-tuxcare.3|get-proto@1.0.1",
        "qs@4.0.0-tuxcare.3|gopd@1.2.0",
        "qs@4.0.0-tuxcare.3|has-symbols@1.1.0",
        "qs@4.0.0-tuxcare.3|hasown@2.0.2",
        "qs@4.0.0-tuxcare.3|math-intrinsics@1.1.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|which-typed-array@1.1.20",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|available-typed-arrays@1.0.7",
        "qs@4.0.0-tuxcare.3|call-bind@1.0.8",
        "qs@4.0.0-tuxcare.3|call-bound@1.0.4",
        "qs@4.0.0-tuxcare.3|for-each@0.3.5",
        "qs@4.0.0-tuxcare.3|get-proto@1.0.1",
        "qs@4.0.0-tuxcare.3|gopd@1.2.0",
        "qs@4.0.0-tuxcare.3|has-tostringtag@1.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|fs.realpath@1.0.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|es-define-property@1.0.1"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|es-object-atoms@1.1.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|es-errors@1.3.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|get-proto@1.0.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|dunder-proto@1.0.1",
        "qs@4.0.0-tuxcare.3|es-object-atoms@1.1.1"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|gopd@1.2.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|has-symbols@1.1.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|math-intrinsics@1.1.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|available-typed-arrays@1.0.7",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|possible-typed-array-names@1.1.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|call-bind@1.0.8",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|call-bind-apply-helpers@1.0.2",
        "qs@4.0.0-tuxcare.3|es-define-property@1.0.1",
        "qs@4.0.0-tuxcare.3|get-intrinsic@1.3.0",
        "qs@4.0.0-tuxcare.3|set-function-length@1.2.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|for-each@0.3.5",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|is-callable@1.2.7"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|has-tostringtag@1.0.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|has-symbols@1.1.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|dunder-proto@1.0.1",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|call-bind-apply-helpers@1.0.2",
        "qs@4.0.0-tuxcare.3|es-errors@1.3.0",
        "qs@4.0.0-tuxcare.3|gopd@1.2.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|possible-typed-array-names@1.1.0"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|set-function-length@1.2.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|define-data-property@1.1.4",
        "qs@4.0.0-tuxcare.3|es-errors@1.3.0",
        "qs@4.0.0-tuxcare.3|function-bind@1.1.2",
        "qs@4.0.0-tuxcare.3|get-intrinsic@1.3.0",
        "qs@4.0.0-tuxcare.3|gopd@1.2.0",
        "qs@4.0.0-tuxcare.3|has-property-descriptors@1.0.2"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|is-callable@1.2.7"
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|define-data-property@1.1.4",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|es-define-property@1.0.1",
        "qs@4.0.0-tuxcare.3|es-errors@1.3.0",
        "qs@4.0.0-tuxcare.3|gopd@1.2.0"
      ]
    },
    {
      "ref": "qs@4.0.0-tuxcare.3|has-property-descriptors@1.0.2",
      "dependsOn": [
        "qs@4.0.0-tuxcare.3|es-define-property@1.0.1"
      ]
    }
  ]
}