{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:849e0ecd-b99c-471e-8657-ac54e53f7162",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-15T18:49:43Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "react-star-ratings",
      "group": "",
      "version": "2.3.0",
      "description": "A customizable star rating component for selecting x stars or visualizing x stars",
      "purl": "pkg:npm/react-star-ratings@2.3.0",
      "bom-ref": "pkg:npm/react-star-ratings@2.3.0",
      "author": "Eric Kennedy <ekeric13@gmail.com> (https://github.com/ekeric13)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test, build"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "components": [
        {
          "group": "",
          "name": "test",
          "version": "0.1.0",
          "purl": "pkg:npm/test@0.1.0",
          "type": "application",
          "bom-ref": "pkg:npm/test@0.1.0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ekeric13/react-star-ratings"
        },
        {
          "type": "vcs",
          "url": "https://github.com/ekeric13/react-star-ratings.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json\\ntest/package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "classnames",
      "version": "2.2.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb3801d453467649ef3603c7d61a02bd129bde6d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/classnames@2.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/classnames/-/classnames-2.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/classnames@2.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/classnames/-/classnames-2.2.5.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "classnames"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "build/star.js",
            "line": 13
          },
          {
            "location": "src/star.js",
            "line": 2
          },
          {
            "location": "src/star.js",
            "line": 84
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prop-types",
      "version": "15.6.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ceaf083022fc46b4a35f69e13ef75aed0d639856"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/prop-types@15.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prop-types/-/prop-types-15.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prop-types@15.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prop-types/-/prop-types-15.6.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "prop-types"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "build/star-ratings.js",
            "line": 13
          },
          {
            "location": "build/star.js",
            "line": 17
          },
          {
            "location": "src/star-ratings.js",
            "line": 2
          },
          {
            "location": "src/star.js",
            "line": 3
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fbjs",
      "version": "0.8.16",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5e67432f550dc41b572bf55847b8aca64e5337db"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fbjs@0.8.16",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fbjs/-/fbjs-0.8.16.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fbjs@0.8.16",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fbjs/-/fbjs-0.8.16.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "652294c14651db28fa93bd2d5ff2983a4f08c636"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/core-js@1.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-js/-/core-js-1.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-js/-/core-js-1.2.7.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "core-js@<3.23.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Some versions have web compatibility issues. Please, upgrade your dependencies to the actual version of core-js."
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isomorphic-fetch",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "611ae1acf14f5e81f729507472819fe9733558a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isomorphic-fetch@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isomorphic-fetch/-/isomorphic-fetch-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isomorphic-fetch@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isomorphic-fetch/-/isomorphic-fetch-2.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-fetch",
      "version": "1.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3616780ac2b1edc626daf4ab040af63ef14e7bab160dfd1460b46a03ab2f51883bfbf4d27d502ee3d8d80b806f4384a6b3d49981da86060ae8a9f0e125d4f229"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-fetch@1.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-1.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-fetch@1.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-fetch/-/node-fetch-1.7.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encoding",
      "version": "0.1.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "538b66f3ee62cd1ab51ec323829d1f9480c74beb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/encoding@0.1.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encoding/-/encoding-0.1.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encoding@0.1.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encoding/-/encoding-0.1.12.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1366ac1e20fe75c5a18f238b8f6b9ebf3eb8bfe3cd11fa6a3b49e53e6044c1c903610c6e79c9c17234b220b5af6f5e120baf15c3985ed91a1a9921cb8dd2025"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.19.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-stream",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "12d4a3dd4e68e0b79ceb8dbc84173ae80d91ca44"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-stream@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-fetch",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9c84ec2dcf68187ff00bc64e1274b442176e1c84"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/whatwg-fetch@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-fetch/-/whatwg-fetch-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-fetch@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-fetch/-/whatwg-fetch-2.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loose-envify",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d1a8ad33fa9ce0e713d65fdd0ac8b748d478c848"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/loose-envify@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loose-envify@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loose-envify/-/loose-envify-1.3.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/loose-envify"
        },
        {
          "name": "cdx:npm:bin",
          "value": "loose-envify"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-tokens",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9866df395102130e38f7f996bceb65443209c25b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-tokens@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-tokens/-/js-tokens-3.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2109adc7965887cfc05cbbd442cac8bfbb360863"
        },
        {
          "alg": "SHA-512",
          "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "promise",
      "version": "7.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e89505d9ff82fe6cffd41a591f688ba35fd04ac46c2643d393e263ade72bf2f222b5877c2a4c42428a3cc600d4c20a5f675a3638d63bb2027d8add0d612cb4e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/promise@7.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/promise/-/promise-7.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise@7.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/promise/-/promise-7.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asap",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e50347611d7e690943208bbdafebcbc2fb866d46"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/asap@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asap@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setimmediate",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "290cbb232e306942d7d7ea9b83732ab7856f8285"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/setimmediate@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setimmediate/-/setimmediate-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setimmediate@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setimmediate/-/setimmediate-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ua-parser-js",
      "version": "0.7.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b9175276ed68035ae770240beec0a3f2f4b266482d2fb7da6b0f5373dad9de61a0ada43bf8f771ef0e669ce485de0c3d64d1baa1cf8a5df9289f76cab913a6d2"
        }
      ],
      "licenses": [
        {
          "expression": "GPL-2.0-only OR MIT"
        }
      ],
      "purl": "pkg:npm/ua-parser-js@0.7.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ua-parser-js@0.7.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ua-parser-js/-/ua-parser-js-0.7.17.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "You are using an outdated version of ua-parser-js. Please update to ua-parser-js v0.7.33 / v1.0.33 / v2.0.0 (or later) to avoid ReDoS vulnerability [CVE-2022-25927](https://github.com/advisories/GHSA-fhg7-m89q-25r3)"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "react",
      "version": "16.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86f29894aa9d7b624d9cd884cce46f480d09d4beee499e3797e27cf593683f8117c50ad5347d02163f2fa2b7cfa2edf0fb5a2ed4134c062af6555b2e5ed11344"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react@16.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react/-/react-16.1.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react@16.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react/-/react-16.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "react,Component,react/Component"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "build/star-ratings.js",
            "line": 9
          },
          {
            "location": "build/star.js",
            "line": 9
          },
          {
            "location": "example/index.js",
            "line": 1
          },
          {
            "location": "src/star-ratings.js",
            "line": 1
          },
          {
            "location": "src/star.js",
            "line": 1
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react-fatigue-dev",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cab26a5a914610a21c72a77b690eb6dbffd9bae394793246e213625e99d713b06ca6dcab690ecf54a3b8d895bdecb472779f6748c5c5c9c11bcccd1b65031630"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-fatigue-dev@1.0.0?vcs_url=git%2Bssh%3A//git%40github.com/ekeric13/react-fatigue-dev.git%23fadba8f808376e8b6f0e4b07e9744f6e4b44cf09",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "git+ssh://git@github.com/ekeric13/react-fatigue-dev.git#fadba8f808376e8b6f0e4b07e9744f6e4b44cf09"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-fatigue-dev@1.0.0?vcs_url=git+ssh://git@github.com/ekeric13/react-fatigue-dev.git#fadba8f808376e8b6f0e4b07e9744f6e4b44cf09",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "git+ssh://git@github.com/ekeric13/react-fatigue-dev.git#fadba8f808376e8b6f0e4b07e9744f6e4b44cf09"
        },
        {
          "name": "cdx:npm:manifestSourceType",
          "value": "git"
        },
        {
          "name": "cdx:npm:manifestSource",
          "value": "github:ekeric13/react-fatigue-dev"
        },
        {
          "name": "cdx:npm:isRegistryDependency",
          "value": "false"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "babel-cli",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "502ab54874d7db88ad00b887a06383ce03d002f1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-cli@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-cli/-/babel-cli-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-cli@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-cli/-/babel-cli-6.26.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/babel, /app/node_modules/.bin/babel-doctor, /app/node_modules/.bin/babel-external-helpers, /app/node_modules/.bin/babel-node"
        },
        {
          "name": "cdx:npm:bin",
          "value": "babel, babel-doctor, babel-external-helpers, babel-node"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-core",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "af32f78b31a6fcef119c87b0fd8d9753f03a0bb8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-core@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-core/-/babel-core-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-core@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-core/-/babel-core-6.26.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-code-frame",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "63fd43f7dc1e3bb7ce35947db8fe369a3f58c74b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-code-frame@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-code-frame/-/babel-code-frame-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-code-frame@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-code-frame/-/babel-code-frame-6.26.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a8115c55e4a702fe4d150abd3872822a7e09fc98"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chalk@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b432dd3358b634cf75e1e4664368240533c1ddbe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-ansi",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "34f5049ce1ecdf2b0649af3ef24e45ed35416d91"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-ansi@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-ansi@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c3b33ab5ee360d86e0e628f0468ae7ef27d654df"
        },
        {
          "alg": "SHA-512",
          "content": "4c81a74e9768f84dfea42c8096e66fb440f9a79c02a8b75ecc2ca13d9cca3dcc6f169944b788be5bb38e3422a0799153dfecb935965f38e4bf05d71a9e6d4c60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6a385fb8853d952d5ff05d0e8aaf94278dc63dcf"
        },
        {
          "alg": "SHA-512",
          "content": "561ba64926c1a834cff29d992ca8f8d148c1095e3ebfc6d4484a546f82a34605a4f696ea185e111058fa2846a089d6f67ff33a0330b41261720cd19ac3d382ce"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "535d045ce6b6363fa40117084629995e9df324c7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-color@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esutils",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0abf4f1caa5bcb1f7a9d8acc6dea4faaa04bac9b"
        }
      ],
      "purl": "pkg:npm/esutils@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esutils/-/esutils-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esutils/-/esutils-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-generator",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ac1ae20070b79f6e3ca1d3269613053774f20dc5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-generator@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-generator/-/babel-generator-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-generator@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-generator/-/babel-generator-6.26.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-messages",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f3cdf4703858035b2a2951c6ec5edf6c62f2630e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-messages@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-messages/-/babel-messages-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-messages@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-messages/-/babel-messages-6.23.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-runtime",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "965c7058668e82b55d7bfe04ff2337bc8b5647fe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-runtime@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-runtime/-/babel-runtime-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-runtime@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-runtime/-/babel-runtime-6.26.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-js",
      "version": "2.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8acc38345824f16d8365b7c9b4259168e8ed603e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/core-js@2.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-js/-/core-js-2.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js@2.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-js/-/core-js-2.5.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "core-js@<3.23.3 is no longer maintained and not recommended for usage due to the number of issues. Because of the V8 engine whims, feature detection in old core-js versions could cause a slowdown up to 100x even if nothing is polyfilled. Some versions have web compatibility issues. Please, upgrade your dependencies to the actual version of core-js."
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator-runtime",
      "version": "0.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "320b86f79a228f47c2dd05775117f8576483606261267246aaf20881d10278e0c24fdf304960c027de124ae5696105284dc19420be8be32341ee3d431451d206"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regenerator-runtime@0.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-runtime@0.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.11.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-types",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3b073f94ab49eb6fa55cd65227a334380632497"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-types@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-types/-/babel-types-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-types@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-types/-/babel-types-6.26.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash",
      "version": "4.17.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "78203a4d1c328ae1d86dca6460e369b57f4055ae"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash@4.17.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash/-/lodash-4.17.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-fast-properties",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b83571fa4d8c25b82e231b06e3a3055de4ca1a47"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/to-fast-properties@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-fast-properties@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-fast-properties/-/to-fast-properties-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-indent",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f76d064352cdf43a1cb6ce619c4ee3a9475de208"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/detect-indent@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-indent/-/detect-indent-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-indent@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-indent/-/detect-indent-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeating",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5214c53a926d3552707527fbab415dbc08d06dda"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/repeating@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeating/-/repeating-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeating@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeating/-/repeating-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-finite",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cc6677695602be550ef11e8b4aa6305342b6d0aa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-finite@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-finite/-/is-finite-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-finite@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-finite/-/is-finite-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "number-is-nan",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "097b602b53422a522c1afb8790318336941a011d"
        },
        {
          "alg": "SHA-512",
          "content": "e236ed657340b1f65b0078a2aa32cf0620a5d7a7444b5cc8e07a73cf1c3ad5393e96817eb010c12b1d4808a28ac08a90eccd26167d539a437b7ae4a771680789"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/number-is-nan@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/number-is-nan@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsesc",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "46c3fec8c1892b12b0833db9bc7622176dbab34b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsesc@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsesc/-/jsesc-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsesc@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsesc/-/jsesc-1.3.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/jsesc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jsesc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.5.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a039d2d1021d22d1ea14c80d8ea468ba2ef3fcc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.5.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.5.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "trim-right",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cb2e1203067e0c8de1f614094b9fe45704ea6003"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/trim-right@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/trim-right/-/trim-right-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/trim-right@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/trim-right/-/trim-right-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helpers",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3471de9caec388e5c850e597e58a26ddf37602b2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helpers@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helpers/-/babel-helpers-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helpers@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helpers/-/babel-helpers-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-template",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de03e2d16396b069f46dd9fff8521fb1a0e35e02"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-template@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-template/-/babel-template-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-template@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-template/-/babel-template-6.26.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-traverse",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "46a9cbd7edcc62c8e5c064e2d2d8d0f4035766ee"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-traverse@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-traverse/-/babel-traverse-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-traverse@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-traverse/-/babel-traverse-6.26.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babylon",
      "version": "6.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "abf5048df189d829b7a0a57bd43273f5ddb94cf9eae6b84154bd90e1f039c1c0b78dcadd9fbf92b2c1326c5231c00bef3fe602b0260d2ae821a05df71b183271"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babylon@6.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babylon/-/babylon-6.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babylon@6.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babylon/-/babylon-6.18.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/babylon"
        },
        {
          "name": "cdx:npm:bin",
          "value": "babylon"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@2.6.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5608aeadfc00be6c2901df5f9861788de0d597c8"
        },
        {
          "alg": "SHA-512",
          "content": "4e9a7ad0fe885090d3b8eabfe59f1c76c93326e8dfc2a7ce4e4af02308fb211212a679099d3e92c89e0f08f9c63281630bd75d85a979295218b40b7dee2c74e4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globals",
      "version": "9.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b49c6dc22c442263f20bc6ab73b53587ff789145dc812f0e8a303c6728c721aed6e3d8e1667a1561d165027d6dc352b220c7fa85ac93c80abab8678b1347d51"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globals@9.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globals/-/globals-9.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globals@9.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globals/-/globals-9.18.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "invariant",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9e1f56ac0acdb6bf303306f338be3b204ae60360"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/invariant@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/invariant/-/invariant-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/invariant@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/invariant/-/invariant-2.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-register",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6ed021173e2fcb486d7acb45c6009a856f647071"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-register@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-register/-/babel-register-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-register@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-register/-/babel-register-6.26.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "home-or-tmp",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e36c3f2d2cae7d746a857e38d18d5f32a7882db8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/home-or-tmp@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/home-or-tmp/-/home-or-tmp-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/home-or-tmp@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/home-or-tmp/-/home-or-tmp-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-homedir",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ffbc4988336e0e833de0c168c7ef152121aa7fb3"
        },
        {
          "alg": "SHA-512",
          "content": "079254ddc69bce4f1cebb99145ddc40a644e69f8d83176eece5c2da9d33c21b4bc92d9538b1f1a1466f66c018aad24489677cac28bc6514afbd8950fc8e6fa91"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/os-homedir@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-homedir@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-tmpdir",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bbe67406c79aa85c5cfec766fe5734555dfa1274"
        },
        {
          "alg": "SHA-512",
          "content": "0f6151d37562afb148bb8e57058db49936fefd9496074d2c8d4f637505edf37803ac8e19b73e45b3bff2cbbe20d8de52550638c58d6a0ebe2b35d770611557d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/os-tmpdir@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-tmpdir@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30057438eac6cf7f8c4767f38648d6697d75c903"
        },
        {
          "alg": "SHA-512",
          "content": "4a49c90b9da86cf7c640f9e32245db980ebee47d7913e7d1f84e22476a10df3cc22db77bfce36e6baf51fc6c3b0209132ec446fabe5fce4b18c167b50204f258"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mkdirp"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "857fcabfc3397d2625b8228262e86aa7a011b05d"
        },
        {
          "alg": "SHA-512",
          "content": "9a240ac391efe0d4b53ec836e75ee65787b875835a3b7fbe86302f2ce0332aa67ad6b1fc352d522bebdb7c1599e4f63f31efdb116854c2a3208445b915bf53ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimist@0.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-support",
      "version": "0.4.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6bcb4fc9ab13cb17d9ce8ef4ad6bbb55a277643f97708322c38d5a323039668ee813da5459d4e7ecad84e409dda19039c94ca45b3bf465de8ae6f2f96c5336c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map-support@0.4.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.4.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-support@0.4.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.4.18.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b8278097b9bc229365de5c62cf5fcaed8b5599e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.5.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json5",
      "version": "0.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1eade7acc012034ad84e2396767ead9fa5495821"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json5@0.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json5/-/json5-0.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json5@0.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json5/-/json5-0.5.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/json5"
        },
        {
          "name": "cdx:npm:bin",
          "value": "json5"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c07b211c7c952ec1f8efd51a77ef0d1d3990a292"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "89b4d199ab2bee49de164ea02b89ce462d71b767"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
        },
        {
          "alg": "SHA-512",
          "content": "fd2aefe1db30c903417e8846a73f68e986f71b3dd2ad40ea047e6b4ee84647b6a1b656d82a7571c366c214c4658da03b1171da5d9f30b07768745bdb9212a6aa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
        },
        {
          "alg": "SHA-512",
          "content": "0156f0dd42767bd6eaeb8bd2692f409b47e37b53daf296c6a934ec9977da2223299ebe4394385f24eb8b8fd49ff7964f5430147ab0df124f3c30f98f7bb50242"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "private",
      "version": "0.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56f8af32b6ef7769ca9221b7f2a8d42f395cfb8571e309bfc2123da500f7e58ac044d9e1c5e89192d48e852ba444b14d97383a06bfdc24f7ade49feed7daff9a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/private@0.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/private/-/private-0.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/private@0.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/private/-/private-0.1.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slash",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c41f2f6c39fc16d1cd17ad4b5d896114ae470d55"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/slash@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slash/-/slash-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slash@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slash/-/slash-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-polyfill",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "379937abc67d7895970adc621f284cd966cf2153"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-polyfill@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-polyfill/-/babel-polyfill-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-polyfill@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-polyfill/-/babel-polyfill-6.26.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator-runtime",
      "version": "0.10.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "336c3efc1220adcedda2c9fab67b5a7955a33658"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regenerator-runtime@0.10.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.10.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-runtime@0.10.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.10.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.12.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0459daab964e19c0cdec596bb414f8c71920213a1a948231c23c4b59527c6c64e97b52eba2a322a905dd03bca073b091bda612fbdcdf3c616726a1526b2c7e00"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/commander@2.12.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.12.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.12.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.12.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-readdir-recursive",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "18d6a75e556bda97f4dbeb0f378d1737c1c6f9e3da35cbccd2ae6664177aebc39bc1bd320f91a251b64e160c27f2418c63a23799dc8327389e532dcf4d8c9344"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fs-readdir-recursive@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-readdir-recursive/-/fs-readdir-recursive-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-readdir-recursive@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-readdir-recursive/-/fs-readdir-recursive-1.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "7.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3094d4835923b8b790089f9c704e15a5aea42955e43d827698e090c94b8a2dc2d0b1dacc0a904f522f2a544ebe62e689928cde03d36eb13030de12ebf177b911"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@7.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob/-/glob-7.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob/-/glob-7.1.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1504ad2523158caa40db4a2787cb01411994ea4f"
        },
        {
          "alg": "SHA-512",
          "content": "38ed291f694ae9ad2166701d6aee48b731cf23aa5496f23b8cc567c54411b70e28c05db093c94e49a6ed1830933f81a0ae0d8c6c69d63bd5fc2b5b78f9f18c0f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9"
        },
        {
          "alg": "SHA-512",
          "content": "93dd88fdbd3cab8c2f16c71708bbea7ec1c2ae3ac5ef2897b10b8856f544ecdf365b7f9aaa9cee51d05b7e159ccbf159477ff82207e532028b3acbcf0eb18224"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful."
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1"
        },
        {
          "alg": "SHA-512",
          "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
        },
        {
          "alg": "SHA-512",
          "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "633c2c83e3da42a502f52466022480f4208261de"
        },
        {
          "alg": "SHA-512",
          "content": "c74d0844d5cdcbade3c069099b33e2828c921db6aaa4dbb329b04e9b32be83639d66943dc3eb3108df95481de36bb20081ed8e3f6aa97f14e378d7328e65b5bb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "output-file-sync",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d0a33eefe61a205facb90092e826598d5245ce76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/output-file-sync@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/output-file-sync/-/output-file-sync-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/output-file-sync@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/output-file-sync/-/output-file-sync-1.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.1.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0e8bdfe4d1ddb8854d64e04ea7c00e2a026e5658"
        },
        {
          "alg": "SHA-512",
          "content": "f71e832d4b96f9138574c4c823d79cf6dfc52bcbdaea461c0bcfcb820ba6b2c2ccf2436fec874597756b354aa08abdad26e055c4181ad5006847389969c3b966"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.1.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.11.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "v8flags",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aab1a1fa30d45f88dd321148875ac02c0b55e5b4"
        }
      ],
      "purl": "pkg:npm/v8flags@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/v8flags/-/v8flags-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/v8flags@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/v8flags/-/v8flags-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "user-home",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b5be23a32b63a7c9deb8d0f28d485724a3df190"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/user-home@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/user-home/-/user-home-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/user-home@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/user-home/-/user-home-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/user-home"
        },
        {
          "name": "cdx:npm:bin",
          "value": "user-home"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chokidar",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "798e689778151c8076b4b360e5edd28cda2bb468"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chokidar@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chokidar/-/chokidar-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chokidar/-/chokidar-1.7.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "anymatch",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1735ac82f254c7436388f1a963342377b12c7a86caffd7eae5703028b57251ec2d686591c236c7e96cac0c8d103752a6f9b45d5169eda89684ebe31a6af968c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/anymatch@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/anymatch/-/anymatch-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/anymatch@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/anymatch/-/anymatch-1.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "micromatch",
      "version": "2.3.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "86677c97d1720b363431d04d0d15293bd38c1565"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/micromatch@2.3.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/micromatch/-/micromatch-2.3.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/micromatch@2.3.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/micromatch/-/micromatch-2.3.11.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-diff",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f3b827f955a8bd669697e4a4256ac3ceae356cf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/arr-diff@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-diff/-/arr-diff-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-diff@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-diff/-/arr-diff-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arr-flatten",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2f784a57947fa79a3cd51eced362069f0a439a4a7a13df365e1b5bbb049edcee2a3ad30c32da1d89c0120350a7cb653e6825dc3699a5fa6e1d3ecbec2778dab6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/arr-flatten@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arr-flatten@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-unique",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a1d97ccafcbc2625cc70fadceb36a50c58b01a53"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-unique@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-unique/-/array-unique-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-unique@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-unique/-/array-unique-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "braces",
      "version": "1.8.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba77962e12dff969d6b76711e914b737857bf6a7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/braces@1.8.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/braces/-/braces-1.8.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@1.8.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/braces/-/braces-1.8.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-range",
      "version": "1.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a299effd335fe2721ebae8e257ec79644fc85337"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/expand-range@1.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-range/-/expand-range-1.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-range@1.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-range/-/expand-range-1.8.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fill-range",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "50b77dfd7e469bc7492470963699fe7a8485a723"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fill-range@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fill-range/-/fill-range-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fill-range/-/fill-range-2.2.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "01fcbbb393463a548f2f466cce16dece49db908f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-number@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "3.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "31ea21a734bab9bbb0f32466d893aea51e4a3c64"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/kind-of@3.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@3.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-buffer",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35c7402f0a579139b966fbdb93ba303944af56f04a0e028fe7f7b07d71339e64057ece194666a739e2814e34558e46b7405a0de9727ef45dd44aa7c7a93694e7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-buffer@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-buffer@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isobject",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f065561096a3f1da2ef46272f815c840d87e0c89"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isobject@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isobject@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isobject/-/isobject-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb935d48582cba168c06834957a54a3e07124f11"
        },
        {
          "alg": "SHA-512",
          "content": "54b82121634ce842d0ce8ef3c26720d0d99357258a623bc878cf37ca3a74c110d39949eb33aefc7d06dc281a3a9f6089105d2cce81bfff2b60f932a56bcf402d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randomatic",
      "version": "1.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0f92548cfc896da24392e01ace956749f5642e5a5e3b7c0394f44e4cc2c6286d73305345460adc88aa3596dcff03335392a1341f30f1eb9e5038be75374ea1a3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/randomatic@1.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/randomatic/-/randomatic-1.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randomatic@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/randomatic/-/randomatic-1.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-number",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "24fd6201a4782cf50561c810276afc7d12d71195"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-number@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-number/-/is-number-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kind-of",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20813df3d712928b207378691a45066fae72dd57"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/kind-of@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kind-of/-/kind-of-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-element",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef089a178d1483baae4d93eb98b4f9e4e11d990a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/repeat-element@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-element@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-element/-/repeat-element-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "repeat-string",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8dcae470e1c88abc2d600fff4a776286da75e637"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/repeat-string@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/repeat-string@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "preserve",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "815ed1f6ebc65926f865b310c0713bcb3315ce4b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/preserve@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/preserve/-/preserve-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/preserve@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/preserve/-/preserve-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-brackets",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df07284e342a807cd733ac5af72411e581d1177b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/expand-brackets@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-brackets@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-brackets/-/expand-brackets-0.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-posix-bracket",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3334dc79774368e92f016e6fbc0a88f5cd6e6bc4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-posix-bracket@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-posix-bracket/-/is-posix-bracket-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-posix-bracket@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-posix-bracket/-/is-posix-bracket-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extglob",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2e18ff3d2f49ab2765cec9023f011daa8d8349a1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/extglob@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extglob/-/extglob-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extglob@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extglob/-/extglob-0.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extglob",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ac468177c4943405a092fc8f29760c6ffc6206c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-extglob@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filename-regex",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c1c4b9bee3e09725ddb106b75c1e301fe2f18b26"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/filename-regex@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/filename-regex/-/filename-regex-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/filename-regex@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/filename-regex/-/filename-regex-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d096f926a3ded5600f3fdfd91198cb0888c2d863"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-glob@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-glob/-/is-glob-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-path",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1ab28b556e198363a8c1a6f7e6fa20137fe6aed9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/normalize-path@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-path/-/normalize-path-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-path@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-path/-/normalize-path-2.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "remove-trailing-separator",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c24bce2a283adad5bc3f58e0d48249b92379d8ef"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/remove-trailing-separator@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/remove-trailing-separator@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object.omit",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1a9c744829f39dbb858c76ca3579ae2a54ebd1fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object.omit@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object.omit/-/object.omit-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.omit@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object.omit/-/object.omit-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-own",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5265c681a4f294dabbf17c9509b6763aa84510ce"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/for-own@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-own/-/for-own-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-own@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-own/-/for-own-0.1.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "for-in",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "81068d295a8142ec0ac726c6e2200c30fb6d5e80"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/for-in@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-in@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/for-in/-/for-in-1.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extendable",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62b110e289a471418e3ec36a617d472e301dfc89"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-extendable@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extendable@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extendable/-/is-extendable-0.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-glob",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2c376cfb11f35513badd173ef0bb6e3a388391c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-glob@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-glob/-/parse-glob-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-glob@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-glob/-/parse-glob-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-base",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dbb164f6221b1c0b1ccf82aea328b497df0ea3c4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob-base@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-base/-/glob-base-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-base@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-base/-/glob-base-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob-parent",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "81383d72db054fcccf5336daa902f182f6edbb28"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob-parent@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/glob-parent/-/glob-parent-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/glob-parent/-/glob-parent-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-dotfile",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a6a2f32ffd2dfb04f5ca25ecd0f6b83cf798a1e1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-dotfile@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-dotfile/-/is-dotfile-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-dotfile@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-dotfile/-/is-dotfile-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regex-cache",
      "version": "0.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9d5219c2d0a3902f5882f5a4a4ce79079ac184161166101a25b81c1585d7b079db67d51923d9e7556619a41942aaff61a36799af23e75ab646b0e74fc1559759"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regex-cache@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regex-cache/-/regex-cache-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regex-cache@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regex-cache/-/regex-cache-0.4.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-equal-shallow",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2238098fc221de0bcfa5d9eac4c45d638aa1c534"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-equal-shallow@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-equal-shallow/-/is-equal-shallow-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-equal-shallow@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-equal-shallow/-/is-equal-shallow-0.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-primitive",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "207bab91638499c07b2adf240a41a87210034575"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-primitive@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-primitive/-/is-primitive-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-primitive@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-primitive/-/is-primitive-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-each",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "19d386a1d9edc6e7c1c85d388aedbcc56d33602d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/async-each@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-each/-/async-each-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-each@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-each/-/async-each-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-binary-path",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "75f16642b480f187a711c814161fd3a4a7655898"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-binary-path@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-binary-path@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-binary-path/-/is-binary-path-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binary-extensions",
      "version": "1.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "46aa1751fb6a2f93ee5e689bb1087d4b14c6c205"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/binary-extensions@1.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-1.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binary-extensions@1.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-1.11.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdirp",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4ed0ad060df3073300c48440373f72d1cc642d78"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readdirp@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdirp/-/readdirp-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdirp/-/readdirp-2.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9beab3cdc9fb294c4499dd6031b72117e63678851b89e51ac645ada6dc87cb0ad7d2b13c40462a3c2d3b56ecb85a6df6ff1135e8d71d05cb5bf12d177bfe4879"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-util-is",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7"
        },
        {
          "alg": "SHA-512",
          "content": "de5ab3e588d64d89d6e9d9436b94cb69309c4a17daaf57b8d2b99c255c020490ba996945ba3d1e0872049661b5839932b89fc60fef169f814509ccf88093df69"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "150e20b756590ad3f91093f25a4f2ad8bff30ba3"
        },
        {
          "alg": "SHA-512",
          "content": "c8dd16426b825fadcb3ff4ccbc0837d67bd3ea6e2f0ea2448a2bf608066a58e18d5aeb5cf437c393534f61898a50599a54cd94c03a301f8bb90075983ff8f12b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/process-nextick-args@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-1.0.7.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90abcd267e8c9bdde001ccd654983bc07fb019858dac31dd5afa54987c84b200ad230c28ddba8fb55e2d479b6e3da5214cea3f92f855c1df17c303a59466246e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e001fa6797f334d05c1fee970cc7c0fc14edf3bb24c6a2653b49408770e47abe734e1700c46ea62b3fa21aedf4f142a83cf43c0dcab1ff8261ba3ce5b516be85"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "450d4dc9fa70de732762fbd2d4a28981419a0ccf"
        },
        {
          "alg": "SHA-512",
          "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-immediate-shim",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b2b1b27eb808a9f8dcc481a58e5e56f599f3f61"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/set-immediate-shim@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/set-immediate-shim/-/set-immediate-shim-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-immediate-shim@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-immediate-shim/-/set-immediate-shim-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "588afb88391d99d6f1bbf1a1e9e2846492fa28f13be3fe4c12c7f6c214ce14dc5b228222c6882ba0b74a62a07a1436afe166af87f959773cddddbd8ac485c2e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fsevents@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fsevents/-/fsevents-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fsevents/-/fsevents-1.1.3.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Upgrade to fsevents v2 to mitigate potential security issues"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "2.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed715f3fe9de02b57a5e6252d90a96675e1f085a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/nan@2.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nan/-/nan-2.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nan@2.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nan/-/nan-2.8.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-pre-gyp",
      "version": "0.6.39",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ac255ef8ab19efcff00c1a071f6680da7835ca0f7a18dd05486c19b0b334c59118ac4d25db310ca7e145b350c3ad03949586b059393a74c1ca120607cc7cc99"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-pre-gyp@0.6.39",
      "type": "library",
      "bom-ref": "pkg:npm/node-pre-gyp@0.6.39",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/node-pre-gyp"
        },
        {
          "name": "cdx:npm:bin",
          "value": "node-pre-gyp"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please upgrade to @mapbox/node-pre-gyp: the non-scoped node-pre-gyp package is deprecated and only the @mapbox scoped package will recieve updates in the future"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-libc",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61ec5eb6a3f6750665159a06a04fc06fb656c48844c5a47012196e3c4a9e80627328856f56d5629ef20bc4087f5abcc3a0d219d7d5d4dc4f89d2d1173c4e4c03"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/detect-libc@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/detect-libc@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/detect-libc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "detect-libc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hawk",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5fcc5b99373571b3d77105785a42dc44c00bbb2a3185fa450139b2b82c493ce02fac34b80cd9ec4c03a6294c4c4ce594e93ceb4ce9313cac08c7964ea49552ae"
        },
        {
          "alg": "SHA-1",
          "content": "078444bd7c1640b0fe540d2c9b73d59678e8e1c4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hawk@3.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/hawk@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module moved to @hapi/hawk. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues."
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hawk/-/hawk-3.1.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boom",
      "version": "2.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "29b89911af7fbe87cd7152571b07565a7db9ade4375777470566d2d3b153177fd339e84b9e6f46121255e13e99bc63e44a1469994a98c27682ae48f49919cfe9"
        },
        {
          "alg": "SHA-1",
          "content": "39c8918ceff5799f83f9492a848f625add0c766f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/boom@2.10.1",
      "type": "library",
      "bom-ref": "pkg:npm/boom@2.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)."
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boom/-/boom-2.10.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hoek",
      "version": "2.16.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57a630d6b21c615ff826c9e0823054d25e0aafe117869c2a5d1bac10d5355f1eaba34d081cf1d83729c2b814ce6403e5af700098bbdc847f48ecdfd551dbcec1"
        },
        {
          "alg": "SHA-1",
          "content": "20bb7403d3cea398e91dc4710a8ff1b8274a25ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hoek@2.16.3",
      "type": "library",
      "bom-ref": "pkg:npm/hoek@2.16.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)."
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hoek/-/hoek-2.16.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cryptiles",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1453792b0a6fbd04d34b98563f1ad4f3f404e2441473abb065cae794c04df36b7532002dabc9a7a03c08341972f5376bd36b1e788221b5d17e507d5f781606a2"
        },
        {
          "alg": "SHA-1",
          "content": "3bdfecdc608147c1c67202fa291e7dca59eaa3b8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cryptiles@2.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/cryptiles@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version has been deprecated in accordance with the hapi support policy (hapi.im/support). Please upgrade to the latest version to get the best features, bug fixes, and security patches. If you are unable to upgrade at this time, paid support is available for older versions (hapi.im/commercial)."
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cryptiles/-/cryptiles-2.0.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sntp",
      "version": "1.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "edb8153809cf8f75e3aca639efb4bea6e08a18246552b72b11db0c7915e583d1a17f975fff1362eac38d51ae375ab1d47774e324117b3b4e23628898d0555ad0"
        },
        {
          "alg": "SHA-1",
          "content": "6541184cc90aeea6c6e7b35e2659082443c66198"
        }
      ],
      "purl": "pkg:npm/sntp@1.0.9",
      "type": "library",
      "bom-ref": "pkg:npm/sntp@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module moved to @hapi/sntp. Please make sure to switch over as this distribution is no longer supported and may contain bugs and critical security issues."
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sntp/-/sntp-1.0.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nopt",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fb95d9169419118d1c83925ac4bc06c4394a34a631b97c06b7cfce8b75179b9ff8ca6ac9bdef5dd825118adbb1bf7ad2ad5086663e26d54d499474dd70ab7636"
        },
        {
          "alg": "SHA-1",
          "content": "d0d4685afd5415193c8c7505602d0d17cd64474d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/nopt@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/nopt@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/nopt"
        },
        {
          "name": "cdx:npm:bin",
          "value": "nopt"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nopt/-/nopt-4.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "abbrev",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73dd959aae617c1817ca851a1ea17c3f9fbb4c71a3bf102507ae2d9b73e215201c0f0c37e27766ae548e777014681668bad0f05f4747cfd9d4505a03d63130d1"
        },
        {
          "alg": "SHA-1",
          "content": "d0554c2256636e2f56e7c2e5ad183f859428d81f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/abbrev@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/abbrev@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/abbrev/-/abbrev-1.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "osenv",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5ba1616cbc4459d8b25f6fdf0a5d9805950939859a08725afa3270515317d22158266c32774bb32b1e0dc45763df1a3d0b4a6e990e86fdfbddd4c6cd86ca906d"
        },
        {
          "alg": "SHA-1",
          "content": "42fe6d5953df06c8064be6f176c3d05aaaa34644"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/osenv@0.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/osenv@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/osenv/-/osenv-0.1.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npmlog",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1ca2522465866df14bdeba20d2d320249088e2775a3b94f1bc7189b4e72358cc19fcca442d6a23cc106a7c7d8f6d29d0e09bca24a5d2b392fbb5cbd85462e80"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/npmlog@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/npmlog@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npmlog/-/npmlog-4.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "are-we-there-yet",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41b30f23cb5e625641201a838262167c328ed78f5d1ad415da2ba6f169e209a01114545dd5ef88112d4b038b1219c55315d54beb6f3ed7add651bc5ebfb47f69"
        },
        {
          "alg": "SHA-1",
          "content": "bb5dca382bb94f05e15194373d16fd3ba1ca110d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/are-we-there-yet@1.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/are-we-there-yet@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/are-we-there-yet/-/are-we-there-yet-1.1.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delegates",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ddd8bebbf2e89601333a9b967557334212b2378e21b3b7a1c663c395202b38d0942afc700b7dbc8d266a745036a4118e2930c68dd0bcb9a26fc1d5523ffb17d"
        },
        {
          "alg": "SHA-1",
          "content": "84c6e159b81904fdca59a0ef44cd870d31250f9a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/delegates@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/delegates@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delegates/-/delegates-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.2.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8aec6a5fb6fb158b74f00ae26040b152c2bd2935c4dc0fc57a7c486b720f9af00d1f16933ffc06230c1ff8889dbef20393f32c0a9fe8115e80f025e8e120dc0a"
        },
        {
          "alg": "SHA-1",
          "content": "cf78ec6f4a6d1eb43d26488cac97f042e74b7fc8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@2.2.9",
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.2.9.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-shims",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "672f195cccb1213e91313798ece3ff6c39dd7e3e9bc026a7ed24bdf02127752e9d787c163e9b1e7879706ab35c0629be7ad5e717d1c17359e89f92600da254d6"
        },
        {
          "alg": "SHA-1",
          "content": "9978ce317388c649ad8793028c3477ef044a8b51"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer-shims@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-shims@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-shims/-/buffer-shims-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31afd74860bc95f0efc3be5e2e3820fdad6758306eb6d79d9a96db3711f946ecabd0886a35738a6c6e3af15b4fa2cae385180d3af8289e6639e199c631d8098f"
        },
        {
          "alg": "SHA-1",
          "content": "62e200f039955a6810d8df0a33ffc0f013662d98"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72bedd6562f039e68504b4c8b997987647ceed4cc620a863604349140c5438c29619a5839b69c9336af3c4d466e4ec2ed031f7029c0da3a931e6275765f6ff23"
        },
        {
          "alg": "SHA-1",
          "content": "d263ca54696cd8a306b5ca6551e92de57918fbe7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "console-control-strings",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b72fdf4de929a43d9f23046f9d901575e3a219dd5ced85c48b16e0253373a9cc4958a4278c9fd5d5b344104ea1ca0a4cdd68f01c55152ba1d38d64b35786bcb1"
        },
        {
          "alg": "SHA-1",
          "content": "3d7cf4464db6446ea644bf4b39507f9851008e8e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/console-control-strings@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/console-control-strings@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/console-control-strings/-/console-control-strings-1.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gauge",
      "version": "2.7.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d78c7892373a9640f796dc39f3d93436b3c3e9c08d4c3e825a855436907ce7e0ebb4e368667f91ba0eb1654e51bd20b8f9364fc40e409c189b41802f667e351e"
        },
        {
          "alg": "SHA-1",
          "content": "2c03405c7538c39d7eb37b317022e325fb018bf7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gauge@2.7.4",
      "type": "library",
      "bom-ref": "pkg:npm/gauge@2.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gauge/-/gauge-2.7.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aproba",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c1d751972559ee7d190a5cec7f402a7f9bc691eeff5fc413d06125298afca80b84f34b65a9bbca7f8865ac3134ff3a88f19ea3e078c821a07d819e3ce248e3b3"
        },
        {
          "alg": "SHA-1",
          "content": "95d3600f07710aa0e9298c726ad5ecf2eacbabab"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/aproba@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/aproba@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aproba/-/aproba-1.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-unicode",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f117fd63cdcd05178c9f1d2017303c248990002b2d098594a657a90daf71a6bc30b6680465417487f8b9c5203adb9cc1fc8dfb12daecc12493e8e5f1c1a68825"
        },
        {
          "alg": "SHA-1",
          "content": "e0e6fe6a28cf51138855e086d1691e771de2a8b9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-unicode@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/has-unicode@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-unicode/-/has-unicode-2.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "signal-exit",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99e40d37293079c57176ed5195830aa50c78fb079f218a66c62ea07b1a3f2806f0aae26b054ac198a609ac4f0a164550000556127c0d76edb53e0ac3efb277c4"
        },
        {
          "alg": "SHA-1",
          "content": "b5fdc08f1287ea1178628e415e25132b73646c6d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d17b15a502e75425c725fc84b3cb42d33a53548af93ca2ac42d913dbd230ba99cf4e3b4f990df14ffe32091105f6162457fdccde4cdc513480653e9aea1f35b7"
        },
        {
          "alg": "SHA-1",
          "content": "118bdf5b8cdc51a2a7e70d211e07e2b0b9b107d3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string-width@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "code-point-at",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4690152900394fadf1123ebf82221b504b59c09e1414873766dbc4922694111ca5a9ef316f922fa9c80ebab64b6a1bfddc22ca7f1730e5823e0d9714051c8b5c"
        },
        {
          "alg": "SHA-1",
          "content": "0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/code-point-at@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/code-point-at@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/code-point-at/-/code-point-at-1.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d69a94a918e484f27d9a236af52c0c7ddbe2ea504971de9e171bdf6a2bd085a1f74a08ac7e2bae76f167b5d28e9b1b9e7bfefb97e14f8caad08d6be63e35ab47"
        },
        {
          "alg": "SHA-1",
          "content": "ef9e31386f031a7f0d643af82fde50c457ef00cb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wide-align",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a30cb97243bb3ac7526008bbabe77a2c8e6fd45d4603f7ed0f6d82ab06c622b185f30b137e1c2de6603372fdd59d99fdc0c2ac14dc25f00c2bec36018ad52d3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wide-align@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/wide-align@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wide-align/-/wide-align-1.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "set-blocking",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a22814bc0275861322f3a1f15f9af2b0a5d3f3aa2cb5e8bbd07cadf2bff7d51fb063d77ff097725247527eadf81113dabbc5424ae2abe04bcada48e78b51e87"
        },
        {
          "alg": "SHA-1",
          "content": "045f9782d011ae9a6803ddd382b24392b3d890f7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/set-blocking@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/set-blocking@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rc",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e642d5a4ebc587acdd8c62f6f949825ddfe7a273eec6c4633342e4b4f33a0ada4560ead949df6b178b6f79e32daa5dc753a02c028be0a91f24f4740e49f5cb31"
        },
        {
          "alg": "SHA-1",
          "content": "2e03e8e42ee450b8cb3dce65be1bf8974e1dfd95"
        }
      ],
      "licenses": [
        {
          "expression": "BSD-2-Clause OR MIT OR Apache-2.0"
        }
      ],
      "purl": "pkg:npm/rc@1.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/rc@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/rc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rc/-/rc-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-extend",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "710d225d210a8b72513618d4b0b5af43e3153f12d5aa9c02774705b166c9c650a29b64e50a8d49bcde5668f74fbd2a547449e427f5fe98f19cab9449ebc10af2"
        },
        {
          "alg": "SHA-1",
          "content": "48b699c27e334bf89f10892be432f6e4c7d34a7f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deep-extend@0.4.2",
      "type": "library",
      "bom-ref": "pkg:npm/deep-extend@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-extend/-/deep-extend-0.4.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ini",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "55403b58058d0967e6ebff1ff6401bf18ea21815a79827e0152e5d4ebbf60b7f0b2e6d4a526a58dfcf260950890ac30a4289af390d685bcfde75774285df595d"
        },
        {
          "alg": "SHA-1",
          "content": "0537cb79daf59b59a1a517dff706c86ec039162e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ini@1.3.4",
      "type": "library",
      "bom-ref": "pkg:npm/ini@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to ini >=1.3.6 to avoid a prototype pollution issue"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ini/-/ini-1.3.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ed697e273f88196b92760b10109e09ba7574b22fe2321838d8c9d0406ea1d51e9335e55e9e9e14f71e420b9bff818ab3fdf10d2d02130165e274db552f434d6f"
        },
        {
          "alg": "SHA-1",
          "content": "a35008b20f41383eec1fb914f4cd5df79a264284"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimist@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-json-comments",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2007c9dad3b7de715564388e91b387bb4fa34e4e48b91262fb4d476e4ece9bbb711d9d2c9c9ed549e2b7bc920640fb0c7d22e788d98d756df6e0c2dcee13429"
        },
        {
          "alg": "SHA-1",
          "content": "3c531942e908c2697c0ec344858c286c7ca0a60a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-json-comments@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.81.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2199ec47bbe81749a2192bb6f445cf4603d3b84b08ffe6a26cd4816cdd69a65adf6abb45e700d81800f3de20fdbe60557f6af4d2b7245997fc06d4b9924ecd8b"
        },
        {
          "alg": "SHA-1",
          "content": "c6928946a0e06c5f8d6f8a9333469ffda46298a0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/request@2.81.0",
      "type": "library",
      "bom-ref": "pkg:npm/request@2.81.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "request has been deprecated, see https://github.com/request/request/issues/3142"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.81.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "267269012d29f519a2c643af5b65f00f1c73b356dde3f54018897a434102e583a8fa9fa1a8886d0e19ff9e616707fc543576cb92913698e8e0548051283e3163"
        },
        {
          "alg": "SHA-1",
          "content": "14342dd38dbcc94d0e5b87d763cd63612c0e794f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.6.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws4",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6495eab80dff145aeffbc5ffed7dba3bb76bc36b4edb70e3469ca865d105ca42c8777c9d32275339c33a72f01b41484350c3ff554ecb613212c6fb25c77d2b5"
        },
        {
          "alg": "SHA-1",
          "content": "83ef5ca860b2b32e4a0deedee8c771b9db57471e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/aws4@1.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/aws4@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws4/-/aws4-1.6.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caseless",
      "version": "0.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e2d605ca27da15f19a72888e6e325e828964c12538c503466d581488d6155316d0db1da552c16f638855815cc68887ba58b38fab27165c0e3497e3d6b31b6153"
        },
        {
          "alg": "SHA-1",
          "content": "1b681c21ff84033c826543090689420d187151dc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/caseless@0.12.0",
      "type": "library",
      "bom-ref": "pkg:npm/caseless@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combined-stream",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2604917b89785333f0a49bb17dc3d610ad520ab2f8771363a75baaad02cca29dd0654568fa10d4f30f4124a03824f6ee953588f94ceb236500ded2b5db243a6e"
        },
        {
          "alg": "SHA-1",
          "content": "938370a57b4a51dea2c77c15d5c5fdf895164009"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/combined-stream@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delayed-stream",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "672483ecd7fdd5a2c1d11c4be0a1ab28705797b11db350c098475ca156b05e72c3ed20e1a4d82db88236680920edaed04b8d63c4f499d7ba7855d1a730793731"
        },
        {
          "alg": "SHA-1",
          "content": "df3ae199acadfb7d440aaae0b29e2272b24ec619"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/delayed-stream@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/delayed-stream@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extend",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bb569449819d010c7282ea0ff75f6ab208f6e24ac30ad68efc324534fc059a88cc98aa75e20b424d5b1cf25412a910c5af001c87e9b13160bcffa6493f3e47a7"
        },
        {
          "alg": "SHA-1",
          "content": "a755ea7bc1adfcc5a31ce7e762dbaadc5e636444"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/extend@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/extend@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extend/-/extend-3.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forever-agent",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8f428b60f866eb379a738973de8277a3ae6abe040270fb9b8b2a2d66b5ea11a1b884d6a03583bca9d954ad7e6fc2abfda21a9e4ff6778fafb25b4ebbc9659d53"
        },
        {
          "alg": "SHA-1",
          "content": "fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/forever-agent@0.6.1",
      "type": "library",
      "bom-ref": "pkg:npm/forever-agent@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0758648b00fafe006d21069b2a8b939bf07acb4ad37f2d67aa869165d7877b1498072b8f139a02e800b3f3ebd5d2511eb9609cc37cb517fc133cf8c2c92e085"
        },
        {
          "alg": "SHA-1",
          "content": "33c183acf193276ecaa98143a69e94bfee1750d1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/form-data@2.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/form-data@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-2.1.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asynckit",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39e8bd387e2d461d18a94dc6c615fbf5d33f9b0560bdb64969235a464f9bb21923d12e5c7c772061a92b7818eb1f06ad5ca6f3f88a087582f1aca8a6d8c8d6d1"
        },
        {
          "alg": "SHA-1",
          "content": "c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/asynckit@0.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/asynckit@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3e395e33c7afb0bf8ebecb84e845e89bef1001c49800b8e6c3ebd816a1fc23effec0d95ec1581b33bfced7071d0952ffb5af120ba97a0442bb034fe6672c297e"
        },
        {
          "alg": "SHA-1",
          "content": "a4ebf5064094569237b8cf70046776d09fc92aed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.15",
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.15.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.27.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0cd842f743e3564409a4b54ff9cb7496628f416007172fbaed7f0804ec7e99d6bf23dbecadd24eff3a3210975074bb287e2fe5f06006f88b1f0745c23cbc8b1e"
        },
        {
          "alg": "SHA-1",
          "content": "820f572296bbd20ec25ed55e5b5de869e5436eb1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mime-db@1.27.0",
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.27.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.27.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-validator",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e466e9e9101fb4c61857750423873856fdfe6b8750eed695caf1edfbf2fa911b7e7f81d7d46c1e024e540d63744af7559d1073190e8e1bcf6919a0fdb9216757"
        },
        {
          "alg": "SHA-1",
          "content": "33481d0f1bbff600dd203d75812a6a5fba002e2a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/har-validator@4.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/har-validator@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "this library is no longer supported"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/har-validator/-/har-validator-4.2.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "4.11.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "23f6d21d234470516a5cb7fdd67721a0d07d0f52a27b740a71675c85851aa08835fb56dd58391d7dd96f7483896e2f54f31474cbe3167390fec289fdbfde5695"
        },
        {
          "alg": "SHA-1",
          "content": "82ffb02b29e662ae53bdc20af15947706739c536"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ajv@4.11.8",
      "type": "library",
      "bom-ref": "pkg:npm/ajv@4.11.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv/-/ajv-4.11.8.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "co",
      "version": "4.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4156f474ce47bc6fae6b18ad9bcc0e365ee396dc7c76a85f537dc372ab4e65c2d25482920c32c38bbfb42db00a8b223c843f6ee369b66315d290c1964e169e71"
        },
        {
          "alg": "SHA-1",
          "content": "6ea6bdf3d853ae54ccb8e47bfa0bf3f9031fb184"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/co@4.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/co@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/co/-/co-4.6.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stable-stringify",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8bf276f7b4d6eb1ca3eec0c56bb02604f910bcb2315abda428f588dbab57c9d9d9af3540a1c36a9f90cc353d4cce4d2f8add55e5491133b0b529d54da7b2e672"
        },
        {
          "alg": "SHA-1",
          "content": "9a759d39c5f2ff503fd5300646ed445f88c4f9af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-stable-stringify@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/json-stable-stringify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonify",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6bbc1935922e37559a6d741239ac8946e183b3c9e1ff59e7d0b79ae3d60adab0f9f88a265629eb7c9e481ce0696c03295aced9f4a997d460e893b0048915d34"
        },
        {
          "alg": "SHA-1",
          "content": "2c74b6ee41d93ca51b7b5aaee8f503631d252a73"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsonify@0.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/jsonify@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-schema",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7fcc5fd86391e9183073d14f4cb37383007e250dbfccc6ae617496997e5857969c7b1e95a264f4a1c4aec11ec17d7a393291e2fa32feb1a6aec767f0b0624329"
        },
        {
          "alg": "SHA-1",
          "content": "d263135f43307c02c602afc8fe95970c0151369e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/har-schema@1.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/har-schema@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/har-schema/-/har-schema-1.0.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8949f435c4542e50c6b6a34b3752719b36b293ca209bb353a257404b2641a4cdaa8206e98635f334e8b0de988df2d833f9efc346ce97e600331704c8e8109172"
        },
        {
          "alg": "SHA-1",
          "content": "df72e267066cd0ac67fb76adf8e134a8fbcf91bf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-signature@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-signature/-/http-signature-1.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bb52f464bcb047388e563521471234420f46fb8467141f47fd1ab8d185a7d1d89e0e03bbbc061e273ea32803bab7f6abbb394314b00f9104d3f3b7be7fc2266b"
        },
        {
          "alg": "SHA-1",
          "content": "d74e1b87e7affc0db8aadb7021f3fe48101ab234"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/assert-plus@0.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsprim",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3b2290b9a6e0a948b64543dab81adf64da026f428da2e95fd43a90d3bad45b6bf36aecd702afee51eee80ecb55ff645abdac469fb35f708fc5da1ac1937f056e"
        },
        {
          "alg": "SHA-1",
          "content": "a3b87e40298d8c380552d8cc7628a0bb95a22918"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsprim@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/jsprim@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert-plus",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35f27853304271018b0e542aee71f11feb6fde4c99d211d0a85e413ba27bb4d25e3f9768d6594fafc759f331e89df840bb43c701d3244a8fbca34c3183d9595b"
        },
        {
          "alg": "SHA-1",
          "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/assert-plus@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/assert-plus@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extsprintf",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "836d41af810b99568a0954944924d779c286f8c88b7071686f2e513cf5267d9761413a27b5750e3dfd102bf4efade463808b518b23bddbccf14784c2ae7bb098"
        },
        {
          "alg": "SHA-1",
          "content": "e1080e0658e300b06294990cc70e1502235fd550"
        }
      ],
      "purl": "pkg:npm/extsprintf@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/extsprintf@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b7c479c82c632d93e8433aa3701f317a7b67cd6e232b5d9bf1290884bf63258103fea6320ecea0262980f6983a57604ff8e0cee0fa7f69d9b2a46160d471709"
        },
        {
          "alg": "SHA-1",
          "content": "b480c892e59a2f05954ce727bd3f2a4e882f9e13"
        }
      ],
      "purl": "pkg:npm/json-schema@0.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/json-schema@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema/-/json-schema-0.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "verror",
      "version": "1.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8bc185630226b790f907c08fa62da3ac34f2fdf6aae0e116f8d90e4cb48a70874f7dd609bd6bf755975d0ca974072bc17ba709dace4c9b65c3b6fe5cda98ff12"
        },
        {
          "alg": "SHA-1",
          "content": "cff5df12946d297d2baaefaa2689e25be01c005c"
        }
      ],
      "purl": "pkg:npm/verror@1.3.6",
      "type": "library",
      "bom-ref": "pkg:npm/verror@1.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/verror/-/verror-1.3.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sshpk",
      "version": "1.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e298e80a607e56d6baa1d2779eb4f6cdfdb6dfec56ea63897d8b47197ee7e426540159ba1a1b872db29e6a2ddcd17a160aee993723e8dcd7fbd426946e0724da"
        },
        {
          "alg": "SHA-1",
          "content": "ff2a3e4fd04497555fed97b39a0fd82fafb3a33c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sshpk@1.13.0",
      "type": "library",
      "bom-ref": "pkg:npm/sshpk@1.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/sshpk-conv, /app/node_modules/fsevents/node_modules/.bin/sshpk-sign, /app/node_modules/fsevents/node_modules/.bin/sshpk-verify"
        },
        {
          "name": "cdx:npm:bin",
          "value": "sshpk-conv, sshpk-sign, sshpk-verify"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sshpk/-/sshpk-1.13.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1",
      "version": "0.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ea2dfbc3ff848655a519425f7f74ff43cbb544698fe7081b8b06273a76ceaafb6b3f14fadffb181723fd45ca71b711b29ad7c0d3be48be63a72fbc9c34e5a5df"
        },
        {
          "alg": "SHA-1",
          "content": "dac8787713c9966849fc8180777ebe9c1ddf3b86"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/asn1@0.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/asn1@0.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asn1/-/asn1-0.2.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dashdash",
      "version": "1.14.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d1162f140c6a3a8fea1d6621298dacd9696a846a5df0fdb6ac163407404c15b592460e9c5b1f531e625bb0092f17ab9c262c9a280e5320bd56ab9967c6338e2"
        },
        {
          "alg": "SHA-1",
          "content": "853cfa0f7cbe2fed5de20326b8dd581035f6e2f0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dashdash@1.14.1",
      "type": "library",
      "bom-ref": "pkg:npm/dashdash@1.14.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "getpass",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1fce3f49c4e2df27e5c62e147ccdedee9cdd0a642819c224920f3d7af151118caf1697c91549d72eda4b29778b38c2d01ad72feaad5462000d1672556cbb49e"
        },
        {
          "alg": "SHA-1",
          "content": "5eff8e3e684d569ae4cb2b1282604e8ba62149fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/getpass@0.1.7",
      "type": "library",
      "bom-ref": "pkg:npm/getpass@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bcrypt-pbkdf",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd8e2c3ab4a5a703595ec8a77c9d07a5b4a415fb789e14952de52b4388f6c9d1a604e89563cdda3094ad2404c1cb40b7f9775a61af7dd24200d6a902da652aea"
        },
        {
          "alg": "SHA-1",
          "content": "63bc5dcb61331b92bc05fd528953c33462a06f8d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bcrypt-pbkdf@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/bcrypt-pbkdf@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tweetnacl",
      "version": "0.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2975c515d01b15763881e148c28c8d2be7f96756fbb307d70017cbec75c29a821630a5377664b6ebaef603811e42d0f32cacbb49799f06ee7526896f10ac2d18"
        },
        {
          "alg": "SHA-1",
          "content": "5ae68177f192d4456269d108afa93ff8743f4f64"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Unlicense",
            "url": "https://opensource.org/licenses/Unlicense",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tweetnacl@0.14.5",
      "type": "library",
      "bom-ref": "pkg:npm/tweetnacl@0.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ecc-jsbn",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0fbe0f50635e9261a8c42fd5b52e4fbdc8ced708afcc3aadb089bb252d96000041246c020eea62e45be18561bbefc3ca93b8317314c838d2b4bd23190d0963e"
        },
        {
          "alg": "SHA-1",
          "content": "0fc73a9ed5f0d53c38193398523ef7e543777505"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ecc-jsbn@0.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/ecc-jsbn@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsbn",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "51553d7626ead897055b140f03a282aa3e4ee3654e980637cd051f10ac54d0aa53197c0da028e45f57b5dde1cdbf0ff13f29edea9534ad9d61b63593353497b2"
        },
        {
          "alg": "SHA-1",
          "content": "a5e654c2e5a2deb5f201d96cefbca80c0ef2f513"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsbn@0.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/jsbn@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jodid25519",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f66676bfc062324f38b419e9a0dbb25851a4724f20444f0e469eac9540cafbd6ea2339832b8240f6f8fc776c6d99162effcd35172520e81a804e84c8b1abbb6"
        },
        {
          "alg": "SHA-1",
          "content": "06d4912255093419477d425633606e0e90782967"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jodid25519@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/jodid25519@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jodid25519/-/jodid25519-1.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-typedarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "732039ea208c1c087909dce32486b86a8849c9e3b561bc0b8b725cdf9326454ea9a2ba058c8199cd4ceea468913ce8e01e0f532eee37c5ba705e4e76ddf33128"
        },
        {
          "alg": "SHA-1",
          "content": "e479c80858df0c1b11ddda6940f96011fcda4a9a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-typedarray@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-typedarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isstream",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6258f3edf7f23dbacba4b9e0accb59ecd76e52056f8bac06f5127d21473209de7d610f75d4f049a6138351c6ce55ba987f17b5c2e61ffcb27c3dab8c470b0cfe"
        },
        {
          "alg": "SHA-1",
          "content": "47e63f7af55afa6f92e1500e690eb8b8529c099a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isstream@0.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/isstream@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "642960e80698bda9af60413cd9ddc8c9ddef49222343ea1d823693cd1b8edeceeda0274529cce86f68b4cc287b244f245a7d7bcaf016854571bea1b051a96c44"
        },
        {
          "alg": "SHA-1",
          "content": "1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "oauth-sign",
      "version": "0.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "565174ee2bb7555dfe0535e3e37366a7a22bb7f1bb8ff36011cb544ba230787d511a15118e309cd8d5adcd714f5d75967dcee181b5d076d890bb62c6a7a33152"
        },
        {
          "alg": "SHA-1",
          "content": "46a6ab7f0aead8deae9ec0565780b7d4efeb9d43"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.8.2",
      "type": "library",
      "bom-ref": "pkg:npm/oauth-sign@0.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.8.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "performance-now",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6079397b3d6198c4792ce91bf622642caaa80652fb583e4cf258c2ef965fcd7ae2b8121536e79c697b94edefa13b0caa7f6e16c6187b57182dec79f0f76f3c4e"
        },
        {
          "alg": "SHA-1",
          "content": "33ef30c5c77d4ea21c5a53869d91b56d8f2555e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/performance-now@0.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/performance-now@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/performance-now/-/performance-now-0.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42ce9d7e04793a4b0afcf4b1975906c626601107bc46a24c07dc19a9594a41f53ecf357e1d8efba56267a0910d002283401c96769afc64f221d53062e25a6249"
        },
        {
          "alg": "SHA-1",
          "content": "13e26d28ad6b0ffaa91312cd3bf708ed351e7233"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/qs@6.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.4.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stringstream",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "41443591384c8cb46de2303c96c9fd97222413d6ca69f13b2c338bfe7041518f537efda2df1d4d02c5471b4b8c0aeb0539679e23a08e858fc5db4f9abf14564b"
        },
        {
          "alg": "SHA-1",
          "content": "4e484cd4de5a0bbbee18e46307710a8a81621878"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stringstream@0.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/stringstream@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stringstream/-/stringstream-0.0.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e365178e6ce4f3c17b511ca0f700d5fdd950ee15ed97f48357ac48315743abcd9c9c31900f283c988f311813cec2911f6e1beb8dae9c27c1f5c2bd31c7290128"
        },
        {
          "alg": "SHA-1",
          "content": "f081f76e4c85720e6c37a5faced737150d84072a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tough-cookie@2.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.3.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e660d1255bbcaf3bb4d5df70a34a6bd2884db2728ddb576733bbf3b30ca74c35565059fc426e55112e17fee3bb32411067b637cb75dfc7d1e82bcc81bea1a15"
        },
        {
          "alg": "SHA-1",
          "content": "c0d5a63b2718800ad8e1eb0fa5269c84dd41845e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/punycode@1.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tunnel-agent",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "31c9cd895d65f1161e63cb41804a6ea1d082d662d475b48df826012fb909b093489ce3fc5230c3130764e8cc3ad2f74b2ebaf934729984c00e4ab476359b90fb"
        },
        {
          "alg": "SHA-1",
          "content": "27a5dea06b36b04a0a9966774b290868f0fc40fd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/tunnel-agent@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b7284cee28ac724c309b21d515c8d3cc84b3fd1d6cb3f6d1b9d3601c562c81ebbb8f825b851be313e1db729afdcb9c61f9bf87c5e163b93a034f88bd91036bb4"
        },
        {
          "alg": "SHA-1",
          "content": "6544bba2dfda8c1cf17e629a3a305e2bb1fee6c1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uuid@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/uuid@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/uuid"
        },
        {
          "name": "cdx:npm:bin",
          "value": "uuid"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028)."
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uuid/-/uuid-3.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e5021c9dd67c6a6d96cac78bea5967feeb65e754b044142cfdab7ece2d549e1b273f265c0080fe8343d9aca75bfa4267d9fa3f0b0832270791f2c3f7e897abe6"
        },
        {
          "alg": "SHA-1",
          "content": "c2338ec643df7a1b7fe5c54fa86f57428a55f33d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/rimraf@2.6.1",
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/rimraf"
        },
        {
          "name": "cdx:npm:bin",
          "value": "rimraf"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Rimraf versions prior to v4 are no longer supported"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.6.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79b5d70d1d7028ac4935f4ccf3bdadac053986929db82913377ee2a68c6c879ca26d6abc15fc62a1b887b9594f164b29492361af16cf1db338906c8319d2799a"
        },
        {
          "alg": "SHA-1",
          "content": "3effc3c50e000531fb720eaff80f0ae8ef23cf59"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.7",
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.7.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "balanced-match",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "493c34de640a9c6518b683639a8c28e05d9c466208c5810688cb238f095afeee4fd65c5a763ff4e5690d6858cd88a4e02648fc2a25db8008914e671047040db6"
        },
        {
          "alg": "SHA-1",
          "content": "cb3f3e3c732dc0f01ee70b403f302e61d7709838"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@0.4.2",
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/balanced-match/-/balanced-match-0.4.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99f9a6dff1fdfbaecc0958b1d61f885d3a43c0bebbd742f21ee93bf9c582f53d66134ab3e221e187aaf8854db0ac84fd893b00002d97411bdf6e52f4dbc7292f"
        },
        {
          "alg": "SHA-1",
          "content": "9b2ce5d3de02d17c6012ad326aa6b4d0cf54f94f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/semver@5.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/fsevents/node_modules/.bin/semver"
        },
        {
          "name": "cdx:npm:bin",
          "value": "semver"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-5.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tar",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d93c36b8db59a904d21d320c6ca1ca15e00f98a7258eb34aa8a88837ba6edd5fc2c58a91812f032d7bcc90546b6ed5e583a99339072e4d7ec3323d7c5e2d1db6"
        },
        {
          "alg": "SHA-1",
          "content": "8e4d2a256c0e2185c6b18ad694aec968b83cb1d1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tar@2.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/tar@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tar/-/tar-2.2.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "block-stream",
      "version": "0.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a8adb9c954f208e03b9429b8c04407bcbbc11fa8e9a4104692148ca843b3a34c79fa91a7f15a5d302e0a19dab5da61deccc8b703694e139a17f1b7081c71c31"
        },
        {
          "alg": "SHA-1",
          "content": "13ebfe778a03205cfe03751481ebb4b3300c126a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/block-stream@0.0.9",
      "type": "library",
      "bom-ref": "pkg:npm/block-stream@0.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/block-stream/-/block-stream-0.0.9.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fstream",
      "version": "1.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9783c5c0ef4bafcab8aa77527a4ffe95ef859e4161c29fae614d201671980a08e0a8ee737a868aa016b60f2c9f58cdbaf2ae9fd522bb875ec0f2648a99d52bd"
        },
        {
          "alg": "SHA-1",
          "content": "5c1fb1f117477114f0632a0eb4b71b3cb0fd3171"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fstream@1.0.11",
      "type": "library",
      "bom-ref": "pkg:npm/fstream@1.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fstream/-/fstream-1.0.11.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tar-pack",
      "version": "3.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a080494b1d908364ad49f2b1d9a9da89d3dcd8f45f1a5bb0a06e11e35d92827e0554e93a943e133aa24977cfc6d159f3a82410512a820eaf03db6a108757ae3"
        },
        {
          "alg": "SHA-1",
          "content": "23be2d7f671a8339376cbdb0b8fe3fdebf317984"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tar-pack@3.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/tar-pack@3.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tar-pack/-/tar-pack-3.4.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.6.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "136d9fb3258fb7f96be3f52040bb7fa57a9eac6303b1a9e16e79aa212dd5017b838b5bf72298b05deda89dc108a27747481b8f0d64682bfa4c8e5be2f05b8e5d"
        },
        {
          "alg": "SHA-1",
          "content": "e731531ca2ede27d188222427da17821d68ff4fc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@2.6.8",
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.6.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-2.6.8.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fstream-ignore",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "55546e3ace35554aa9b441a247437966858471f1af6c646a2c83726408474671770c7e70aea8cd918af755b468667238d416603bbcc855d8a86dcd774d5235a3"
        },
        {
          "alg": "SHA-1",
          "content": "9c31dae34767018fe1d249b24dada67d092da105"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fstream-ignore@1.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/fstream-ignore@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fstream-ignore/-/fstream-ignore-1.0.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uid-number",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "738eb51572258ecc02bac7199faef1abd3e9b3390f4fa46385e585413802c9a6c9ad3528cc495a9dbd1812abf6506824db8ed8a5c264141b9218dbc19695ccf7"
        },
        {
          "alg": "SHA-1",
          "content": "0ea10e8035e8eb5b8e4449f06da1c730663baa81"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uid-number@0.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/uid-number@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "cdx:npm:inBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:inDepBundle",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is no longer supported."
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uid-number/-/uid-number-0.0.6.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-react-transform",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "515bbfa996893981142d90b1f9b1635de2995109"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-react-transform@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-react-transform/-/babel-plugin-react-transform-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-react-transform@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-react-transform/-/babel-plugin-react-transform-2.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-decorators-legacy",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "741b58f6c5bce9e6027e0882d9c994f04f366925"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-decorators-legacy@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-decorators-legacy/-/babel-plugin-transform-decorators-legacy-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-decorators-legacy@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-decorators-legacy/-/babel-plugin-transform-decorators-legacy-1.3.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-decorators",
      "version": "6.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "312563b4dbde3cc806cee3e416cceeaddd11ac0b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-decorators@6.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-decorators/-/babel-plugin-syntax-decorators-6.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-decorators@6.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-decorators/-/babel-plugin-syntax-decorators-6.13.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-runtime",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "88490d446502ea9b8e7efb0fe09ec4d99479b1ee"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-runtime@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-runtime/-/babel-plugin-transform-runtime-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-runtime@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-runtime/-/babel-plugin-transform-runtime-6.23.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-es2015",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d44050d6bc2c9feea702aaf38d727a0210538939"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-preset-es2015@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-es2015/-/babel-preset-es2015-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-es2015@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-es2015/-/babel-preset-es2015-6.24.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "🙌  Thanks for using Babel: we recommend using babel-preset-env now: please read https://babeljs.io/env to update!"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-check-es2015-constants",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "35157b101426fd2ffd3da3f75c7d1e91835bbf8a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-check-es2015-constants@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-check-es2015-constants/-/babel-plugin-check-es2015-constants-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-check-es2015-constants@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-check-es2015-constants/-/babel-plugin-check-es2015-constants-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-arrow-functions",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "452692cb711d5f79dc7f85e440ce41b9f244d221"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-arrow-functions@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-arrow-functions/-/babel-plugin-transform-es2015-arrow-functions-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-arrow-functions@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-arrow-functions/-/babel-plugin-transform-es2015-arrow-functions-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-block-scoped-functions",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bbc51b49f964d70cb8d8e0b94e820246ce3a6141"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-block-scoped-functions@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-block-scoped-functions/-/babel-plugin-transform-es2015-block-scoped-functions-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-block-scoped-functions@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-block-scoped-functions/-/babel-plugin-transform-es2015-block-scoped-functions-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-block-scoping",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d70f5299c1308d05c12f463813b0a09e73b1895f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-block-scoping@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-block-scoping/-/babel-plugin-transform-es2015-block-scoping-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-block-scoping@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-block-scoping/-/babel-plugin-transform-es2015-block-scoping-6.26.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-classes",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5a4c58a50c9c9461e564b4b2a3bfabc97a2584db"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-classes@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-classes/-/babel-plugin-transform-es2015-classes-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-classes@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-classes/-/babel-plugin-transform-es2015-classes-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-define-map",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5f56dab41a25f97ecb498c7ebaca9819f95be5f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-define-map@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-define-map/-/babel-helper-define-map-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-define-map@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-define-map/-/babel-helper-define-map-6.26.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-function-name",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d3475b8c03ed98242a25b48351ab18399d3580a9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-function-name@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-function-name/-/babel-helper-function-name-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-function-name@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-function-name/-/babel-helper-function-name-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-get-function-arity",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f7782aa93407c41d3aa50908f89b031b1b6853d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-get-function-arity@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-get-function-arity/-/babel-helper-get-function-arity-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-get-function-arity@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-get-function-arity/-/babel-helper-get-function-arity-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-optimise-call-expression",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f7a13427ba9f73f8f4fa993c54a97882d1244257"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-optimise-call-expression@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-optimise-call-expression/-/babel-helper-optimise-call-expression-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-optimise-call-expression@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-optimise-call-expression/-/babel-helper-optimise-call-expression-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-replace-supers",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bf6dbfe43938d17369a213ca8a8bf74b6a90ab1a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-replace-supers@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-replace-supers/-/babel-helper-replace-supers-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-replace-supers@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-replace-supers/-/babel-helper-replace-supers-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-computed-properties",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6fe2a8d16895d5634f4cd999b6d3480a308159b3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-computed-properties@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-computed-properties/-/babel-plugin-transform-es2015-computed-properties-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-computed-properties@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-computed-properties/-/babel-plugin-transform-es2015-computed-properties-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-destructuring",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "997bb1f1ab967f682d2b0876fe358d60e765c56d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-destructuring@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-destructuring/-/babel-plugin-transform-es2015-destructuring-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-destructuring@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-destructuring/-/babel-plugin-transform-es2015-destructuring-6.23.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-duplicate-keys",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "73eb3d310ca969e3ef9ec91c53741a6f1576423e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-duplicate-keys@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-duplicate-keys/-/babel-plugin-transform-es2015-duplicate-keys-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-duplicate-keys@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-duplicate-keys/-/babel-plugin-transform-es2015-duplicate-keys-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-for-of",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f47c95b2b613df1d3ecc2fdb7573623c75248691"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-for-of@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-for-of/-/babel-plugin-transform-es2015-for-of-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-for-of@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-for-of/-/babel-plugin-transform-es2015-for-of-6.23.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-function-name",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "834c89853bc36b1af0f3a4c5dbaa94fd8eacaa8b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-function-name@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-function-name/-/babel-plugin-transform-es2015-function-name-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-function-name@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-function-name/-/babel-plugin-transform-es2015-function-name-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-literals",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4f54a02d6cd66cf915280019a31d31925377ca2e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-literals@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-literals/-/babel-plugin-transform-es2015-literals-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-literals@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-literals/-/babel-plugin-transform-es2015-literals-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-modules-amd",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3b3e54017239842d6d19c3011c4bd2f00a00d154"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-modules-amd@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-amd/-/babel-plugin-transform-es2015-modules-amd-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-modules-amd@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-amd/-/babel-plugin-transform-es2015-modules-amd-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-modules-commonjs",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0d8394029b7dc6abe1a97ef181e00758dd2e5d8a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-commonjs/-/babel-plugin-transform-es2015-modules-commonjs-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-commonjs/-/babel-plugin-transform-es2015-modules-commonjs-6.26.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-strict-mode",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d5faf7aa578a65bbe591cf5edae04a0c67020758"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-strict-mode@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-strict-mode/-/babel-plugin-transform-strict-mode-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-strict-mode@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-strict-mode/-/babel-plugin-transform-strict-mode-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-modules-systemjs",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ff89a142b9119a906195f5f106ecf305d9407d23"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-modules-systemjs@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-systemjs/-/babel-plugin-transform-es2015-modules-systemjs-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-modules-systemjs@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-systemjs/-/babel-plugin-transform-es2015-modules-systemjs-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-hoist-variables",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1ecb27689c9d25513eadbc9914a73f5408be7a76"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-hoist-variables@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-hoist-variables/-/babel-helper-hoist-variables-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-hoist-variables@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-hoist-variables/-/babel-helper-hoist-variables-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-modules-umd",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ac997e6285cd18ed6176adb607d602344ad38468"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-modules-umd@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-umd/-/babel-plugin-transform-es2015-modules-umd-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-modules-umd@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-modules-umd/-/babel-plugin-transform-es2015-modules-umd-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-object-super",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "24cef69ae21cb83a7f8603dad021f572eb278f8d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-object-super@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-object-super/-/babel-plugin-transform-es2015-object-super-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-object-super@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-object-super/-/babel-plugin-transform-es2015-object-super-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-parameters",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "57ac351ab49caf14a97cd13b09f66fdf0a625f2b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-parameters@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-parameters/-/babel-plugin-transform-es2015-parameters-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-parameters@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-parameters/-/babel-plugin-transform-es2015-parameters-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-call-delegate",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ece6aacddc76e41c3461f88bfc575bd0daa2df8d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-call-delegate@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-call-delegate/-/babel-helper-call-delegate-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-call-delegate@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-call-delegate/-/babel-helper-call-delegate-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-shorthand-properties",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "24f875d6721c87661bbd99a4622e51f14de38aa0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-shorthand-properties@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-shorthand-properties/-/babel-plugin-transform-es2015-shorthand-properties-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-shorthand-properties@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-shorthand-properties/-/babel-plugin-transform-es2015-shorthand-properties-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-spread",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d6d68a99f89aedc4536c81a542e8dd9f1746f8d1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-spread@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-spread/-/babel-plugin-transform-es2015-spread-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-spread@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-spread/-/babel-plugin-transform-es2015-spread-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-sticky-regex",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "00c1cdb1aca71112cdf0cf6126c2ed6b457ccdbc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-sticky-regex@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-sticky-regex/-/babel-plugin-transform-es2015-sticky-regex-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-sticky-regex@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-sticky-regex/-/babel-plugin-transform-es2015-sticky-regex-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-regex",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "325c59f902f82f24b74faceed0363954f6495e72"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-regex@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-regex/-/babel-helper-regex-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-regex@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-regex/-/babel-helper-regex-6.26.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-template-literals",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a84b3450f7e9f8f1f6839d6d687da84bb1236d8d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-template-literals@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-template-literals/-/babel-plugin-transform-es2015-template-literals-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-template-literals@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-template-literals/-/babel-plugin-transform-es2015-template-literals-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-typeof-symbol",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dec09f1cddff94b52ac73d505c84df59dcceb372"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-typeof-symbol@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-typeof-symbol/-/babel-plugin-transform-es2015-typeof-symbol-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-typeof-symbol@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-typeof-symbol/-/babel-plugin-transform-es2015-typeof-symbol-6.23.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-es2015-unicode-regex",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d38b12f42ea7323f729387f18a7c5ae1faeb35e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-es2015-unicode-regex@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-es2015-unicode-regex/-/babel-plugin-transform-es2015-unicode-regex-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-es2015-unicode-regex@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-es2015-unicode-regex/-/babel-plugin-transform-es2015-unicode-regex-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regexpu-core",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "49d038837b8dcf8bfa5b9a42139938e6ea2ae240"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regexpu-core@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regexpu-core/-/regexpu-core-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regexpu-core@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regexpu-core/-/regexpu-core-2.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerate",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d5a68d4669dac300ae7db7fd23471e55c5859010392410a8baf878c4de3a0554b7c33a1f57add874745d5e4aaf8123f4b0bd3438e204ac709f0de7360beb5b2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regenerate@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerate/-/regenerate-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerate@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerate/-/regenerate-1.3.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regjsgen",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6c016adeac554f75823fe37ac05b92d5a4edb1f7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regjsgen@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regjsgen/-/regjsgen-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regjsgen@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regjsgen/-/regjsgen-0.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regjsparser",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ee8f84dc6fa792d3fd0ae228d24bd949ead205c"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regjsparser@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regjsparser/-/regjsparser-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regjsparser@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regjsparser/-/regjsparser-0.1.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/regjsparser"
        },
        {
          "name": "cdx:npm:bin",
          "value": "regjsparser"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "jsesc",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e7dee66e35d6fc16f710fe91d5cf69f70f08911d"
        }
      ],
      "purl": "pkg:npm/jsesc@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsesc/-/jsesc-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsesc@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsesc/-/jsesc-0.5.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/regjsparser/node_modules/.bin/jsesc"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jsesc"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-regenerator",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e0703696fbde27f0a3efcacf8b4dca2f7b3a8f2f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-regenerator@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-regenerator/-/babel-plugin-transform-regenerator-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-regenerator@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-regenerator/-/babel-plugin-transform-regenerator-6.26.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator-transform",
      "version": "0.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c97a96ef0dbb8ad718088276aeed8f7473068098efcb08b308da63ef697ab685e18c4776965b9fc142f62b849f238264235dec17bc18f37ea29c54e9a18d9e9"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regenerator-transform@0.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerator-transform/-/regenerator-transform-0.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-transform@0.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerator-transform/-/regenerator-transform-0.10.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-react",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba69dfaea45fc3ec639b6a4ecea6e17702c91380"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-preset-react@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-react/-/babel-preset-react-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-react@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-react/-/babel-preset-react-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-jsx",
      "version": "6.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0af32a9a6e13ca7a3fd5069e62d7b0f58d0d8946"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-jsx@6.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-jsx/-/babel-plugin-syntax-jsx-6.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-jsx@6.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-jsx/-/babel-plugin-syntax-jsx-6.18.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-react-display-name",
      "version": "6.25.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "67e2bf1f1e9c93ab08db96792e05392bf2cc28d1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-react-display-name@6.25.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-react-display-name/-/babel-plugin-transform-react-display-name-6.25.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-react-display-name@6.25.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-react-display-name/-/babel-plugin-transform-react-display-name-6.25.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-react-jsx",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "840a028e7df460dfc3a2d29f0c0d91f6376e66a3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-react-jsx@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-react-jsx/-/babel-plugin-transform-react-jsx-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-react-jsx@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-react-jsx/-/babel-plugin-transform-react-jsx-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-builder-react-jsx",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "39ff8313b75c8b65dceff1f31d383e0ff2a408a0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-builder-react-jsx@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-builder-react-jsx/-/babel-helper-builder-react-jsx-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-builder-react-jsx@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-builder-react-jsx/-/babel-helper-builder-react-jsx-6.26.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-react-jsx-self",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df6d80a9da2612a121e6ddd7558bcbecf06e636e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-react-jsx-self@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-react-jsx-self/-/babel-plugin-transform-react-jsx-self-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-react-jsx-self@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-react-jsx-self/-/babel-plugin-transform-react-jsx-self-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-react-jsx-source",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "66ac12153f5cd2d17b3c19268f4bf0197f44ecd6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-react-jsx-source@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-react-jsx-source/-/babel-plugin-transform-react-jsx-source-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-react-jsx-source@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-react-jsx-source/-/babel-plugin-transform-react-jsx-source-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-flow",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e71218887085ae9a24b5be4169affb599816c49d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-preset-flow@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-flow/-/babel-preset-flow-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-flow@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-flow/-/babel-preset-flow-6.23.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-flow-strip-types",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "84cb672935d43714fdc32bce84568d87441cf7cf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-flow-strip-types@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-flow-strip-types/-/babel-plugin-transform-flow-strip-types-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-flow-strip-types@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-flow-strip-types/-/babel-plugin-transform-flow-strip-types-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-flow",
      "version": "6.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4c3ab20a2af26aa20cd25995c398c4eb70310c8d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-flow@6.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-flow/-/babel-plugin-syntax-flow-6.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-flow@6.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-flow/-/babel-plugin-syntax-flow-6.18.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-stage-0",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5642d15042f91384d7e5af8bc88b1db95b039e6a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-preset-stage-0@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-stage-0/-/babel-preset-stage-0-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-stage-0@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-stage-0/-/babel-preset-stage-0-6.24.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-do-expressions",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "28ccaf92812d949c2cd1281f690c8fdc468ae9bb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-do-expressions@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-do-expressions/-/babel-plugin-transform-do-expressions-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-do-expressions@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-do-expressions/-/babel-plugin-transform-do-expressions-6.22.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-do-expressions",
      "version": "6.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5747756139aa26d390d09410b03744ba07e4796d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-do-expressions@6.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-do-expressions/-/babel-plugin-syntax-do-expressions-6.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-do-expressions@6.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-do-expressions/-/babel-plugin-syntax-do-expressions-6.13.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-function-bind",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c6fb8e96ac296a310b8cf8ea401462407ddf6a97"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-function-bind@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-function-bind/-/babel-plugin-transform-function-bind-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-function-bind@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-function-bind/-/babel-plugin-transform-function-bind-6.22.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-function-bind",
      "version": "6.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "48c495f177bdf31a981e732f55adc0bdd2601f46"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-function-bind@6.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-function-bind/-/babel-plugin-syntax-function-bind-6.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-function-bind@6.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-function-bind/-/babel-plugin-syntax-function-bind-6.13.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-stage-1",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7692cd7dcd6849907e6ae4a0a85589cfb9e2bfb0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-preset-stage-1@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-stage-1/-/babel-preset-stage-1-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-stage-1@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-stage-1/-/babel-preset-stage-1-6.24.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-class-constructor-call",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "80dc285505ac067dcb8d6c65e2f6f11ab7765ef9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-class-constructor-call@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-class-constructor-call/-/babel-plugin-transform-class-constructor-call-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-class-constructor-call@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-class-constructor-call/-/babel-plugin-transform-class-constructor-call-6.24.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-class-constructor-call",
      "version": "6.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9cb9d39fe43c8600bec8146456ddcbd4e1a76416"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-class-constructor-call@6.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-class-constructor-call/-/babel-plugin-syntax-class-constructor-call-6.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-class-constructor-call@6.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-class-constructor-call/-/babel-plugin-syntax-class-constructor-call-6.18.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-export-extensions",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "53738b47e75e8218589eea946cbbd39109bbe653"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-export-extensions@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-export-extensions/-/babel-plugin-transform-export-extensions-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-export-extensions@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-export-extensions/-/babel-plugin-transform-export-extensions-6.22.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-export-extensions",
      "version": "6.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "70a1484f0f9089a4e84ad44bac353c95b9b12721"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-export-extensions@6.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-export-extensions/-/babel-plugin-syntax-export-extensions-6.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-export-extensions@6.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-export-extensions/-/babel-plugin-syntax-export-extensions-6.13.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-stage-2",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d9e2960fb3d71187f0e64eec62bc07767219bdc1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-preset-stage-2@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-stage-2/-/babel-preset-stage-2-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-stage-2@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-stage-2/-/babel-preset-stage-2-6.24.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-dynamic-import",
      "version": "6.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8d6a26229c83745a9982a441051572caa179b1da"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-dynamic-import@6.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-dynamic-import/-/babel-plugin-syntax-dynamic-import-6.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-dynamic-import@6.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-dynamic-import/-/babel-plugin-syntax-dynamic-import-6.18.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-class-properties",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6a79763ea61d33d36f37b611aa9def81a81b46ac"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-class-properties@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-class-properties/-/babel-plugin-transform-class-properties-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-class-properties@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-class-properties/-/babel-plugin-transform-class-properties-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-class-properties",
      "version": "6.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d7eb23b79a317f8543962c505b827c7d6cac27de"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-class-properties@6.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-class-properties/-/babel-plugin-syntax-class-properties-6.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-class-properties@6.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-class-properties/-/babel-plugin-syntax-class-properties-6.13.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-decorators",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "788013d8f8c6b5222bdf7b344390dfd77569e24d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-decorators@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-decorators/-/babel-plugin-transform-decorators-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-decorators@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-decorators/-/babel-plugin-transform-decorators-6.24.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-explode-class",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7dc2a3910dee007056e1e31d640ced3d54eaa9eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-explode-class@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-explode-class/-/babel-helper-explode-class-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-explode-class@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-explode-class/-/babel-helper-explode-class-6.24.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-bindify-decorators",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "14c19e5f142d7b47f19a52431e52b1ccbc40a330"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-bindify-decorators@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-bindify-decorators/-/babel-helper-bindify-decorators-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-bindify-decorators@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-bindify-decorators/-/babel-helper-bindify-decorators-6.24.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-stage-3",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "836ada0a9e7a7fa37cb138fb9326f87934a48395"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-preset-stage-3@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-stage-3/-/babel-preset-stage-3-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-stage-3@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-stage-3/-/babel-preset-stage-3-6.24.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-trailing-function-commas",
      "version": "6.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba0360937f8d06e40180a43fe0d5616fff532cf3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-trailing-function-commas@6.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-trailing-function-commas/-/babel-plugin-syntax-trailing-function-commas-6.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-trailing-function-commas@6.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-trailing-function-commas/-/babel-plugin-syntax-trailing-function-commas-6.22.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-async-generator-functions",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f058900145fd3e9907a6ddf28da59f215258a5db"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-async-generator-functions@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-async-generator-functions/-/babel-plugin-transform-async-generator-functions-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-async-generator-functions@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-async-generator-functions/-/babel-plugin-transform-async-generator-functions-6.24.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-remap-async-to-generator",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5ec581827ad723fecdd381f1c928390676e4551b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-remap-async-to-generator@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-remap-async-to-generator/-/babel-helper-remap-async-to-generator-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-remap-async-to-generator@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-remap-async-to-generator/-/babel-helper-remap-async-to-generator-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-async-generators",
      "version": "6.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6bc963ebb16eccbae6b92b596eb7f35c342a8b9a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-async-generators@6.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-async-generators/-/babel-plugin-syntax-async-generators-6.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-async-generators@6.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-async-generators/-/babel-plugin-syntax-async-generators-6.13.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-async-to-generator",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6536e378aff6cb1d5517ac0e40eb3e9fc8d08761"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-async-to-generator@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-async-to-generator/-/babel-plugin-transform-async-to-generator-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-async-to-generator@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-async-to-generator/-/babel-plugin-transform-async-to-generator-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-async-functions",
      "version": "6.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cad9cad1191b5ad634bf30ae0872391e0647be95"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-async-functions@6.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-async-functions/-/babel-plugin-syntax-async-functions-6.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-async-functions@6.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-async-functions/-/babel-plugin-syntax-async-functions-6.13.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-exponentiation-operator",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2ab0c9c7f3098fa48907772bb813fe41e8de3a0e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-exponentiation-operator@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-exponentiation-operator/-/babel-plugin-transform-exponentiation-operator-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-exponentiation-operator@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-exponentiation-operator/-/babel-plugin-transform-exponentiation-operator-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-builder-binary-assignment-operator-visitor",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cce4517ada356f4220bcae8a02c2b346f9a56664"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-builder-binary-assignment-operator-visitor@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-builder-binary-assignment-operator-visitor/-/babel-helper-builder-binary-assignment-operator-visitor-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-builder-binary-assignment-operator-visitor@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-builder-binary-assignment-operator-visitor/-/babel-helper-builder-binary-assignment-operator-visitor-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-helper-explode-assignable-expression",
      "version": "6.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f25b82cf7dc10433c55f70592d5746400ac22caa"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-helper-explode-assignable-expression@6.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-helper-explode-assignable-expression/-/babel-helper-explode-assignable-expression-6.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-helper-explode-assignable-expression@6.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-helper-explode-assignable-expression/-/babel-helper-explode-assignable-expression-6.24.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-exponentiation-operator",
      "version": "6.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9ee7e8337290da95288201a6a57f4170317830de"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-exponentiation-operator@6.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-exponentiation-operator/-/babel-plugin-syntax-exponentiation-operator-6.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-exponentiation-operator@6.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-exponentiation-operator/-/babel-plugin-syntax-exponentiation-operator-6.13.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-object-rest-spread",
      "version": "6.26.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0f36692d50fef6b7e2d4b3ac1478137a963b7b06"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-object-rest-spread@6.26.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-object-rest-spread/-/babel-plugin-transform-object-rest-spread-6.26.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-object-rest-spread@6.26.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-object-rest-spread/-/babel-plugin-transform-object-rest-spread-6.26.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-object-rest-spread",
      "version": "6.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fd6536f2bce13836ffa3a5458c4903a597bb3bf5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-object-rest-spread@6.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-object-rest-spread/-/babel-plugin-syntax-object-rest-spread-6.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-object-rest-spread@6.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-object-rest-spread/-/babel-plugin-syntax-object-rest-spread-6.13.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-typescript",
      "version": "7.0.0-alpha.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d95188827e7ca219955e173ea80c743ac8a1407426e51f98d4cbbb6eef7c1db089b51fc2cc4759b3ca82b4f6f55e660a17c5d136f65081ee3874f4d58a6236ff"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-preset-typescript@7.0.0-alpha.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-typescript/-/babel-preset-typescript-7.0.0-alpha.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-typescript@7.0.0-alpha.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-typescript/-/babel-preset-typescript-7.0.0-alpha.19.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-object-rest-spread",
      "version": "7.0.0-alpha.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "268f705e653d02db9f3853dd42979d73e8fb0a4e6890662c2b4ce493635935a7bad5202db8c17933769151e66eb2bb2c3ea582df6a4e881a246c0a481477655f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-object-rest-spread@7.0.0-alpha.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-object-rest-spread/-/babel-plugin-syntax-object-rest-spread-7.0.0-alpha.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-object-rest-spread@7.0.0-alpha.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-object-rest-spread/-/babel-plugin-syntax-object-rest-spread-7.0.0-alpha.19.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-typescript",
      "version": "7.0.0-alpha.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ad90e61c6117df982dfcfd48c3667d9cbccdaa6aba834fbe3c4db489b55a4d6fb12f0cb41c7cf9fdfb469d93ca2a9a1734964f8b772ff675a18c34cc56d2fb9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-typescript@7.0.0-alpha.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-typescript/-/babel-plugin-transform-typescript-7.0.0-alpha.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-typescript@7.0.0-alpha.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-typescript/-/babel-plugin-transform-typescript-7.0.0-alpha.19.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-syntax-typescript",
      "version": "7.0.0-alpha.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8cbb9a59fa10b15afcfe1999b5607ef3ab59e6362639857a92aef41244944fb451fa07de60e1314b416339b6dba7e584c5936905a459be5ca290d93784240679"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babel-plugin-syntax-typescript@7.0.0-alpha.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-syntax-typescript/-/babel-plugin-syntax-typescript-7.0.0-alpha.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-syntax-typescript@7.0.0-alpha.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-syntax-typescript/-/babel-plugin-syntax-typescript-7.0.0-alpha.19.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babelify",
      "version": "7.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aa56aede7067fd7bd549666ee16dc285087e88e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/babelify@7.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babelify/-/babelify-7.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babelify@7.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babelify/-/babelify-7.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify",
      "version": "13.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5a9c9020243f0c70e4675bec8223bc627e415ce"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify@13.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify/-/browserify-13.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify@13.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify/-/browserify-13.3.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/browserify"
        },
        {
          "name": "cdx:npm:bin",
          "value": "browserify"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "assert",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "99912d591836b5a6f5b345c0f07eefc08fc65d91"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/assert@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assert/-/assert-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert/-/assert-1.4.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util",
      "version": "0.10.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7afb1afe50805246489e3db7fe0ed379336ac0f9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/util@0.10.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/util/-/util-0.10.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util@0.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/util/-/util-0.10.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b17d08d326b4423e568eff719f91b0b1cbdf69f1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser-pack",
      "version": "6.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f86cd6cef4f5300c8e63e07a4d512f65fbff4531"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browser-pack@6.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-pack/-/browser-pack-6.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-pack@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-pack/-/browser-pack-6.0.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/browser-pack"
        },
        {
          "name": "cdx:npm:bin",
          "value": "browser-pack"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "combine-source-map",
      "version": "0.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0870312856b307a87cc4ac486f3a9a62aeccc09e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/combine-source-map@0.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/combine-source-map/-/combine-source-map-0.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/combine-source-map@0.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/combine-source-map/-/combine-source-map-0.7.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4829c877e9fe49b3161f3bf3673888e204699860"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.1.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inline-source-map",
      "version": "0.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f9393471c18a79d1724f863fa38b586370ade2a5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inline-source-map@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inline-source-map/-/inline-source-map-0.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inline-source-map@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inline-source-map/-/inline-source-map-0.6.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.memoize",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2dcbd2c287cbc0a55cc42328bd0c736150d53e3f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.memoize@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.memoize/-/lodash.memoize-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.memoize@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.memoize/-/lodash.memoize-3.0.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "defined",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c98d9bcef75674188e110969151199e39b1fa693"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/defined@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/defined/-/defined-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/defined@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/defined/-/defined-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "JSONStream",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c102371b6ec3a7cf3b847ca00c20bb0fce4c6dea"
        }
      ],
      "licenses": [
        {
          "expression": "MIT OR Apache-2.0"
        }
      ],
      "purl": "pkg:npm/JSONStream@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/JSONStream/-/JSONStream-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/JSONStream@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/JSONStream/-/JSONStream-1.3.2.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/JSONStream"
        },
        {
          "name": "cdx:npm:bin",
          "value": "JSONStream"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonparse",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3f4dae4a91fac315f71062f8521cc239f1366280"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsonparse@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonparse/-/jsonparse-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonparse@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonparse/-/jsonparse-1.3.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through",
      "version": "2.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/through@2.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through/-/through-2.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through/-/through-2.3.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through2",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0004569b37c7c74ba39c43f3ced78d1ad94140be"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/through2@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through2/-/through2-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through2/-/through2-2.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5c6d532be656e23db820efb943a1f04998d63af"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/xtend@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xtend/-/xtend-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xtend/-/xtend-4.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "umd",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8ae556e11011f63c2596708a8837259f01b3d60e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/umd@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/umd/-/umd-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/umd@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/umd/-/umd-3.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/umd"
        },
        {
          "name": "cdx:npm:bin",
          "value": "umd"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser-resolve",
      "version": "1.11.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8ff09b0a2c421718a1051c260b32e48f442938ce"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browser-resolve@1.11.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browser-resolve/-/browser-resolve-1.11.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browser-resolve@1.11.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browser-resolve/-/browser-resolve-1.11.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "203114d82ad2c5ed9e8e0411b3932875e889e97b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve@1.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-zlib",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb35f8a519f600e0fa6b8485241c979d0141fb2d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-zlib@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-zlib/-/browserify-zlib-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-zlib@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-zlib/-/browserify-zlib-0.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pako",
      "version": "0.2.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f3f7522f4ef782348da8161bad9ecfd51bf83a75"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pako@0.2.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pako/-/pako-0.2.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pako@0.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pako/-/pako-0.2.9.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer",
      "version": "4.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d1bb601b07a4efced97094132093027c95bc298"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer@4.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer/-/buffer-4.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer@4.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer/-/buffer-4.9.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This version of 'buffer' is out-of-date. You must update to v4.9.2 or newer"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-js",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7705545485ec0595f04eec275c8f512bcb019a0ab4f4d0c7cf247d480a61f5eaa4efa80a2b6252426640442db3442f35242d904edc43d00454e6a4d2db98081b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/base64-js@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-js/-/base64-js-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-js/-/base64-js-1.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ieee754",
      "version": "1.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "be33d40ac10ef1926701f6f08a2d86fbfd1ad3e4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ieee754@1.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ieee754/-/ieee754-1.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ieee754@1.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ieee754/-/ieee754-1.1.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cached-path-relative",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d09c4b52800aa4c078e2dd81a869aac90d2e54e7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cached-path-relative@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cached-path-relative/-/cached-path-relative-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cached-path-relative@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cached-path-relative/-/cached-path-relative-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-stream",
      "version": "1.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "708978624d856af41a5a741defdd261da752c266"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/concat-stream@1.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-stream@1.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.5.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f90341e68a53ccc928788dacfcd11b36eb9b78e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.0.6.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "0.10.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62e203bc41766c6c28c9fc84301dab1c5310fa94"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@0.10.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@0.10.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typedarray",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "867ac74e3864187b1d3d47d996a78ec5c8830777"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typedarray@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typedarray@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "console-browserify",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f0241c45730a9fc6323b206dbf38edc741d0bb10"
        }
      ],
      "purl": "pkg:npm/console-browserify@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/console-browserify/-/console-browserify-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/console-browserify@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/console-browserify/-/console-browserify-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "date-now",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eaf439fd4d4848ad74e5cc7dbef200672b9e345b"
        }
      ],
      "purl": "pkg:npm/date-now@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/date-now/-/date-now-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/date-now@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/date-now/-/date-now-0.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "constants-browserify",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c20b96d8c617748aaf1c16021760cd27fcb8cb75"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/constants-browserify@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/constants-browserify/-/constants-browserify-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/constants-browserify@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/constants-browserify/-/constants-browserify-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "crypto-browserify",
      "version": "3.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7f3e2ca4887ece78ced958cbf88761129449dd837ab0ccc84d20628e4e852b652f4eaaee4905befdc0994d236c32264dbd47aad02aaeac5f9d01bca218e63a5a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/crypto-browserify@3.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/crypto-browserify/-/crypto-browserify-3.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/crypto-browserify@3.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/crypto-browserify/-/crypto-browserify-3.12.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "browserify-cipher",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9988244874bf5ed4e28da95666dcd66ac8fc363a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-cipher@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-cipher/-/browserify-cipher-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-cipher@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-cipher/-/browserify-cipher-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-aes",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5069d36009c1d9add8b98288472d7fe050761dd33ceba134a82e3a257bd54d82a50656659ef7e949f63a38a7d764092fef4789d9ad52ab3a40a3909185918316"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-aes@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-aes/-/browserify-aes-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-aes@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-aes/-/browserify-aes-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-xor",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "26e61ed1422fb70dd42e6e36729ed51d855fe8d9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer-xor@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-xor/-/buffer-xor-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-xor@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-xor/-/buffer-xor-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cipher-base",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a486de727ba6469b0bf8d2e503673b5ac93d9384b4067e78ff4fbd4dfd7cde65ea379dff1fa325bbcc64ec3d8904c9ade6e5fddc032a47faa7bb60eaccd54d9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cipher-base@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cipher-base/-/cipher-base-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cipher-base@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cipher-base/-/cipher-base-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-hash",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "606042ac8b9262750f483caddab0f5819172d8fd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-hash@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-hash/-/create-hash-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-hash@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-hash/-/create-hash-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ripemd160",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0f4584295c53a3628af7e6d79aca21ce57d1c6e7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ripemd160@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ripemd160/-/ripemd160-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ripemd160@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ripemd160/-/ripemd160-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hash-base",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "66ea1d856db4e8a5470cadf6fce23ae5244ef2e1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hash-base@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hash-base/-/hash-base-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hash-base@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hash-base/-/hash-base-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sha.js",
      "version": "2.4.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1bccde92d56a6e23c7af29607b0f598355510752ff0ed5cd51500ceaae102f2f0d137aad1e51574dff152cbe24d5897a73b34c8ed6544dd5d5f97e389c5693e8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sha.js@2.4.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sha.js/-/sha.js-2.4.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sha.js@2.4.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sha.js/-/sha.js-2.4.9.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/sha.js"
        },
        {
          "name": "cdx:npm:bin",
          "value": "sha.js"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "evp_bytestokey",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fdfd86a384e88271ff2af08848fece52c1e7f39853f67524c7103d0445b1167f8e8fda3c64d2e6ff8d217658122f2b8e8a6b2b4ca2d4304a2b41ec69fda3d078"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/evp_bytestokey@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/evp_bytestokey/-/evp_bytestokey-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/evp_bytestokey@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/evp_bytestokey/-/evp_bytestokey-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "md5.js",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e9bdbde94a20a5ac18b04340fc5764d5b09d901d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/md5.js@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/md5.js/-/md5.js-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/md5.js@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/md5.js/-/md5.js-1.3.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hash-base",
      "version": "3.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5fc8686847ecd73499403319a6b0a3f3f6ae4918"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hash-base@3.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hash-base/-/hash-base-3.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hash-base@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hash-base/-/hash-base-3.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-des",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "daa277717470922ed2fe18594118a175439721dd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-des@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-des/-/browserify-des-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-des@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-des/-/browserify-des-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "des.js",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c074d2e2aa6a8a9a07dbd61f9a15c2cd83ec8ecc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/des.js@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/des.js/-/des.js-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/des.js@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/des.js/-/des.js-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimalistic-assert",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "702be2dda6b37f4836bcb3f5db56641b64a1d3d3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimalistic-assert@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimalistic-assert/-/minimalistic-assert-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimalistic-assert@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimalistic-assert/-/minimalistic-assert-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-sign",
      "version": "4.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aa4eb68e5d7b658baa6bf6a57e630cbd7a93d298"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-sign@4.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-sign/-/browserify-sign-4.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-sign@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-sign/-/browserify-sign-4.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bn.js",
      "version": "4.11.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22d7d87cf2e458752372440293cc42f8bc3180af0d61c5f2c068a02604b038ff18da2c964f87f6bec667a0e5d34dba3ea39c97988509e209f9e77f123b94b780"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bn.js@4.11.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bn.js/-/bn.js-4.11.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bn.js@4.11.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bn.js/-/bn.js-4.11.8.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-rsa",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "21e0abfaf6f2029cf2fafb133567a701d4135524"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-rsa@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-rsa/-/browserify-rsa-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-rsa@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-rsa/-/browserify-rsa-4.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randombytes",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f13ed99f502132c43f1c8d528dc09f4ffb788a2dde02a728df239c4b34b89a8cec3b3ebd9472eca0c5e617d9d982715a9d8b1c9d29544a0b3cb99c8ace913a92"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/randombytes@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/randombytes/-/randombytes-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randombytes@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/randombytes/-/randombytes-2.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-hmac",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "acb9e221a4e17bdb076e90657c42b93e3726cf06"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-hmac@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-hmac/-/create-hmac-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-hmac@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-hmac/-/create-hmac-1.1.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "elliptic",
      "version": "6.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cac9af8762c85836187003c8dfe193e5e2eae5df"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/elliptic@6.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/elliptic/-/elliptic-6.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/elliptic@6.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/elliptic/-/elliptic-6.4.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brorand",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "12c25efe40a45e3c323eb8675a0a0ce57b22371f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brorand@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/brorand/-/brorand-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brorand@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/brorand/-/brorand-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hash.js",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fd4113c8fd16db64082ea4bee87a307afc21105277301267c137fbe50a1bf56cfdb740cfba2b0bf245bc61930aeb674700a135735a7e818d53b4e2d8f944841c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hash.js@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hash.js/-/hash.js-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hash.js@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hash.js/-/hash.js-1.1.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hmac-drbg",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d2745701025a6c775a6c545793ed502fc0c649a1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hmac-drbg@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hmac-drbg/-/hmac-drbg-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hmac-drbg@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hmac-drbg/-/hmac-drbg-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimalistic-crypto-utils",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6c00c1c0b082246e5c4d99dfb8c7c083b2b582a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimalistic-crypto-utils@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimalistic-crypto-utils/-/minimalistic-crypto-utils-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimalistic-crypto-utils@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimalistic-crypto-utils/-/minimalistic-crypto-utils-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "parse-asn1",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "37c4f9b7ed3ab65c74817b5f2480937fbf97c712"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-asn1@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-asn1/-/parse-asn1-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-asn1@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-asn1/-/parse-asn1-5.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "asn1.js",
      "version": "4.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ff3ac4a3bd6128f0f8bc1f4cec0ddd8fe94aa8d932b6a47f2034b489b4d2ccd836f4bf641a019d29050257563027e2006eba07950ebeeceb7668829508c160e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/asn1.js@4.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/asn1.js/-/asn1.js-4.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/asn1.js@4.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/asn1.js/-/asn1.js-4.9.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pbkdf2",
      "version": "3.0.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "823b195bd3b7e1f9b447b3da2c744998b2d57d2a1eb31ced8cf8c4f68e91faab552628fdd25b60d63a08a2f37d18aad15b7b753f38430c6dd43043057d9fb5c0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pbkdf2@3.0.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pbkdf2/-/pbkdf2-3.0.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pbkdf2@3.0.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pbkdf2/-/pbkdf2-3.0.14.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-ecdh",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "888c723596cdf7612f6498233eebd7a35301737d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-ecdh@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-ecdh/-/create-ecdh-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-ecdh@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-ecdh/-/create-ecdh-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diffie-hellman",
      "version": "5.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b5835739270cfe26acf632099fded2a07f209e5e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/diffie-hellman@5.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diffie-hellman/-/diffie-hellman-5.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diffie-hellman@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diffie-hellman/-/diffie-hellman-5.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "miller-rabin",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d75e5f2e1bd956a5b01cf6c29729edc4455f5437e5f432cb4ee26fab78363bf3b18bc022368b801ef0d2cc74b4be250973e579be6ddeabdd57c2a9fd769e2344"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/miller-rabin@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/miller-rabin/-/miller-rabin-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/miller-rabin@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/miller-rabin/-/miller-rabin-4.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/miller-rabin"
        },
        {
          "name": "cdx:npm:bin",
          "value": "miller-rabin"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "public-encrypt",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "39f699f3a46560dd5ebacbca693caf7c65c18cc6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/public-encrypt@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/public-encrypt/-/public-encrypt-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/public-encrypt@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/public-encrypt/-/public-encrypt-4.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "encrypt"
      ]
    },
    {
      "group": "",
      "name": "randomfill",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "60be86ae1ad6a2273412af2b5d56cca6d1fb740c42b3427e9a1e58d1eb8d7a43cf61ac4499d5468a6e86768c68473296db226853cb6e7a27d2ee6631bdc14311"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/randomfill@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/randomfill/-/randomfill-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randomfill@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/randomfill/-/randomfill-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deps-sort",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "091724902e84658260eb910748cccd1af6e21fb5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deps-sort@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deps-sort/-/deps-sort-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deps-sort@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deps-sort/-/deps-sort-2.0.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/deps-sort"
        },
        {
          "name": "cdx:npm:bin",
          "value": "deps-sort"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shasum",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e7012310d8f417f4deb5712150e5678b87ae565f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shasum@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shasum/-/shasum-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shasum@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shasum/-/shasum-1.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-stable-stringify",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "611c23e814db375527df851193db59dd2af27f45"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-stable-stringify@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stable-stringify@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-0.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "subarg",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f62cf17581e996b48fc965699f54c06ae268b8d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/subarg@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/subarg/-/subarg-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/subarg@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/subarg/-/subarg-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domain-browser",
      "version": "1.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "867aa4b093faa05f1de08c06f4d7b21fdf8698bc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/domain-browser@1.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domain-browser/-/domain-browser-1.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domain-browser@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domain-browser/-/domain-browser-1.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer2",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8b12dab878c0d69e3e7891051662a32fc6bddcc1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/duplexer2@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer2@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer2/-/duplexer2-0.1.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "events",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9ebdb7635ad099c70dcc4c2a1f5004288e8bd924"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/events@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/events/-/events-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/events/-/events-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8461733f538b0837c9361e39a9ab9e9704dc2f28"
        }
      ],
      "purl": "pkg:npm/has@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has/-/has-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has/-/has-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "function-bind",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c88a2f033317e3db05f18979f1f482589e6cbd22ee6a26cfc5740914b98139b4ee0abd0c7f52a23e8a4633d3621638980426df69ad8587a6eb790e803554c8d0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "htmlescape",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a03edc2214bca3b66424a3e7959349509cb0351"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/htmlescape@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/htmlescape/-/htmlescape-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/htmlescape@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/htmlescape/-/htmlescape-1.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "https-browserify",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3f91365cabe60b77ed0ebba24b454e3e09d95a82"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/https-browserify@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/https-browserify/-/https-browserify-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/https-browserify@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/https-browserify/-/https-browserify-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "insert-module-globals",
      "version": "7.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c03bf4e01cb086d5b5e5ace8ad0afe7889d638c3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/insert-module-globals@7.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/insert-module-globals/-/insert-module-globals-7.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/insert-module-globals@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/insert-module-globals/-/insert-module-globals-7.0.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/insert-module-globals"
        },
        {
          "name": "cdx:npm:bin",
          "value": "insert-module-globals"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lexical-scope",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fcea5edc704a4b3a8796cdca419c3a0afaf22df4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lexical-scope@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lexical-scope/-/lexical-scope-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lexical-scope@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lexical-scope/-/lexical-scope-1.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "astw",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7bd41784d32493987aeb239b6b4e1c57a873b917"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/astw@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/astw/-/astw-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/astw@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/astw/-/astw-2.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "4.0.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "105495ae5361d697bd195c825192e1ad7f253787"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn@4.0.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-4.0.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@4.0.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-4.0.13.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "acorn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process",
      "version": "0.11.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7332300e840161bda3e69a1d1d91a7d4bc16f182"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/process@0.11.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process/-/process-0.11.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process@0.11.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process/-/process-0.11.10.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "labeled-stream-splicer",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a52e1d138024c00b86b1c0c91f677918b8ae0a59"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/labeled-stream-splicer@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/labeled-stream-splicer/-/labeled-stream-splicer-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/labeled-stream-splicer@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/labeled-stream-splicer/-/labeled-stream-splicer-2.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a18acfca9a8f4177e09abfc6038939b05d1eedf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isarray@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-splicer",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b63be438a133e4b671cc1935197600175910d83"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-splicer@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-splicer/-/stream-splicer-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-splicer@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-splicer/-/stream-splicer-2.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "module-deps",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "23215833f1da13fd606ccb8087b44852dcb821fd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/module-deps@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/module-deps/-/module-deps-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/module-deps@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/module-deps/-/module-deps-4.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/module-deps"
        },
        {
          "name": "cdx:npm:bin",
          "value": "module-deps"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detective",
      "version": "4.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1fa3e679e51c665a16b5db780c0905cb314bf786aba47af734ec3099520b162cbef50778253c715ebcdfc8693f96672ddaa5460704d2c125da82abb60719968a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/detective@4.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detective/-/detective-4.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detective@4.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detective/-/detective-4.7.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "5.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "61e8fecce2750e6fc8319cf38fbf0e9ed3ffaf7cc711a29cc8da14da501ac4fb6bb1e33aac5d31c2aa33e50e72b008840fd8538c8da182dbcb5e2b6508dd7f52"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn@5.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-5.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-5.3.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/detective/node_modules/.bin/acorn"
        },
        {
          "name": "cdx:npm:bin",
          "value": "acorn"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parents",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fedd4d2bf193a77745fe71e371d73c3307d9c751"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parents@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parents/-/parents-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parents@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parents/-/parents-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-platform",
      "version": "0.11.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e864217f74c36850f0852b78dc7bf7d4a5721bf2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-platform@0.11.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-platform/-/path-platform-0.11.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-platform@0.11.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-platform/-/path-platform-0.11.15.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "860a121ab737a63cc03c734183e2a715c2b61f09474ecfd8ac0194afaaa04d5519997bf55045d79746d934128c03d7ee77a95160574f1b3d315f1c9c3f39a68b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve/-/resolve-1.5.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-parse",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c1adf871ea9cd6c9431b6ea2bd74a0ff055c4c1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-combiner2",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb4d8a1420ea362764e21ad4780397bebcb41cbe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-combiner2@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-combiner2/-/stream-combiner2-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-combiner2@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-combiner2/-/stream-combiner2-1.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-browserify",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "49ca0293e0b19590a5f5de10c7f265a617d8fe54"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/os-browserify@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-browserify/-/os-browserify-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-browserify@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-browserify/-/os-browserify-0.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-browserify",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a0b870729aae214005b7d5032ec2cbbb0fb4451a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-browserify@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-browserify/-/path-browserify-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-browserify@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-browserify/-/path-browserify-0.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "querystring-es3",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9ec61f79049875707d69414596fd907a4d711e73"
        }
      ],
      "purl": "pkg:npm/querystring-es3@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/querystring-es3/-/querystring-es3-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystring-es3@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/querystring-es3/-/querystring-es3-0.2.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-only-stream",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2724fd6a8113d73764ac288d4386270c1dbf17f0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/read-only-stream@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-only-stream/-/read-only-stream-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-only-stream@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-only-stream/-/read-only-stream-2.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shell-quote",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f4781949cce402697127430ea3b3c5476f481767"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shell-quote@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shell-quote@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shell-quote/-/shell-quote-1.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-filter",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7da8cf2e26628ed732803581fd21f67cacd2eeec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-filter@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-filter/-/array-filter-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-filter@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-filter/-/array-filter-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-map",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "88a2bab73d1cf7bcd5c1b118a003f66f665fa662"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-map@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-map/-/array-map-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-map@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-map/-/array-map-0.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-reduce",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "173899d3ffd1c7d9383e4479525dbe278cab5f2b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-reduce@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-reduce/-/array-reduce-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-reduce@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-reduce/-/array-reduce-0.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-browserify",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "66266ee5f9bdb9940a4e4514cafb43bb71e5c9db"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-browserify@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-browserify/-/stream-browserify-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-browserify@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-browserify/-/stream-browserify-2.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stream-http",
      "version": "2.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "734c930f6adb4335ed4ac152561b69bd8fef4babb4eba3dc5ce5fd9010779923bbe918944332f7e34b899060569e5060e3f1d9cea8945ed69503bc1c45c26013"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stream-http@2.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/stream-http/-/stream-http-2.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stream-http@2.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/stream-http/-/stream-http-2.7.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "builtin-status-codes",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "85982878e21b98e1c66425e03d0174788f569ee8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/builtin-status-codes@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/builtin-status-codes/-/builtin-status-codes-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/builtin-status-codes@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/builtin-status-codes/-/builtin-status-codes-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-arraybuffer",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7d229b1fcc637e466ca081180836a7aabff83f43"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/to-arraybuffer@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-arraybuffer/-/to-arraybuffer-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-arraybuffer@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-arraybuffer/-/to-arraybuffer-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "syntax-error",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1ed9266c4d40be75dc55bf9bb1cb77062bb96ca1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/syntax-error@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/syntax-error/-/syntax-error-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/syntax-error@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/syntax-error/-/syntax-error-1.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "timers-browserify",
      "version": "1.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c9c58b575be8407375cb5e2462dacee74359f41d"
        }
      ],
      "purl": "pkg:npm/timers-browserify@1.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/timers-browserify/-/timers-browserify-1.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/timers-browserify@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/timers-browserify/-/timers-browserify-1.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tty-browserify",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a157ba402da24e9bf957f9aa69d524eed42901a6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tty-browserify@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tty-browserify/-/tty-browserify-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tty-browserify@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tty-browserify/-/tty-browserify-0.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url",
      "version": "0.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3838e97cfc60521eb73c525a8e55bfdd9e2e28f1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/url@0.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url/-/url-0.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url@0.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url/-/url-0.11.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "punycode",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9653a036fb7c1ee42342f2325cceefea3926c48d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/punycode@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/punycode/-/punycode-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/punycode/-/punycode-1.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "querystring",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b209849203bb25df820da756e747005878521620"
        }
      ],
      "purl": "pkg:npm/querystring@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/querystring/-/querystring-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystring@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/querystring/-/querystring-0.2.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "The querystring API is considered Legacy. new code should use the URLSearchParams API instead."
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vm-browserify",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5d7ea45bbef9e4a6ff65f95438e0a87c357d5a73"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vm-browserify@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vm-browserify/-/vm-browserify-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vm-browserify@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vm-browserify/-/vm-browserify-0.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indexof",
      "version": "0.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "82dc336d232b9062179d05ab3293a66059fd435d"
        }
      ],
      "purl": "pkg:npm/indexof@0.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/indexof/-/indexof-0.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/indexof@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/indexof/-/indexof-0.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-hmr",
      "version": "0.3.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9aa738308029027bfce3a1c2fe3c62bd000e227f6193b62139efce32fa482289340586559e926a01f55b94c1c2b8da659be73dd3e25db8c66f934bb70535f0ac"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-hmr@0.3.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-hmr/-/browserify-hmr-0.3.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-hmr@0.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-hmr/-/browserify-hmr-0.3.6.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "express",
      "version": "4.16.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e35c6dfe2d64b7dca0a5cd4f21781be3299e076c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/express@4.16.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/express/-/express-4.16.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/express@4.16.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/express/-/express-4.16.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "86246758c7dd6d21a6474ff084a4740ec05eb21f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/accepts@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.3.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-types",
      "version": "2.1.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "09d7a393f03e995a79f8af857b70a9e0ab16557a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-types@2.1.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.17.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime-db",
      "version": "1.30.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "74c643da2dd9d6a45399963465b26d5ca7d71f01"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mime-db@1.30.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.30.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime-db@1.30.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime-db/-/mime-db-1.30.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b327184e8992101177b28563fb5e7102acd0ca9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/negotiator@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/negotiator/-/negotiator-0.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-flatten",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a5f699051b1e7073328f2a008968b64ea2955d2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-flatten@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-flatten@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "body-parser",
      "version": "1.18.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "87678a19d84b47d859b83199bd59bce222b10454"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/body-parser@1.18.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/body-parser/-/body-parser-1.18.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/body-parser@1.18.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/body-parser/-/body-parser-1.18.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bytes",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d32815404d689699f85a4ea4fa8755dd13a96048"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bytes@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bytes/-/bytes-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bytes@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bytes/-/bytes-3.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-type",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8483f71043ecf2d07d013d4bf8d52ab70380a6ce269366686fcf4c5973078c75a0f668a517f8f8a2c9e740b5c108114193fb6f206fed51cf663942623c184f5c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/content-type@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-type/-/content-type-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-type@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-type/-/content-type-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5783b4e1c459f06fa5ca27f991f3d06e7a310359"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/depd@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/depd/-/depd-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/depd/-/depd-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-errors",
      "version": "1.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0a002cc85707192a7e7946ceedc11155f60ec736"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-errors@1.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-errors/-/http-errors-1.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-errors@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-errors/-/http-errors-1.6.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "66567e37043eeb4f04d91bd658c0cbefb55b8e04"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "statuses",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "faf51b9eb74aaef3b3acf4ad5f61abf24cb7b93e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/statuses@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/statuses/-/statuses-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/statuses@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/statuses/-/statuses-1.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-finished",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20f1336481b083cd75337992a16971aa2d906947"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/on-finished@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-finished@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ee-first",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "590c61156b0ae2f4f0255732a158b266bc56b21d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ee-first@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ee-first@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "qs",
      "version": "6.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "791ce1acdd5648835808309baf3efdeb3dfb2ce7b79b9b665bb4507faa019edba4006d679a8bc9be19f01c744c01f7a822d7359b61e4d36584476690fe2aacf8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/qs@6.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/qs/-/qs-6.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/qs@6.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/qs/-/qs-6.5.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "raw-body",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bcd60c77d3eb93cde0050295c3f379389bc88f89"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/raw-body@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/raw-body/-/raw-body-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/raw-body@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/raw-body/-/raw-body-2.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unpipe",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2bf4ee8514aae6165b4817829d21b2ef49904ec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unpipe@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unpipe@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-is",
      "version": "1.6.15",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cab10fb4909e441c82842eafe1ad646c81804410"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/type-is@1.6.15",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-is/-/type-is-1.6.15.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-is@1.6.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-is/-/type-is-1.6.15.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "media-typer",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8710d7af0aa626f8fffa1ce00168545263255748"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/media-typer@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/media-typer@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-disposition",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0cf68bb9ddf5f2be7961c3a85178cb85dba78cb4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/content-disposition@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-disposition@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e7e0a1f9ef43b4c8ba925c5c5a96e806d16873bb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cookie@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie/-/cookie-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie/-/cookie-0.3.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cookie-signature",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e303a882b342cc3ee8ca513a79999734dab3ae2c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cookie-signature@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cookie-signature@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "encodeurl",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79e3d58655346909fe6f0f45a5de68103b294d20"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/encodeurl@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/encodeurl@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-html",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0258eae4d3d0c0974de1c169188ef0051d1d1988"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escape-html@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-html@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "etag",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "41ae2eeb65efa62268aebfea83ac7d79299b0887"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/etag@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/etag@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "finalhandler",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ce0b6855b45853e791b2fcc680046d88253dd7f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/finalhandler@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/finalhandler@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/finalhandler/-/finalhandler-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseurl",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fc289d4ed8993119460c156253262cdc8de65bf3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parseurl@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseurl@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseurl/-/parseurl-1.3.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fresh",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d8cadd90d976569fa835ab1f8e4b23a105605a7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fresh@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fresh@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge-descriptors",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b00aaa556dd8b44568150ec9d1b953f3f90cbb61"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/merge-descriptors@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge-descriptors@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "methods",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5529a4d67654134edcc5266656835b0f851afcee"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/methods@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/methods@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-to-regexp",
      "version": "0.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df604178005f522f15eb4490e7247a1bfaa67f8c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-to-regexp@0.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-to-regexp@0.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "proxy-addr",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6571504f47bb988ec8180253f85dd7e14952bdec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/proxy-addr@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proxy-addr@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "forwarded",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "98c23dab1175657b8c0573e8ceccd91b0ff18c84"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/forwarded@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/forwarded/-/forwarded-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/forwarded@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/forwarded/-/forwarded-0.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ipaddr.js",
      "version": "1.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d4b505bde9946987ccf0fc58d9010ff9607e3fa0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ipaddr.js@1.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ipaddr.js@1.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.5.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "range-parser",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f49be6b487894ddc40dcc94a322f611092e00d5e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/range-parser@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/range-parser@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/range-parser/-/range-parser-1.2.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "send",
      "version": "0.16.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "12508b25d24828f93abb1fc7a1cc2193b3451e9237a559bf2193985aa526a317207b233e329c471ca85bf109a52435f5a54e96ae068706454d9bbdd2bfbb9cd8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/send@0.16.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/send/-/send-0.16.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/send@0.16.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/send/-/send-0.16.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "destroy",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "978857442c44749e4206613e37946205826abd80"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/destroy@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/destroy/-/destroy-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/destroy@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/destroy/-/destroy-1.0.4.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mime",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "288d7ea8e66ee43716eb06b26074b347fb572820c2e4e9b8b35cf64098c350bccb7267f70efcd2ee896e6381c24eb73ef4588a99652078d2e0ed6dee210bf1b5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mime@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mime/-/mime-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mime@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mime/-/mime-1.4.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/mime"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mime"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-static",
      "version": "1.13.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85231466bb0f6bf234f556052706badbb24990db3436b7cbd54ceeba9f86a877d3a11d8a72c5c5ca65d257dd21a32c3733e9ac8c5b90972f98cc81ffab430695"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/serve-static@1.13.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-static/-/serve-static-1.13.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-static@1.13.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-static/-/serve-static-1.13.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "setprototypeof",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "06f13f4f0a595f8157131c4ec59c9119042feb9d4c4b09962991aabe63dc4488c3a96b9bebb9132ae20cc78ddc659ad2fdc041cf005c3435a8171b765c4148a5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/setprototypeof@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/setprototypeof@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.1.0.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utils-merge",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9f95710f50a267947b2ccc124741c1028427e713"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/utils-merge@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utils-merge@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vary",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2299f02c6ded30d4a5961b0b9f74524a18f634fc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/vary@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vary@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rsvp",
      "version": "4.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dc1b0b1a536f7dec9d2be45e0a12ad4197c9fd96"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/rsvp@4.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rsvp/-/rsvp-4.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rsvp@4.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rsvp/-/rsvp-4.7.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c1a4590ceff87ecf13c72652f046f716b29e6014"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/socket.io@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io/-/socket.io-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io/-/socket.io-2.0.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "engine.io",
      "version": "3.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d0211b70a552ce841ffc7da8627b301a9a4162e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/engine.io@3.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/engine.io/-/engine.io-3.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/engine.io@3.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/engine.io/-/engine.io-3.1.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "accepts",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c3ca7434938648c3e0d9c1e328dd68b622c284ca"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/accepts@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/accepts/-/accepts-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/accepts@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/accepts/-/accepts-1.3.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64id",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "47688cb99bb6804f0e06d3e763b1c32e57d8e6b6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/base64id@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64id/-/base64id-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64id@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64id/-/base64id-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "engine.io-parser",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7489cb173afcd118a3675ac6a71d7ee7afee1681fbffb227847de466df8cb3a853f2d371dcd196fd635203f7fc02cd5690e7e4bb26f7b67472b971b1bac72533"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/engine.io-parser@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/engine.io-parser@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/engine.io-parser/-/engine.io-parser-2.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "after",
      "version": "0.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fedb394f9f0e02aa9768e702bda23b505fae7e1f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/after@0.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/after/-/after-0.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/after@0.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/after/-/after-0.8.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arraybuffer.slice",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c065085505ee7a12f94c2a90ba7f0e5bcd631b3016c9cab3145f25169f8638ce415cb623ddb28db180b875a07b9fa5e30aac5003faa04c9fbc00d47769c8eba2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/arraybuffer.slice@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arraybuffer.slice/-/arraybuffer.slice-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arraybuffer.slice@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arraybuffer.slice/-/arraybuffer.slice-0.0.7.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-arraybuffer",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "73926771923b5a19747ad666aa5cd4bf9c6e9ce8"
        }
      ],
      "purl": "pkg:npm/base64-arraybuffer@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-arraybuffer/-/base64-arraybuffer-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-arraybuffer@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-arraybuffer/-/base64-arraybuffer-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "blob",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bcf13052ca54463f30f9fc7e95b9a47630a94921"
        }
      ],
      "purl": "pkg:npm/blob@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/blob/-/blob-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/blob@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/blob/-/blob-0.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-binary2",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e83dba49f0b9be4d026d27365350d9f03f54be98"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-binary2@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-binary2/-/has-binary2-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-binary2@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-binary2/-/has-binary2-1.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a37d94ed9cda2d59865c9f76fe596ee1f338741e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isarray@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-2.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ws",
      "version": "3.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e758b6bf370652b7829026ee7531894271243983b20da4eace32de1757c8f876a4d77669549921d0f3fa0b0b4ebd724aded1f46c81fbec2b06d376d28b08390"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ws@3.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ws/-/ws-3.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@3.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ws/-/ws-3.3.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-limiter",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8e9fee167a283a23be2f6d757993a84b2ce93884cc5f1d6b0484dab98ca41b705160fbbc87451cc6c3cd074e11479be8e13cb3dfe6b2d7bb51e8955ff6acd85a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/async-limiter@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async-limiter/-/async-limiter-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-limiter@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async-limiter/-/async-limiter-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ultron",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "50811704d79898aa6d587eb3f199ea4de4bc7d5ef8cc6d3f79153d546929cf3f8b20936cf16ff333f2feedcb42911ae06cd9e7474c71c386ca3abd1c5b43743a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ultron@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ultron/-/ultron-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ultron@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ultron/-/ultron-1.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uws",
      "version": "0.14.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "67aaf33c46b2a587a5f6666d00f7691328f149dc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Zlib",
            "url": "https://opensource.org/licenses/Zlib",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uws@0.14.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uws/-/uws-0.14.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uws@0.14.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uws/-/uws-0.14.5.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "New code is available at github.com/uNetworking/uWebSockets.js"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "network"
      ]
    },
    {
      "group": "",
      "name": "socket.io-adapter",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2a805e8a14d6372124dd9159ad4502f8cb07f06b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/socket.io-adapter@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-adapter@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-adapter/-/socket.io-adapter-1.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io-client",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0918a552406dc5e540b380dcd97afc4a64332f8e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/socket.io-client@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-client@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-client/-/socket.io-client-2.0.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "backo2",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "31ab1ac8b129363463e35b3ebb69f4dfcfba7947"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/backo2@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/backo2/-/backo2-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/backo2@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/backo2/-/backo2-1.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "component-bind",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "00c608ab7dcd93897c0009651b1d3a8e1e73bbd1"
        }
      ],
      "purl": "pkg:npm/component-bind@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/component-bind/-/component-bind-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-bind@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/component-bind/-/component-bind-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "component-emitter",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "137918d6d78283f7df7a6b7c5a63e140e69425e6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/component-emitter@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-emitter@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/component-emitter/-/component-emitter-1.2.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "engine.io-client",
      "version": "3.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4fcf1370b47163bd2ce9be2733972430350d4ea1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/engine.io-client@3.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/engine.io-client/-/engine.io-client-3.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/engine.io-client@3.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/engine.io-client/-/engine.io-client-3.1.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "component-inherit",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "645fc4adf58b72b649d5cae65135619db26ff143"
        }
      ],
      "purl": "pkg:npm/component-inherit@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/component-inherit/-/component-inherit-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/component-inherit@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/component-inherit/-/component-inherit-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-cors",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5e474793f7ea9843d1bb99c23eef49ff126fff39"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-cors@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-cors/-/has-cors-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-cors@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-cors/-/has-cors-1.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseqs",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d5208a3738e46766e291ba2ea173684921a8b89d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parseqs@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseqs/-/parseqs-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseqs@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseqs/-/parseqs-0.0.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "better-assert",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "40866b9e1b9e0b55b481894311e68faffaebc522"
        }
      ],
      "purl": "pkg:npm/better-assert@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/better-assert/-/better-assert-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/better-assert@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/better-assert/-/better-assert-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "callsite",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "280398e5d664bd74038b6f0905153e6e8af1bc20"
        }
      ],
      "purl": "pkg:npm/callsite@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/callsite/-/callsite-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/callsite@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/callsite/-/callsite-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parseuri",
      "version": "0.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "80204a50d4dbb779bfdc6ebe2778d90e4bce320a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parseuri@0.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parseuri/-/parseuri-0.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parseuri@0.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parseuri/-/parseuri-0.0.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xmlhttprequest-ssl",
      "version": "1.5.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "04f560915724b389088715cc0ed7813e9677bf57"
        }
      ],
      "purl": "pkg:npm/xmlhttprequest-ssl@1.5.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xmlhttprequest-ssl/-/xmlhttprequest-ssl-1.5.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlhttprequest-ssl@1.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xmlhttprequest-ssl/-/xmlhttprequest-ssl-1.5.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "yeast",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "008e06d8094320c372dbc2f8ed76a0ca6c8ac419"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yeast@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yeast/-/yeast-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yeast@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yeast/-/yeast-0.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-component",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f0c69aa50efc95b866c186f400a33769cb2f1291"
        }
      ],
      "purl": "pkg:npm/object-component@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-component/-/object-component-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-component@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-component/-/object-component-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "socket.io-parser",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dbc2282151fc4faebbe40aeedc0772eba619f7f2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/socket.io-parser@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socket.io-parser@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/socket.io-parser/-/socket.io-parser-3.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "to-array",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "17e6c11f73dd4f3d74cda7a4ff3238e9ad9bf890"
        }
      ],
      "purl": "pkg:npm/to-array@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-array/-/to-array-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-array@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-array/-/to-array-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "synchd",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "537962907e79e2d1007d9968e46f435a63c1d58e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/synchd@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/synchd/-/synchd-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/synchd@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/synchd/-/synchd-1.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ecstatic",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ced1385aa85ea162e1df0bfe1d0c32edd0029ef358eb6d1ca16a5af97a98e91d9c55681a013da5508494d547fb26974b2c9094464b4939a03d6afd803b3b3261"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ecstatic@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ecstatic/-/ecstatic-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ecstatic@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ecstatic/-/ecstatic-2.2.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/ecstatic"
        },
        {
          "name": "cdx:npm:bin",
          "value": "ecstatic"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This package is unmaintained and deprecated. See the GH Issue 259."
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "he",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "93410fd21b009735151f8868c2f271f3427e23fd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/he@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/he/-/he-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/he@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/he/-/he-1.1.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/he"
        },
        {
          "name": "cdx:npm:bin",
          "value": "he"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-join",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c072756967ad24b8b59e5741551caac78f50b8b7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/url-join@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url-join/-/url-join-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url-join@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url-join/-/url-join-2.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react",
      "version": "15.6.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dba0434ab439cfe82f108f0f511663908179aa72"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react@15.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react/-/react-15.6.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react@15.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react/-/react-15.6.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "react,Component,react/Component"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "build/star-ratings.js",
            "line": 9
          },
          {
            "location": "build/star.js",
            "line": 9
          },
          {
            "location": "example/index.js",
            "line": 1
          },
          {
            "location": "src/star-ratings.js",
            "line": 1
          },
          {
            "location": "src/star.js",
            "line": 1
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "create-react-class",
      "version": "15.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cf1ed15f12aad7f14ef5f2dfe05e6c42f91ef02a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-react-class@15.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-react-class/-/create-react-class-15.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-react-class@15.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-react-class/-/create-react-class-15.6.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-dom",
      "version": "15.6.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "41cfadf693b757faf2708443a1d1fd5a02bef730"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-dom@15.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-dom/-/react-dom-15.6.2.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-dom@15.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-dom/-/react-dom-15.6.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "react-dom"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "example/index.js",
            "line": 2
          },
          {
            "location": "example/index.js",
            "line": 49
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react-transform",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5e35900e35391ef2c2e0bab59951c1c59bdd6cd5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-transform@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-transform/-/react-transform-0.0.3.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-transform@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-transform/-/react-transform-0.0.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react-tools",
      "version": "0.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5d994cef048dac2a24fafb6ca6e600d75acd06e5186fc1c215ae15203af30b9ea0a49e6a0cf07f08b9c404d78229290e5a351f9ae9c8c930c0f1fb24908b4f31"
        }
      ],
      "purl": "pkg:npm/react-tools@0.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/react-tools/-/react-tools-0.10.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-tools@0.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/react-tools/-/react-tools-0.10.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/jsx"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jsx"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "react-tools is deprecated. For more information, visit https://fb.me/react-tools-deprecated"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "commoner",
      "version": "0.9.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0e7a6605aa0cf8a812d347ba280e9bf88a570e9430cfaaef98635a92df1a5be7a4913fb50c79cbf0749b3179681c5610510c64126352f253bee9cf36f5681c36"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/commoner@0.9.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commoner/-/commoner-0.9.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commoner@0.9.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commoner/-/commoner-0.9.8.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/commonize"
        },
        {
          "name": "cdx:npm:bin",
          "value": "commonize"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53a84191e22ca1e13cd41fb26acf6e545e18615715a010b06f57b7d7854fcaf550b9b170be74c0b9cd68510e95b8c3d8512e117f5833af4c1354bbece2c6f93f"
        }
      ],
      "purl": "pkg:npm/commander@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "3.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8556f4cf0119c02d455d22913c54de3ad37b000ac9709948e942c62edaecb5ab3028d96b4c9a8003ed65625494a29e2f8c0e36df1941cea7d54b78961a5a89fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@3.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-3.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@3.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-3.2.11.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5855f58c8d406b13536553872c155acf04d629a423a32912cc204d5c1ef6bc34c2ce8a501adc8ff75b4a7452b972fd7ea8cc0fca24eed47a94ae2aa9948f2970"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.3.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5a989b589eb4737020033f1ada2604ac3adc4f60bb3a62a7b168487073a39141c58e45e770986d2f1352a949b147146e9e96f923c569addeda35277636d92c25"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@2.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-2.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-2.7.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sigmund",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c2bc45df87a356a66f984ae6366e95dbfd522286a580ea12ec81ba02fb49e5ef543b37ba3679a096f2625afcd2ef421b3a8e9777559578522510955ebe95cf2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sigmund@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sigmund/-/sigmund-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sigmund@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sigmund/-/sigmund-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85c8ff353516bfe0b731baab55bf45f9a1fa96f4f010725dc767e807196b56ae61eb313c05fbb8a6fe02000a9b0dc66bc3ff4093996c457958f40a3cfc5d13bb"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/graceful-fs/-/graceful-fs-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/graceful-fs/-/graceful-fs-2.0.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a19855a0690658f3709b862f800c89e8510f04b67e811b97e290cf6cc9e3a3425b6f478e61edc44a27ff6ebd012e0fad48dd48eeefbc9871ed3f2e12950a543"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/iconv-lite/-/iconv-lite-0.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/iconv-lite/-/iconv-lite-0.2.11.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "install",
      "version": "0.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "87131962aa7b7cfbae864270e6a3f9e200ba2b4a44ca40264e982c305e565988804f21b83ab44f563d56ab79fe630bfaaa960afc60fb7bd51dcfd24645a208f8"
        }
      ],
      "purl": "pkg:npm/install@0.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/install/-/install-0.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/install@0.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/install/-/install-0.1.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f0e0aad037bf87d671b1eab3087f0ac3f16295fe6917fbcc23af811fb2eed235f3da9a980a34c0411a254b14488be031fa80828e5c6824c3f4610e1796b40d1e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.3.5.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d7c32705a09e057f6c2d151db71cffea89e56fbc0bcc5c42ca5925c8ef27dbbcb92712586862cfbb871cc9ce738a1e7c4a913363c4267f0696aa0baa5d4e98f8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/q@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/q/-/q-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/q/-/q-1.0.1.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "You or someone you depend on is using Q, the JavaScript Promise library that gave JavaScript developers strong feelings about promises. They can almost certainly migrate to the native JavaScript promise now. Thank you literally everyone for joining me in this bet against the odds. Be excellent to each other.\n\n(For a CapTP with native promises, see @endo/eventual-send and @endo/captp)"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "recast",
      "version": "0.7.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e94554681d0d8e558dd9f775243dad6d87d33f6e001116184917de243f211641316b885821051ea89ac067c027430a4862c2b11a17ecee1fc360db89ec3e6e00"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/recast@0.7.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/recast/-/recast-0.7.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/recast@0.7.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/recast/-/recast-0.7.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ast-types",
      "version": "0.4.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fad03ca56e0d95ac867f621cb2eb58db1cf73c36bca39b868be285f36cc7241526aa875744d23b8aaed178ff6a37497f2e403d58ba0d60ed98eea788295dc39b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ast-types@0.4.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ast-types/-/ast-types-0.4.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ast-types@0.4.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ast-types/-/ast-types-0.4.13.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "depd",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "38458031b0a42bd21643ca5f4ef1c18424aa1e047eb24e696e262aab416a7c0446e02cbe711b026c84f1eb0879a5cb267c13e224071b77df2d7ddcf97e705b6a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/depd@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/depd/-/depd-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/depd@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/depd/-/depd-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cls",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "97904fa5068d0ee7790ed9b3bcfaecebf5e6b0ad11b29fb186135318bb543dbdb1df3ac460e6f66a5064570dd8cb328c7f7bfaa72fa2f4b044db66f6be018eed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cls@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/cls/-/cls-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cls@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/cls/-/cls-0.1.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima-fb",
      "version": "6001.1001.0-dev-harmony-fb",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6ba575f09e02a2e38ede2964b827cb0ffa995d51d1ddf97ac48c7bf71508387bd0a4c226350cfbc7950096d8bfbf3a5f81617b81020e23ae42410f9c3edea7b"
        }
      ],
      "purl": "pkg:npm/esprima-fb@6001.1001.0-dev-harmony-fb",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima-fb/-/esprima-fb-6001.1001.0-dev-harmony-fb.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima-fb@6001.1001.0-dev-harmony-fb",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima-fb/-/esprima-fb-6001.1001.0-dev-harmony-fb.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/recast/node_modules/.bin/esparse, /app/node_modules/recast/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "6001.1001.0000-dev-harmony-fb used instead of 6001.1001.0-dev-harmony-fb"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.1.32",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "86d4322ebad12e443ced97eb8abe3fc8dfaf01477a0cd8d56b21234d21d7bb6f40610270e7b238ff110bfccea9e84ff0a0f349c2f66deab565cdcee014425c71"
        }
      ],
      "purl": "pkg:npm/source-map@0.1.32",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map/-/source-map-0.1.32.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.1.32",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map/-/source-map-0.1.32.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "amdefine",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4b61f0d13b4d90c26121a6c1c08a2328bf581cee53d27e5e36a589ecbae57a5ff30db7ed429c696a98bcb59b375f51d66bebbe41ec9d1a6cf3354d26d3df9172"
        },
        {
          "alg": "SHA-1",
          "content": "4a5282ac164729e93619bcfd3ad151f817ce91f5"
        }
      ],
      "licenses": [
        {
          "expression": "BSD-3-Clause OR MIT"
        }
      ],
      "purl": "pkg:npm/amdefine@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/amdefine/-/amdefine-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/amdefine@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/amdefine/-/amdefine-1.0.1.tgz"
        },
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima-fb",
      "version": "3001.1.0-dev-harmony-fb",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6b74458825418b2f0a74eeaafc2fbc05088ffec464f17b21054dd01c70cff2d3738d8c11dc52813889aef8f5df5613e864bd092ad24b04039694330208563c49"
        }
      ],
      "purl": "pkg:npm/esprima-fb@3001.1.0-dev-harmony-fb",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima-fb/-/esprima-fb-3001.0001.0000-dev-harmony-fb.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima-fb@3001.1.0-dev-harmony-fb",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima-fb/-/esprima-fb-3001.0001.0000-dev-harmony-fb.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/esparse, /app/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:versionMismatchError",
          "value": "3001.0001.0000-dev-harmony-fb used instead of 3001.1.0-dev-harmony-fb"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jstransform",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0cc2a5b411d424d80e4d8dd76571248ba7ab7ba489273ab26dc4f53790c37cd912573c66dd0b77dc33956122c02934a2f5869787dfc89242c2516e0a6b3d066"
        }
      ],
      "purl": "pkg:npm/jstransform@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jstransform/-/jstransform-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jstransform@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jstransform/-/jstransform-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base62",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42d131ba320eabf17aef63a41e60e2dc2764a61380d64490dfc82fd37468ddca6561093cdf576af46337435a17031a51e473498c68e38d3da91ed046009bb58f"
        }
      ],
      "purl": "pkg:npm/base62@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/base62/-/base62-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base62@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/base62/-/base62-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.1.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a8500b522287a37e43ba4cb451b99be582a3f5bddce8272018d19e23ad2c77a367dca698ee1f5f72510e702564d21c2ccf06183faf97dbf8e94b9847aaa56e8a"
        }
      ],
      "purl": "pkg:npm/source-map@0.1.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map/-/source-map-0.1.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.1.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:peer",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map/-/source-map-0.1.31.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-transform-hmr",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e1a40bd0aaefc72e8dfd7a7cda09af85066397bb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-transform-hmr@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-transform-hmr/-/react-transform-hmr-1.0.4.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-transform-hmr@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-transform-hmr/-/react-transform-hmr-1.0.4.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "global",
      "version": "4.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e76989268a6c74c38908b1305b10fc0e394e9d0f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/global@4.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global/-/global-4.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global@4.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global/-/global-4.3.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "min-document",
      "version": "2.19.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7bd282e3f5842ed295bb748cdd9f1ffa2c824685"
        }
      ],
      "purl": "pkg:npm/min-document@2.19.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/min-document/-/min-document-2.19.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/min-document@2.19.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/min-document/-/min-document-2.19.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-walk",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "672226dc74c8f799ad35307df936aba11acd6018"
        }
      ],
      "purl": "pkg:npm/dom-walk@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-walk/-/dom-walk-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-walk@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-walk/-/dom-walk-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process",
      "version": "0.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1638d8a8e34c2f440a91db95ab9aeb677fc185cf"
        }
      ],
      "purl": "pkg:npm/process@0.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process/-/process-0.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process@0.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process/-/process-0.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-proxy",
      "version": "1.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9dbfd9d927528c3aa9f444e4558c37830ab8c26a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-proxy@1.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-proxy/-/react-proxy-1.1.8.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-proxy@1.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-proxy/-/react-proxy-1.1.8.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react-deep-force-update",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bcd31478027b64b3339f108921ab520b4313dc2c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-deep-force-update@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-deep-force-update/-/react-deep-force-update-1.1.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-deep-force-update@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-deep-force-update/-/react-deep-force-update-1.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "watchify",
      "version": "3.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f075fd2e8a86acde84cedba6e5c2a0bedd523d9e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/watchify@3.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/watchify/-/watchify-3.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/watchify@3.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/watchify/-/watchify-3.9.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/watchify"
        },
        {
          "name": "cdx:npm:bin",
          "value": "watchify"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify",
      "version": "14.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80a7ceb0d42ffeda16cfeeb49d23df633bb0484773bd5d96771ad53d46cf0ffaae8b8e2b024077b779ae36d9a61981eaac6e7a146c17f52504426ccd2c0792ee"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify@14.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify/-/browserify-14.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify@14.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify/-/browserify-14.5.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/watchify/node_modules/.bin/browserify"
        },
        {
          "name": "cdx:npm:bin",
          "value": "browserify"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserify-zlib",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "67de36472b075e626b86a93cf0598a055abfbf9b6a992903cfba79e06fcc1b28cc9c21459c2efd5d635b83e56d6bc5ba59bdaab526534b1206909ad1a4214488"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserify-zlib@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserify-zlib/-/browserify-zlib-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserify-zlib@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserify-zlib/-/browserify-zlib-0.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pako",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9507b8f183ec30902283eca7819f3b2eeb3e345fb79adbbb0d5381bba6ff8073b56292b0223e405a367f4ce4bb8b8e870ff522c7359bd737960d97c667789872"
        }
      ],
      "licenses": [
        {
          "expression": "MIT AND Zlib"
        }
      ],
      "purl": "pkg:npm/pako@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pako/-/pako-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pako@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pako/-/pako-1.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer",
      "version": "5.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c57be342154dcf9d2fda73dea0eb0da9608b19f8afe238bf81764cdbc8e757074b2711f8985caa82a08a7da2bdcdfd4a51b1bacd39232cecbba2efa348c6ab18"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer@5.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer/-/buffer-5.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer@5.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer/-/buffer-5.0.8.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "https-browserify",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ec06c10e0a34c0f2faf199f7fd7fc78fffd03c73"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/https-browserify@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/https-browserify/-/https-browserify-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/https-browserify@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/https-browserify/-/https-browserify-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-browserify",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "854373c7f5c2315914fc9bfc6bd8238fdda1ec27"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/os-browserify@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-browserify/-/os-browserify-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-browserify@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-browserify/-/os-browserify-0.3.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "outpipe",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "50cf8616365e87e031e29a5ec9339a3da4725fa2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/outpipe@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/outpipe/-/outpipe-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/outpipe@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/outpipe/-/outpipe-1.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-dom",
      "version": "16.1.0",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8bd8a7e6a5b71f63c38a750f0fd6e740aeed2c00fc2e18d843e7d78b79c93af567c4e3b712b1eae913449ca63ba5b8d33edd79e5eef8abb6a5f1e054bb22ed7b"
        }
      ],
      "purl": "pkg:npm/react-dom@16.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-dom/-/react-dom-16.1.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-dom@16.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-dom/-/react-dom-16.1.0.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "react-dom"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "example/index.js",
            "line": 2
          },
          {
            "location": "example/index.js",
            "line": 49
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react-scripts",
      "version": "1.0.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b5fda4071db7d22512c6a259c5ba1820d94838aaf25be082ee8560438ae0b8d2e670f816be79c233c86e0200a02f6caea83774a90be7239b110a673ed13439cf"
        }
      ],
      "purl": "pkg:npm/react-scripts@1.0.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-scripts/-/react-scripts-1.0.17.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-scripts@1.0.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-scripts/-/react-scripts-1.0.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "autoprefixer",
      "version": "7.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0bdcaffd41775fe7894e2ff3bdfc6ec9fc662e26d8ae7b69177aa8258acc790c20509399ad9be9262306d85310dea9e15ad17f6dee2960e341070f796467b7bc"
        }
      ],
      "purl": "pkg:npm/autoprefixer@7.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/autoprefixer/-/autoprefixer-7.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/autoprefixer@7.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/autoprefixer/-/autoprefixer-7.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserslist",
      "version": "2.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc91017034c03680e14872f8e8d78e116e61bd0c3b22df6e0aacde14f421a5ac177e73b09e9bd6e42f7bbe7d5e189ee20a44a0f30594d2760e6c4eddfcdf7923"
        }
      ],
      "purl": "pkg:npm/browserslist@2.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserslist/-/browserslist-2.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserslist@2.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserslist/-/browserslist-2.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caniuse-lite",
      "version": "1.0.30000760",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ec720395742f1c7ec8947fd6dd2604e77a8f98ff"
        }
      ],
      "purl": "pkg:npm/caniuse-lite@1.0.30000760",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30000760.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-lite@1.0.30000760",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caniuse-lite/-/caniuse-lite-1.0.30000760.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "electron-to-chromium",
      "version": "1.3.27",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "78ecb8a399066187bb374eede35d9c70565a803d"
        }
      ],
      "purl": "pkg:npm/electron-to-chromium@1.3.27",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.3.27.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/electron-to-chromium@1.3.27",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/electron-to-chromium/-/electron-to-chromium-1.3.27.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-range",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2d10c06bdfd312ea9777695a4d28439456b75942"
        }
      ],
      "purl": "pkg:npm/normalize-range@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-range/-/normalize-range-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-range@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-range/-/normalize-range-0.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "num2fraction",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6f682b6a027a4e9ddfa4564cd2589d1d4e669ede"
        }
      ],
      "purl": "pkg:npm/num2fraction@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/num2fraction/-/num2fraction-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/num2fraction@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/num2fraction/-/num2fraction-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss",
      "version": "6.0.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "349d73d1ffb5a1f7c281a74f873f83bc69b9324722fa6995e41a83d774bdf76a345e4f5e125c547cf3c5fadda4b07e51ff5ee0cf8c552bc296a1c510e68dd1a2"
        }
      ],
      "purl": "pkg:npm/postcss@6.0.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss/-/postcss-6.0.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss@6.0.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss/-/postcss-6.0.14.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "033e73251d8206e8daa76aea5c668929a3c7c89d08ad48a6bd8357fa7702cbc3c93f896d3864eb1d4228d3ded968bdb331e298a6209da83bd2eb376b4c5a24dd"
        }
      ],
      "purl": "pkg:npm/chalk@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/chalk/-/chalk-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/chalk/-/chalk-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-styles",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36748e98c118b55476255308193cf29d19246b1b62ab5c6714171d403fc39cd0983e810fb1526133df010f26a834e4088bba78a24762dc4dbb78dec641bb14ba"
        }
      ],
      "purl": "pkg:npm/ansi-styles@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-convert",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a319a9c88b0409b24082d7cacf47a3a6ad9e9f9b62dcecf786158c029b2e49df8c02e85d4fcdd18beb178c7e682271f61c34b1ae5450375b35ed203090499c5"
        }
      ],
      "purl": "pkg:npm/color-convert@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-convert/-/color-convert-1.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-name",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a7d0558bd89c42f795dd42328f740831ca53bc25"
        }
      ],
      "purl": "pkg:npm/color-name@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "be7a0de484dec5c5cddf8b3d59125044912f635b"
        }
      ],
      "purl": "pkg:npm/supports-color@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-4.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e8207af1cc7b30d446cc70b734b5e8be18f88d51"
        }
      ],
      "purl": "pkg:npm/has-flag@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-value-parser",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "87f38f9f18f774a4ab4c8a232f5c5ce8872a9d15"
        }
      ],
      "purl": "pkg:npm/postcss-value-parser@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-value-parser/-/postcss-value-parser-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-value-parser@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-value-parser/-/postcss-value-parser-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "core-js",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ae6874dc66937789b80754ff5428df66819ca50b"
        }
      ],
      "purl": "pkg:npm/core-js@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-js/-/core-js-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-js@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-js/-/core-js-2.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator-runtime",
      "version": "0.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fda03490b7916f937d2b47787f0ee8a046c8fb10def83283e3df4442aca01aa792f0ddf1b68d79a74f6e636c63ee2c4ff35b0d3d7bd12e701022a7554ad81bd4"
        }
      ],
      "purl": "pkg:npm/regenerator-runtime@0.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator-runtime@0.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regenerator-runtime/-/regenerator-runtime-0.11.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9acd70851c6d5dfdd93d9282e5edf94a03ff46b5"
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-eslint",
      "version": "7.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2fe2d80126470f5c19442dc757253a897710827"
        }
      ],
      "purl": "pkg:npm/babel-eslint@7.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-eslint/-/babel-eslint-7.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-eslint@7.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-eslint/-/babel-eslint-7.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-jest",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e4a03b13dc10389e140fc645d09ffc4ced301671"
        }
      ],
      "purl": "pkg:npm/babel-jest@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-jest/-/babel-jest-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-jest@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-jest/-/babel-jest-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "babel-plugin-istanbul",
      "version": "4.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6760cdd977f411d3e175bb064f2bc327d99b2b6e"
        }
      ],
      "purl": "pkg:npm/babel-plugin-istanbul@4.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-istanbul/-/babel-plugin-istanbul-4.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-istanbul@4.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-istanbul/-/babel-plugin-istanbul-4.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "find-up",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "45d1b7e506c717ddd482775a2b77920a3c0c57a7"
        }
      ],
      "purl": "pkg:npm/find-up@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "locate-path",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b568b265eec944c6d9c0de9c3dbbbca0354cd8e"
        }
      ],
      "purl": "pkg:npm/locate-path@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/locate-path/-/locate-path-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-locate",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20a0103b222a70c8fd39cc2e580680f3dde5ec43"
        }
      ],
      "purl": "pkg:npm/p-locate@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-locate/-/p-locate-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-limit",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b07ff2d9a5d88bec806035895a2bab66a27988bc"
        }
      ],
      "purl": "pkg:npm/p-limit@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-limit/-/p-limit-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ce0ebeaa5f78cb18925ea7d810d7b59b010fd515"
        }
      ],
      "purl": "pkg:npm/path-exists@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-instrument",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "450997790eeca616abee4eced704cdcd573317d8a02a969e190006f6a4762fe052e0308935323d9f2b519885587afc0ed1b6eafb6097bc99980eecf480caf2c0"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-instrument@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-instrument@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-instrument/-/istanbul-lib-instrument-1.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-lib-coverage",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d3ed6f0e49b3c6a2489f9adca04a9aa520780e63f1137d44b48d9d176682915e5eb0df44587c59d1dc200c2962bcc5c9a84ef3698431ab7d218f92f49e54cde5"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-coverage@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-coverage@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-coverage/-/istanbul-lib-coverage-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "semver",
      "version": "5.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "59f1bf5fdfa801387cd57b65948a3f23c80e898f445d176fd5c41dcb291e5cad7b61c516dc45d4022d93a38a5c1fa9d9b493ebed93a933938cc962599bef11b2"
        }
      ],
      "purl": "pkg:npm/semver@5.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-5.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-5.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-exclude",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "df9f80b2bb24dd71c90c181ffd54457b13e0877532113bfc2009ff2d14e2663572eab8cf56a74493c749709601ce5d70d17089338f25bd3cbc49f12c0964b89c"
        }
      ],
      "purl": "pkg:npm/test-exclude@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/test-exclude/-/test-exclude-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-exclude@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/test-exclude/-/test-exclude-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "arrify",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "898508da2226f380df904728456849c1501a4b0d"
        }
      ],
      "purl": "pkg:npm/arrify@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/arrify/-/arrify-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arrify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/arrify/-/arrify-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg-up",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9d63c13276c065918d57f002a57f40a1b643fb02"
        }
      ],
      "purl": "pkg:npm/read-pkg-up@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg-up@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-up",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6b2e9822b1a2ce0a60ab64d610eccad53cb24d0f"
        }
      ],
      "purl": "pkg:npm/find-up@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-up@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-exists",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0feb6c64f0fc518d9a754dd5efb62c7022761f4b"
        }
      ],
      "purl": "pkg:npm/path-exists@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie-promise",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2135d6dfa7a358c069ac9b178776288228450ffa"
        }
      ],
      "purl": "pkg:npm/pinkie-promise@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pinkie-promise@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "72556b80cfa0d48a974e80e77248e80ed4f7f870"
        }
      ],
      "purl": "pkg:npm/pinkie@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pinkie@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5ffaa5ecd29cb31c0474bca7d756b6bb29e3f28"
        }
      ],
      "purl": "pkg:npm/read-pkg@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg/-/read-pkg-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg/-/read-pkg-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-json-file",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "956905708d58b4bab4c2261b04f59f31c99374c0"
        }
      ],
      "purl": "pkg:npm/load-json-file@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/load-json-file@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-json",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f480f40434ef80741f8469099f8dea18f55a4dc9"
        }
      ],
      "purl": "pkg:npm/parse-json@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-json@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-ex",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f855a86ce61adc4e8621c3cda21e7a7612c3a8dc"
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-ex@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-arrayish",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "77c99840527aa8ecb1a8ba697b80645a7a926a9d"
        }
      ],
      "purl": "pkg:npm/is-arrayish@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-arrayish@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed141a6ac043a849ea588498e7dca8b15330e90c"
        }
      ],
      "purl": "pkg:npm/pify@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6219a85616520491f35788bdbf1447a99c7e6b0e"
        }
      ],
      "purl": "pkg:npm/strip-bom@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-utf8",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b0da1442104d1b336340e80797e865cf39f7d72"
        }
      ],
      "purl": "pkg:npm/is-utf8@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-utf8@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-package-data",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f638d415b4cf7c4cb747f69dff6a0d6cab56f47828be5e4ed45bc558a90a6e5357a0dfcea2eebef7e28aa213cad7761cdff4f2ba7c96849a7a82f44d47f3cf03"
        }
      ],
      "purl": "pkg:npm/normalize-package-data@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-package-data@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hosted-git-info",
      "version": "2.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a4d81b5114ae69bf7429b4eabd13ecb1e693c4e2426410f46bbb7e85a48ddf7a623fd7023389740aa7730227f6854aa6ef5e94a2f281d913a689a6c600a557ca"
        }
      ],
      "purl": "pkg:npm/hosted-git-info@2.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-builtin-module",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "540572d34f7ac3119f8f76c30cbc1b1e037affbe"
        }
      ],
      "purl": "pkg:npm/is-builtin-module@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-builtin-module/-/is-builtin-module-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-builtin-module@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-builtin-module/-/is-builtin-module-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "builtin-modules",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "270f076c5a72c02f5b65a47df94c5fe3a278892f"
        }
      ],
      "purl": "pkg:npm/builtin-modules@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/builtin-modules@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "validate-npm-package-license",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2804babe712ad3379459acfbe24746ab2c303fbc"
        }
      ],
      "purl": "pkg:npm/validate-npm-package-license@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/validate-npm-package-license@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-correct",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b3073d933ff51f3912f03ac5519498a4150db40"
        }
      ],
      "purl": "pkg:npm/spdx-correct@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-correct@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-ids",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c9df7a3424594ade6bd11900d596696dc06bac57"
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-expression-parse",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9bdf2f20e1f40ed447fbe273266191fced51626c"
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-type",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59c44f7ee491da704da415da5a4070ba4f8fe441"
        }
      ],
      "purl": "pkg:npm/path-type@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-type/-/path-type-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-type@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-type/-/path-type-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-main-filename",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "97f717b69d48784f5f526a6c5aa8ffdda055a4d1"
        }
      ],
      "purl": "pkg:npm/require-main-filename@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-main-filename@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-jest",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cbacaadecb5d689ca1e1de1360ebfc66862c178a"
        }
      ],
      "purl": "pkg:npm/babel-preset-jest@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-jest/-/babel-preset-jest-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-jest@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-jest/-/babel-preset-jest-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "babel-plugin-jest-hoist",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "afedc853bd3f8dc3548ea671fbe69d03cc2c1767"
        }
      ],
      "purl": "pkg:npm/babel-plugin-jest-hoist@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-jest-hoist/-/babel-plugin-jest-hoist-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-jest-hoist@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-jest-hoist/-/babel-plugin-jest-hoist-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "babel-loader",
      "version": "7.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d1c2515b20d01ec834ada8ae8377962e63493962ecd052f973d996a6b97ad79b16afde936a7bdbdf278d36fb61be3a6949497c423a907a533d0834ced141ed8"
        }
      ],
      "purl": "pkg:npm/babel-loader@7.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-loader/-/babel-loader-7.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-loader@7.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-loader/-/babel-loader-7.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-cache-dir",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9288e3e9e3cc3748717d39eade17cf71fc30ee6f"
        }
      ],
      "purl": "pkg:npm/find-cache-dir@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-cache-dir/-/find-cache-dir-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-cache-dir@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-cache-dir/-/find-cache-dir-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commondir",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ddd800da0c66127393cca5950ea968a3aaf1253b"
        }
      ],
      "purl": "pkg:npm/commondir@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commondir@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commondir/-/commondir-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "make-dir",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0f92e8b8c0b27baf1be67d4becf3bb24a046b19aed2109402917c9e89f3a65eeafff156a7dceef16eb549ccf8b1dfe4522a83c6f521b686a6d9e7c3ca207370"
        }
      ],
      "purl": "pkg:npm/make-dir@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/make-dir/-/make-dir-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-dir@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/make-dir/-/make-dir-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e5a4acd2c101fdf3d9a4d07f0dbc4db49dd28176"
        }
      ],
      "purl": "pkg:npm/pify@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pify/-/pify-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkg-dir",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6d5d1109e19d63edf428e0bd57e12777615334b"
        }
      ],
      "purl": "pkg:npm/pkg-dir@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkg-dir@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loader-utils",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c98aef488bcceda2ffb5e2de646d6a754429f5cd"
        }
      ],
      "purl": "pkg:npm/loader-utils@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loader-utils/-/loader-utils-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loader-utils@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loader-utils/-/loader-utils-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "big.js",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa137f661d83d3c331eb9a59ff88396ec98d89952e0a10e241f4d443ba89af8fe4ba8a42afcf3166c017bfa981a1912c508e0eb861e55f9f6a13de0ada6316f1"
        }
      ],
      "purl": "pkg:npm/big.js@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/big.js/-/big.js-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/big.js@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/big.js/-/big.js-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emojis-list",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4daa4d9db00f9819880c79fa457ae5b09a1fd389"
        }
      ],
      "purl": "pkg:npm/emojis-list@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/emojis-list/-/emojis-list-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emojis-list@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/emojis-list/-/emojis-list-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-react-app",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c401e568cf12f37ed2e5d220d9d1de63ae67dba37ca880e37f788e00b040c8b3ca7a596fadf660d152c8f9975d9ba8f38b4a254e125090dd0c868cc732062c0"
        }
      ],
      "purl": "pkg:npm/babel-preset-react-app@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-react-app/-/babel-preset-react-app-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-react-app@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-react-app/-/babel-preset-react-app-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-dynamic-import-node",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b537d96ccf447308f718ae749a73eb5298a74f0038c5798389018293f68161bbe5d7e5fc62a95d2bceb0675a30549e2ede6aca6d19573266bcd09d7cab089a4d"
        }
      ],
      "purl": "pkg:npm/babel-plugin-dynamic-import-node@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-dynamic-import-node/-/babel-plugin-dynamic-import-node-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-dynamic-import-node@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-dynamic-import-node/-/babel-plugin-dynamic-import-node-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-plugin-transform-react-constant-elements",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2f119bf4d2cdd45eb9baaae574053c604f6147dd"
        }
      ],
      "purl": "pkg:npm/babel-plugin-transform-react-constant-elements@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-plugin-transform-react-constant-elements/-/babel-plugin-transform-react-constant-elements-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-plugin-transform-react-constant-elements@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-plugin-transform-react-constant-elements/-/babel-plugin-transform-react-constant-elements-6.23.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "babel-preset-env",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5ba548c80e8287d78f308ed5a6d367db004ce9d6c6d1e4b3db91c488be349d05c2b1719319949366ed486a9f9c8f74344b96bb4fdfb9dbd97fe4192f77e69f34"
        }
      ],
      "purl": "pkg:npm/babel-preset-env@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/babel-preset-env/-/babel-preset-env-1.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/babel-preset-env@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/babel-preset-env/-/babel-preset-env-1.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "case-sensitive-paths-webpack-plugin",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d29ced8c1f124bf6f53846fb3f5894731fdc909"
        }
      ],
      "purl": "pkg:npm/case-sensitive-paths-webpack-plugin@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/case-sensitive-paths-webpack-plugin/-/case-sensitive-paths-webpack-plugin-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/case-sensitive-paths-webpack-plugin@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/case-sensitive-paths-webpack-plugin/-/case-sensitive-paths-webpack-plugin-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-loader",
      "version": "0.28.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1b13296b1f1afd581c7d1ad5cb48170fac8b77978f61b5d7ff9cc6813558a78c17b499254bc67655a500ac981cfff7fafc3ce297b05a24e6dd4aff1e28a08f82"
        }
      ],
      "purl": "pkg:npm/css-loader@0.28.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-loader/-/css-loader-0.28.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-loader@0.28.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-loader/-/css-loader-0.28.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-selector-tokenizer",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e6988474ae8c953477bf5e7efecfceccd9cf4c86"
        }
      ],
      "purl": "pkg:npm/css-selector-tokenizer@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-selector-tokenizer/-/css-selector-tokenizer-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-selector-tokenizer@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-selector-tokenizer/-/css-selector-tokenizer-0.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cssesc",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c814903e45623371a0477b40109aaafbeeaddbb4"
        }
      ],
      "purl": "pkg:npm/cssesc@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cssesc/-/cssesc-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssesc@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cssesc/-/cssesc-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fastparse",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d1e2643b38a94d7583b479060e6c4affc94071f8"
        }
      ],
      "purl": "pkg:npm/fastparse@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fastparse/-/fastparse-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fastparse@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fastparse/-/fastparse-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regexpu-core",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "86a763f58ee4d7c2f6b102e4764050de7ed90c6b"
        }
      ],
      "purl": "pkg:npm/regexpu-core@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/regexpu-core/-/regexpu-core-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regexpu-core@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/regexpu-core/-/regexpu-core-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cssnano",
      "version": "3.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4f38f6cea2b9b17fa01490f23f1dc68ea65c1c38"
        }
      ],
      "purl": "pkg:npm/cssnano@3.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cssnano/-/cssnano-3.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssnano@3.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cssnano/-/cssnano-3.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "autoprefixer",
      "version": "6.7.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1dbd1c835658e35ce3f9984099db00585c782014"
        }
      ],
      "purl": "pkg:npm/autoprefixer@6.7.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/autoprefixer/-/autoprefixer-6.7.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/autoprefixer@6.7.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/autoprefixer/-/autoprefixer-6.7.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browserslist",
      "version": "1.7.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0bd76704258be829b2398bb50e4b62d1a166b0b9"
        }
      ],
      "purl": "pkg:npm/browserslist@1.7.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/browserslist/-/browserslist-1.7.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/browserslist@1.7.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/browserslist/-/browserslist-1.7.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caniuse-db",
      "version": "1.0.30000760",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3ea29473eb78a6ccb09f2eb73ac9e1debfec528d"
        }
      ],
      "purl": "pkg:npm/caniuse-db@1.0.30000760",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caniuse-db/-/caniuse-db-1.0.30000760.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-db@1.0.30000760",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caniuse-db/-/caniuse-db-1.0.30000760.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss",
      "version": "5.2.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ceb5234517b56e95cab17d6a0093498ea655884ad5bb212431346bc2ee2e778b1b4ed201466b5a603ac799c1a09ab6ec5b73077e6b487febc9ba68109fe3eb5e"
        }
      ],
      "purl": "pkg:npm/postcss@5.2.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss/-/postcss-5.2.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss@5.2.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss/-/postcss-5.2.18.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-base64",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "636ffe0e77c92574f5fc50b051e6d484b59bdd08a1c62482e36f9cb472c6a20996da33d8e8b09aa4c74565746f54fdb3eaac8a5bbb3aaa7704ffd812a99880af"
        }
      ],
      "purl": "pkg:npm/js-base64@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-base64/-/js-base64-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-base64@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-base64/-/js-base64-2.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "supports-color",
      "version": "3.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "65ac0504b3954171d8a64946b2ae3cbb8a5f54f6"
        }
      ],
      "purl": "pkg:npm/supports-color@3.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-3.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@3.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/supports-color/-/supports-color-3.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "has-flag",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9d9e793165ce017a00f00418c43f942a7b1d11fa"
        }
      ],
      "purl": "pkg:npm/has-flag@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decamelize",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6534d15148269b20352e7bee26f501f9a191290"
        }
      ],
      "purl": "pkg:npm/decamelize@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-calc",
      "version": "5.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "77bae7ca928ad85716e2fda42f261bf7c1d65b5e"
        }
      ],
      "purl": "pkg:npm/postcss-calc@5.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-calc/-/postcss-calc-5.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-calc@5.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-calc/-/postcss-calc-5.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-message-helpers",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a4f2f4fab6e4fe002f0aed000478cdf52f9ba60e"
        }
      ],
      "purl": "pkg:npm/postcss-message-helpers@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-message-helpers/-/postcss-message-helpers-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-message-helpers@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-message-helpers/-/postcss-message-helpers-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reduce-css-calc",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "747c914e049614a4c9cfbba629871ad1d2927716"
        }
      ],
      "purl": "pkg:npm/reduce-css-calc@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/reduce-css-calc/-/reduce-css-calc-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/reduce-css-calc@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/reduce-css-calc/-/reduce-css-calc-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "math-expression-evaluator",
      "version": "1.2.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de819fdbcd84dccd8fae59c6aeb79615b9d266ac"
        }
      ],
      "purl": "pkg:npm/math-expression-evaluator@1.2.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/math-expression-evaluator/-/math-expression-evaluator-1.2.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/math-expression-evaluator@1.2.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/math-expression-evaluator/-/math-expression-evaluator-1.2.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "reduce-function-call",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5a200bf92e0e37751752fe45b0ab330fd4b6be99"
        }
      ],
      "purl": "pkg:npm/reduce-function-call@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/reduce-function-call/-/reduce-function-call-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/reduce-function-call@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/reduce-function-call/-/reduce-function-call-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-colormin",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6631417d5f0e909a3d7ec26b24c8a8d1e4f96e4b"
        }
      ],
      "purl": "pkg:npm/postcss-colormin@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-colormin/-/postcss-colormin-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-colormin@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-colormin/-/postcss-colormin-2.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colormin",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ea2f7420a72b96881a38aae59ec124a6f7298133"
        }
      ],
      "purl": "pkg:npm/colormin@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colormin/-/colormin-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colormin@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colormin/-/colormin-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color",
      "version": "0.11.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d7b5c74fb65e841cd48792ad1ed5e07b904d764"
        }
      ],
      "purl": "pkg:npm/color@0.11.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color/-/color-0.11.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color@0.11.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color/-/color-0.11.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clone",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "298d7e2231660f40c003c2ed3140decf3f53085f"
        }
      ],
      "purl": "pkg:npm/clone@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clone/-/clone-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clone@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clone/-/clone-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "color-string",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "27d46fb67025c5c2fa25993bfbf579e47841b991"
        }
      ],
      "purl": "pkg:npm/color-string@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/color-string/-/color-string-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-string@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/color-string/-/color-string-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-color-names",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "808adc2e79cf84738069b646cb20ec27beb629e0"
        }
      ],
      "purl": "pkg:npm/css-color-names@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-color-names/-/css-color-names-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-color-names@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-color-names/-/css-color-names-0.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-convert-values",
      "version": "2.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bbd8593c5c1fd2e3d1c322bb925dcae8dae4d62d"
        }
      ],
      "purl": "pkg:npm/postcss-convert-values@2.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-convert-values/-/postcss-convert-values-2.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-convert-values@2.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-convert-values/-/postcss-convert-values-2.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-discard-comments",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "befe89fafd5b3dace5ccce51b76b81514be00e3d"
        }
      ],
      "purl": "pkg:npm/postcss-discard-comments@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-discard-comments/-/postcss-discard-comments-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-discard-comments@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-discard-comments/-/postcss-discard-comments-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-discard-duplicates",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b9abf27b88ac188158a5eb12abcae20263b91932"
        }
      ],
      "purl": "pkg:npm/postcss-discard-duplicates@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-discard-duplicates/-/postcss-discard-duplicates-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-discard-duplicates@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-discard-duplicates/-/postcss-discard-duplicates-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-discard-empty",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d2b4bd9d5ced5ebd8dcade7640c7d7cd7f4f92b5"
        }
      ],
      "purl": "pkg:npm/postcss-discard-empty@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-discard-empty/-/postcss-discard-empty-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-discard-empty@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-discard-empty/-/postcss-discard-empty-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-discard-overridden",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8b1eaf554f686fb288cd874c55667b0aa3668d58"
        }
      ],
      "purl": "pkg:npm/postcss-discard-overridden@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-discard-overridden/-/postcss-discard-overridden-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-discard-overridden@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-discard-overridden/-/postcss-discard-overridden-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-discard-unused",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bce30b2cc591ffc634322b5fb3464b6d934f4433"
        }
      ],
      "purl": "pkg:npm/postcss-discard-unused@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-discard-unused/-/postcss-discard-unused-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-discard-unused@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-discard-unused/-/postcss-discard-unused-2.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uniqs",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ffede4b36b25290696e6e165d4a59edb998e6b02"
        }
      ],
      "purl": "pkg:npm/uniqs@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uniqs/-/uniqs-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uniqs@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uniqs/-/uniqs-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-filter-plugins",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d85862534d735ac420e4a85806e1f5d4286d84c"
        }
      ],
      "purl": "pkg:npm/postcss-filter-plugins@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-filter-plugins/-/postcss-filter-plugins-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-filter-plugins@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-filter-plugins/-/postcss-filter-plugins-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uniqid",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "89220ddf6b751ae52b5f72484863528596bb84c1"
        }
      ],
      "purl": "pkg:npm/uniqid@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uniqid/-/uniqid-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uniqid@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uniqid/-/uniqid-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "macaddress",
      "version": "0.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5904dc537c39ec6dbefeae902327135fa8511f12"
        }
      ],
      "purl": "pkg:npm/macaddress@0.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/macaddress/-/macaddress-0.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/macaddress@0.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/macaddress/-/macaddress-0.2.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-merge-idents",
      "version": "2.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4c5530313c08e1d5b3bbf3d2bbc747e278eea270"
        }
      ],
      "purl": "pkg:npm/postcss-merge-idents@2.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-merge-idents/-/postcss-merge-idents-2.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-merge-idents@2.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-merge-idents/-/postcss-merge-idents-2.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-merge-longhand",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "23d90cd127b0a77994915332739034a1a4f3d658"
        }
      ],
      "purl": "pkg:npm/postcss-merge-longhand@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-merge-longhand/-/postcss-merge-longhand-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-merge-longhand@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-merge-longhand/-/postcss-merge-longhand-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-merge-rules",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d1df5dfaa7b1acc3be553f0e9e10e87c61b5f721"
        }
      ],
      "purl": "pkg:npm/postcss-merge-rules@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-merge-rules/-/postcss-merge-rules-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-merge-rules@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-merge-rules/-/postcss-merge-rules-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caniuse-api",
      "version": "1.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b534e7c734c4f81ec5fbe8aca2ad24354b962c6c"
        }
      ],
      "purl": "pkg:npm/caniuse-api@1.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caniuse-api/-/caniuse-api-1.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-api@1.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caniuse-api/-/caniuse-api-1.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.memoize",
      "version": "4.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bcc6c49a42a2840ed997f323eada5ecd182e0bfe"
        }
      ],
      "purl": "pkg:npm/lodash.memoize@4.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.memoize/-/lodash.memoize-4.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.memoize@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.memoize/-/lodash.memoize-4.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.uniq",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d0225373aeb652adc1bc82e4945339a842754773"
        }
      ],
      "purl": "pkg:npm/lodash.uniq@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.uniq/-/lodash.uniq-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.uniq@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.uniq/-/lodash.uniq-4.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-selector-parser",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f9437788606c3c9acee16ffe8d8b16297f27bb90"
        }
      ],
      "purl": "pkg:npm/postcss-selector-parser@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-selector-parser@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-selector-parser/-/postcss-selector-parser-2.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "flatten",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dae46a9d78fbe25292258cc1e780a41d95c03782"
        }
      ],
      "purl": "pkg:npm/flatten@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flatten/-/flatten-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flatten@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flatten/-/flatten-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indexes-of",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f30f716c8e2bd346c7b67d3df3915566a7c05607"
        }
      ],
      "purl": "pkg:npm/indexes-of@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/indexes-of/-/indexes-of-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/indexes-of@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/indexes-of/-/indexes-of-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uniq",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b31c5ae8254844a3a8281541ce2b04b865a734ff"
        }
      ],
      "purl": "pkg:npm/uniq@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uniq/-/uniq-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uniq@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uniq/-/uniq-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "vendors",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "37ad73c8ee417fb3d580e785312307d274847f22"
        }
      ],
      "purl": "pkg:npm/vendors@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/vendors/-/vendors-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/vendors@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/vendors/-/vendors-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-minify-font-values",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b58edb56641eba7c8474ab3526cafd7bbdecb69"
        }
      ],
      "purl": "pkg:npm/postcss-minify-font-values@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-minify-font-values/-/postcss-minify-font-values-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-minify-font-values@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-minify-font-values/-/postcss-minify-font-values-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-minify-gradients",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5dbda11373703f83cfb4a3ea3881d8d75ff5e6e1"
        }
      ],
      "purl": "pkg:npm/postcss-minify-gradients@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-minify-gradients/-/postcss-minify-gradients-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-minify-gradients@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-minify-gradients/-/postcss-minify-gradients-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-minify-params",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ad2ce071373b943b3d930a3fa59a358c28d6f1f3"
        }
      ],
      "purl": "pkg:npm/postcss-minify-params@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-minify-params/-/postcss-minify-params-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-minify-params@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-minify-params/-/postcss-minify-params-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "alphanum-sort",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "97a1119649b211ad33691d9f9f486a8ec9fbe0a3"
        }
      ],
      "purl": "pkg:npm/alphanum-sort@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/alphanum-sort/-/alphanum-sort-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/alphanum-sort@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/alphanum-sort/-/alphanum-sort-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-minify-selectors",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2c6a98c0072cf91b932d1a496508114311735bf"
        }
      ],
      "purl": "pkg:npm/postcss-minify-selectors@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-minify-selectors/-/postcss-minify-selectors-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-minify-selectors@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-minify-selectors/-/postcss-minify-selectors-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-normalize-charset",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ef9ee71212d7fe759c78ed162f61ed62b5cb93f1"
        }
      ],
      "purl": "pkg:npm/postcss-normalize-charset@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-normalize-charset/-/postcss-normalize-charset-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-normalize-charset@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-normalize-charset/-/postcss-normalize-charset-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-normalize-url",
      "version": "3.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "108f74b3f2fcdaf891a2ffa3ea4592279fc78222"
        }
      ],
      "purl": "pkg:npm/postcss-normalize-url@3.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-normalize-url/-/postcss-normalize-url-3.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-normalize-url@3.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-normalize-url/-/postcss-normalize-url-3.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-absolute-url",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "50530dfb84fcc9aa7dbe7852e83a37b93b9f2aa6"
        }
      ],
      "purl": "pkg:npm/is-absolute-url@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-absolute-url/-/is-absolute-url-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-absolute-url@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-absolute-url/-/is-absolute-url-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalize-url",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2cc0d66b31ea23036458436e3620d85954c66c3c"
        }
      ],
      "purl": "pkg:npm/normalize-url@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalize-url/-/normalize-url-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-url@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalize-url/-/normalize-url-1.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prepend-http",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d4f4562b0ce3696e41ac52d0e002e57a635dc6dc"
        }
      ],
      "purl": "pkg:npm/prepend-http@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prepend-http/-/prepend-http-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prepend-http@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prepend-http/-/prepend-http-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "query-string",
      "version": "4.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bbb693b9ca915c232515b228b1a02b609043dbeb"
        }
      ],
      "purl": "pkg:npm/query-string@4.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/query-string/-/query-string-4.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/query-string@4.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/query-string/-/query-string-4.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strict-uri-encode",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "279b225df1d582b1f54e65addd4352e18faa0713"
        }
      ],
      "purl": "pkg:npm/strict-uri-encode@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strict-uri-encode/-/strict-uri-encode-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strict-uri-encode@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strict-uri-encode/-/strict-uri-encode-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sort-keys",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "441b6d4d346798f1b4e49e8920adfba0e543f9ad"
        }
      ],
      "purl": "pkg:npm/sort-keys@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sort-keys/-/sort-keys-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sort-keys@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sort-keys/-/sort-keys-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-plain-obj",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "71a50c8429dfca773c92a390a4a03b39fcd51d3e"
        }
      ],
      "purl": "pkg:npm/is-plain-obj@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-obj@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-ordered-values",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eec6c2a67b6c412a8db2042e77fe8da43f95c11d"
        }
      ],
      "purl": "pkg:npm/postcss-ordered-values@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-ordered-values/-/postcss-ordered-values-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-ordered-values@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-ordered-values/-/postcss-ordered-values-2.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-reduce-idents",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c2c6d20cc958284f6abfbe63f7609bf409059ad3"
        }
      ],
      "purl": "pkg:npm/postcss-reduce-idents@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-reduce-idents/-/postcss-reduce-idents-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-reduce-idents@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-reduce-idents/-/postcss-reduce-idents-2.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-reduce-initial",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "68f80695f045d08263a879ad240df8dd64f644ea"
        }
      ],
      "purl": "pkg:npm/postcss-reduce-initial@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-reduce-initial/-/postcss-reduce-initial-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-reduce-initial@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-reduce-initial/-/postcss-reduce-initial-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-reduce-transforms",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ff76f4d8212437b31c298a42d2e1444025771ae1"
        }
      ],
      "purl": "pkg:npm/postcss-reduce-transforms@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-reduce-transforms/-/postcss-reduce-transforms-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-reduce-transforms@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-reduce-transforms/-/postcss-reduce-transforms-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-svgo",
      "version": "2.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b6df18aa613b666e133f08adb5219c2684ac108d"
        }
      ],
      "purl": "pkg:npm/postcss-svgo@2.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-svgo/-/postcss-svgo-2.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-svgo@2.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-svgo/-/postcss-svgo-2.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-svg",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cf61090da0d9efbcab8722deba6f032208dbb0e9"
        }
      ],
      "purl": "pkg:npm/is-svg@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-svg/-/is-svg-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-svg@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-svg/-/is-svg-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-comment-regex",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "668b93776eaae55ebde8f3ad464b307a4963625e"
        }
      ],
      "purl": "pkg:npm/html-comment-regex@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-comment-regex/-/html-comment-regex-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-comment-regex@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-comment-regex/-/html-comment-regex-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "svgo",
      "version": "0.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9f5772413952135c6fefbf40afe6a4faa88b4bb5"
        }
      ],
      "purl": "pkg:npm/svgo@0.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/svgo/-/svgo-0.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/svgo@0.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/svgo/-/svgo-0.7.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "coa",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a9ef153660d6a86a8bdec0289a5c684d217432fd"
        }
      ],
      "purl": "pkg:npm/coa@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/coa/-/coa-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/coa@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/coa/-/coa-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7e32f75b41381291d04611f1bf14109ac00651d7"
        }
      ],
      "purl": "pkg:npm/q@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/q/-/q-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/q/-/q-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "colors",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "168a4701756b6a7f51a12ce0c97bfa28c084ed63"
        }
      ],
      "purl": "pkg:npm/colors@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/colors/-/colors-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/colors@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/colors/-/colors-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "csso",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ddd52c587033f49e94b71fc55569f252e8ff5f85"
        }
      ],
      "purl": "pkg:npm/csso@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/csso/-/csso-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/csso@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/csso/-/csso-2.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clap",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e02a0bfc0de17fdd15dd52048deba14af9461441caccecfe59f73621565cf85694814d1941a7c94cfe3d7ef9d42e2a4e3dc01faa1c88d9dbb04329eceb1aa360"
        }
      ],
      "purl": "pkg:npm/clap@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clap/-/clap-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clap@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clap/-/clap-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5c967ddd837a9bfdca5f2de84253abe8a1c03b80"
        }
      ],
      "purl": "pkg:npm/js-yaml@3.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "1.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
        }
      ],
      "purl": "pkg:npm/argparse@1.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/argparse@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/argparse/-/argparse-1.0.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sprintf-js",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "04e6926f662895354f3dd015203633b857297e2c"
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sprintf-js@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "2.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "96e3b70d5779f6ad49cd032673d1c312767ba581"
        }
      ],
      "purl": "pkg:npm/esprima@2.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-2.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@2.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-2.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sax",
      "version": "1.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "36a543bfd4e900d523166d0df2e3391b12f7e9480a8bdfdab59c3ec7b6059d0f1c9301462ab978c57e325adadecb75099b99cfd6451b9d880ba29a963524615b"
        }
      ],
      "purl": "pkg:npm/sax@1.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/sax@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sax/-/sax-1.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "whet.extend",
      "version": "0.9.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f877d5bf648c97e5aa542fadc16d6a259b9c11a1"
        }
      ],
      "purl": "pkg:npm/whet.extend@0.9.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whet.extend/-/whet.extend-0.9.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whet.extend@0.9.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whet.extend/-/whet.extend-0.9.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-unique-selectors",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "981d57d29ddcb33e7b1dfe1fd43b8649f933ca1d"
        }
      ],
      "purl": "pkg:npm/postcss-unique-selectors@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-unique-selectors/-/postcss-unique-selectors-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-unique-selectors@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-unique-selectors/-/postcss-unique-selectors-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-zindex",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d2109ddc055b91af67fc4cb3b025946639d2af22"
        }
      ],
      "purl": "pkg:npm/postcss-zindex@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-zindex/-/postcss-zindex-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-zindex@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-zindex/-/postcss-zindex-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "icss-utils",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "83f0a0ec378bf3246178b6c2ad9136f135b1c962"
        }
      ],
      "purl": "pkg:npm/icss-utils@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/icss-utils/-/icss-utils-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/icss-utils@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/icss-utils/-/icss-utils-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.camelcase",
      "version": "4.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b28aa6288a2b9fc651035c7711f65ab6190331a6"
        }
      ],
      "purl": "pkg:npm/lodash.camelcase@4.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.camelcase@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.camelcase/-/lodash.camelcase-4.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-modules-extract-imports",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b614c9720be6816eaee35fb3a5faa1dba6a05ddb"
        }
      ],
      "purl": "pkg:npm/postcss-modules-extract-imports@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-modules-extract-imports/-/postcss-modules-extract-imports-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-modules-extract-imports@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-modules-extract-imports/-/postcss-modules-extract-imports-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-modules-local-by-default",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f7d80c398c5a393fa7964466bd19500a7d61c069"
        }
      ],
      "purl": "pkg:npm/postcss-modules-local-by-default@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-modules-local-by-default/-/postcss-modules-local-by-default-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-modules-local-by-default@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-modules-local-by-default/-/postcss-modules-local-by-default-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-modules-scope",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d6ea64994c79f97b62a72b426fbe6056a194bb90"
        }
      ],
      "purl": "pkg:npm/postcss-modules-scope@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-modules-scope/-/postcss-modules-scope-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-modules-scope@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-modules-scope/-/postcss-modules-scope-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-modules-values",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ecffa9d7e192518389f42ad0e83f72aec456ea20"
        }
      ],
      "purl": "pkg:npm/postcss-modules-values@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-modules-values/-/postcss-modules-values-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-modules-values@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-modules-values/-/postcss-modules-values-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "icss-replace-symbols",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "06ea6f83679a7749e386cfe1fe812ae5db223ded"
        }
      ],
      "purl": "pkg:npm/icss-replace-symbols@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/icss-replace-symbols/-/icss-replace-symbols-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/icss-replace-symbols@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/icss-replace-symbols/-/icss-replace-symbols-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-list-map",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "236526b89491aff4fc8e2b2244e2d4dc0de5b6bfacc299e24a634f238325dd9097ead5670ecb99ccaec5da19798d3a9b64158210a963e4745088f1315cb804f0"
        }
      ],
      "purl": "pkg:npm/source-list-map@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-list-map/-/source-list-map-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-list-map@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-list-map/-/source-list-map-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dotenv",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "864ef1379aced55ce6f95debecdce179f7a0cd1d"
        }
      ],
      "purl": "pkg:npm/dotenv@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dotenv/-/dotenv-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dotenv@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dotenv/-/dotenv-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint",
      "version": "4.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "30c565f0ffdd61415912fa252fc3d8b7ba9ce4b35d4b697085eabd0586b9634ec56e585c66a172694aa54bc4d6e5021319ec76d6d5782e4d1addf2bc96c24890"
        }
      ],
      "purl": "pkg:npm/eslint@4.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint/-/eslint-4.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint@4.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint/-/eslint-4.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv",
      "version": "5.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4414ff74a50879c208ee5fdc826e32c303549eda"
        }
      ],
      "purl": "pkg:npm/ajv@5.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv/-/ajv-5.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv/-/ajv-5.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-deep-equal",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "96256a3bc975595eb36d82e9929d060d893439ff"
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-json-stable-stringify",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d5142c0caee6b1189f87d3a76111064f86c8bbf2"
        }
      ],
      "purl": "pkg:npm/fast-json-stable-stringify@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-json-stable-stringify@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-schema-traverse",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "349a6d44c53a51de89b40805c5d5e59b417d3340"
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "concat-stream",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0aac662fd52be78964d5532f694784e70110acf7"
        }
      ],
      "purl": "pkg:npm/concat-stream@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-stream@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-spawn",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e8bd0efee58fcff6f8f94510a0a554bbfa235449"
        }
      ],
      "purl": "pkg:npm/cross-spawn@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ab8b297b82937ec012d525072ced30cfc422c9fd7ebcc2008294588a81580cc36a29f1d06e0f805431f78b87efa65ef5fcfd4bd1d065f9f422f8fdfb5187f47b"
        }
      ],
      "purl": "pkg:npm/lru-cache@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pseudomap",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f052a28da70e618917ef0a8ac34c1ae5a68286b3"
        }
      ],
      "purl": "pkg:npm/pseudomap@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pseudomap@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yallist",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1c11f9218f076089a47dd512f93c6699a6a81d52"
        }
      ],
      "purl": "pkg:npm/yallist@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yallist/-/yallist-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yallist@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yallist/-/yallist-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-command",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "44aac65b695b03398968c39f363fee5deafdf1ea"
        }
      ],
      "purl": "pkg:npm/shebang-command@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shebang-regex",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da42f49740c0b42db2ca9728571cb190c98efea3"
        }
      ],
      "purl": "pkg:npm/shebang-regex@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c5c269a2975a993b98e5db82fca9d34cd06b68f2b9e18c297a73f8973c54f07f751ae756a45bf7f2ed022a37251355a2d841f6103cf92d170770a6c2233a86ca"
        }
      ],
      "purl": "pkg:npm/which@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which/-/which-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which/-/which-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e8fbf374dc556ff8947a10dcb0572d633f2cfa10"
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "397f17a8feffd5af5caa4c58c36c97b2cd797f6e8d2960690d741dd3fb8afca3ea7508716cf6bdf78867ce3704d95a90a43b257f9e7bdb770a3d43864a6318de"
        }
      ],
      "purl": "pkg:npm/debug@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/debug/-/debug-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/debug/-/debug-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "doctrine",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c73d8d2909d22291e1a007a395804da8b665fe63"
        }
      ],
      "purl": "pkg:npm/doctrine@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/doctrine/-/doctrine-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/doctrine@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/doctrine/-/doctrine-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-scope",
      "version": "3.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d63c3edfda02e06e01a452ad88caacc7cdcb6e8"
        }
      ],
      "purl": "pkg:npm/eslint-scope@3.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-3.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-scope@3.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-scope/-/eslint-scope-3.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esrecurse",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fa9568d98d3823f9a41d91e902dcab9ea6e5b163"
        }
      ],
      "purl": "pkg:npm/esrecurse@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esrecurse@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0dee3fed31fcd469618ce7342099fc1afa0bdb13"
        }
      ],
      "purl": "pkg:npm/estraverse@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/estraverse/-/estraverse-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "espree",
      "version": "3.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b1a74a798c1a47f689decb42d8276f817bb54f5e9375837eab00a97166cc9c627cb34ccd59e9b3aef6f619b0f83a1989fdfc29263b9d4e10252e86c66d665b09"
        }
      ],
      "purl": "pkg:npm/espree@3.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/espree/-/espree-3.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/espree@3.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/espree/-/espree-3.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c6d2eedce0bcbedd09245b5f15f8d44337ee1b5877659f7d0d2f564bd80bc56599907bf05fa29602b6084228a5415127ad67840a732034a58ebfe06c3c3eff3"
        }
      ],
      "purl": "pkg:npm/acorn@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-5.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-jsx",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "afdf9488fb1ecefc8348f6fb22f464e32a58b36b"
        }
      ],
      "purl": "pkg:npm/acorn-jsx@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-jsx@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "45e37fb39e8da3f25baee3ff5369e2bb5f22017a"
        }
      ],
      "purl": "pkg:npm/acorn@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esquery",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cfba8b57d7fba93f17298a8a006a04cda13d80fa"
        }
      ],
      "purl": "pkg:npm/esquery@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esquery/-/esquery-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esquery@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esquery/-/esquery-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-entry-cache",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c392990c3e684783d838b8c84a45d8a048458361"
        }
      ],
      "purl": "pkg:npm/file-entry-cache@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/file-entry-cache@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "flat-cache",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d3030b32b38154f4e3b7e9c709f490f7ef97c481"
        }
      ],
      "purl": "pkg:npm/flat-cache@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/flat-cache/-/flat-cache-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flat-cache@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/flat-cache/-/flat-cache-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "circular-json",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5192b7341c7631c6be6f92ec1bb6d8d7cde91d6b79635c6db383f73f3ec4353c0656724e5166d16f7a1c8ef5fb871f6dabfc9301d7255e6f6c677f2036e7a6e0"
        }
      ],
      "purl": "pkg:npm/circular-json@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/circular-json/-/circular-json-0.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/circular-json@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/circular-json/-/circular-json-0.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "del",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c12c981d067846c84bcaf862cff930d907ffd1a8"
        }
      ],
      "purl": "pkg:npm/del@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/del/-/del-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/del@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/del/-/del-2.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globby",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ebd84667ca0dbb330b99bcfc68eac2bc54370e0d"
        }
      ],
      "purl": "pkg:npm/globby@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globby/-/globby-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globby@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globby/-/globby-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-union",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a34410e4f4e3da23dea375be5be70f24778ec39"
        }
      ],
      "purl": "pkg:npm/array-union@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-union/-/array-union-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-union@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-union/-/array-union-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-uniq",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "af6ac877a25cc7f74e058894753858dfdb24fdb6"
        }
      ],
      "purl": "pkg:npm/array-uniq@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-uniq@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-cwd",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d225ec23132e89edd38fda767472e62e65f1106d"
        }
      ],
      "purl": "pkg:npm/is-path-cwd@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-cwd/-/is-path-cwd-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-cwd@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-cwd/-/is-path-cwd-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-in-cwd",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6477582b8214d602346094567003be8a9eac04dc"
        }
      ],
      "purl": "pkg:npm/is-path-in-cwd@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-in-cwd/-/is-path-in-cwd-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-in-cwd@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-in-cwd/-/is-path-in-cwd-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-path-inside",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fc06e5a1683fbda13de667aff717bbc10a48f37f"
        }
      ],
      "purl": "pkg:npm/is-path-inside@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-path-inside@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-is-inside",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "365417dede44430d1c11af61027facf074bdfc53"
        }
      ],
      "purl": "pkg:npm/path-is-inside@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-is-inside@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rimraf",
      "version": "2.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "96b79ec0b2bf0658219b1b5f1f7e986158358bc20071ee1323ba1aa3be48d60db8e7ee8172da935508813f761427d0ba0d039726691847d5fd7c22ed08e25ce7"
        }
      ],
      "purl": "pkg:npm/rimraf@2.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rimraf/-/rimraf-2.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "write",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5fc03828e264cea3fe91455476f7a3c566cb0757"
        }
      ],
      "purl": "pkg:npm/write@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/write/-/write-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/write@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/write/-/write-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "functional-red-black-tree",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b0ab3bd553b2a0d6399d29c0e3ea0b252078327"
        }
      ],
      "purl": "pkg:npm/functional-red-black-tree@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/functional-red-black-tree/-/functional-red-black-tree-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/functional-red-black-tree@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/functional-red-black-tree/-/functional-red-black-tree-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ignore",
      "version": "3.3.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6061b77a3bc134746abb4e79f443b1c4d162843d008e9bc7942fe974629ddd7de87def82a099186b3c0d2584cd79baa93ca37e55541b8786459f50e2bcc36e1c"
        }
      ],
      "purl": "pkg:npm/ignore@3.3.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ignore/-/ignore-3.3.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ignore@3.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ignore/-/ignore-3.3.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "imurmurhash",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9218b9b2b928a238b13dc4fb6b6d576f231453ea"
        }
      ],
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/imurmurhash@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inquirer",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "87ec6d9f29381302af1561eb518b1612b11547e8a02ad2dd721bbea3467544bed553f8d53056d88abd9ba7a6c08fc79f14dc56a875f4748b2ce9f250fbffaa79"
        }
      ],
      "purl": "pkg:npm/inquirer@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inquirer/-/inquirer-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inquirer@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inquirer/-/inquirer-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-escapes",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bf925736ee658d52282dbf417c34959b2c5d3439c7a041a964a8a51159da2c5b4f1864a8b89ba0a74944af2191b5a2d3496d35a1374d47873dfcf435bb9af0d"
        }
      ],
      "purl": "pkg:npm/ansi-escapes@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-escapes@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-cursor",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b35dac376479facc3e94747d41d0d0f5238ffcb5"
        }
      ],
      "purl": "pkg:npm/cli-cursor@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-cursor/-/cli-cursor-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-cursor@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-cursor/-/cli-cursor-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "restore-cursor",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9f7ee287f82fd326d4fd162923d62129eee0dfaf"
        }
      ],
      "purl": "pkg:npm/restore-cursor@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/restore-cursor/-/restore-cursor-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/restore-cursor@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/restore-cursor/-/restore-cursor-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "onetime",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "067428230fd67443b2794b22bba528b6867962d4"
        }
      ],
      "purl": "pkg:npm/onetime@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/onetime/-/onetime-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/onetime@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/onetime/-/onetime-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mimic-fn",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e667783d92e89dbd342818b5230b9d62a672ad18"
        }
      ],
      "purl": "pkg:npm/mimic-fn@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mimic-fn@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-width",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ff19ede8a9a5e579324147b0c11f0fbcbabed639"
        }
      ],
      "purl": "pkg:npm/cli-width@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-width/-/cli-width-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-width@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-width/-/cli-width-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "external-editor",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32c8e8eb8593e56f8d84ea505e1d273879be9f445f535414c039ca62f27c74427cce5c0baea5cd4efe664944c9a5ea5fe353c3246ca1b9e4f0daf3595be16bff"
        }
      ],
      "purl": "pkg:npm/external-editor@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/external-editor/-/external-editor-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/external-editor@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/external-editor/-/external-editor-2.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jschardet",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c58ba1bd0ec8f4f0c92060567aff719b4f9231279ddd90c1026bd58db151d5944b005faf957710bba71123db80963f35af38a4125455b5e7a1c15ec3b97d9999"
        }
      ],
      "purl": "pkg:npm/jschardet@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jschardet/-/jschardet-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jschardet@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jschardet/-/jschardet-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmp",
      "version": "0.0.33",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d10899688ca9d9dda75db533a3748aa846e3c4281bcd5dc198ab33bacd6657f0a7ca1299c66398df820250dc48cabaef03e1b251af4cbe7182459986c89971b"
        }
      ],
      "purl": "pkg:npm/tmp@0.0.33",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tmp/-/tmp-0.0.33.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmp@0.0.33",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tmp/-/tmp-0.0.33.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "figures",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3ab1a2d2a62c8bfb431a0c94cb797a2fce27c962"
        }
      ],
      "purl": "pkg:npm/figures@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/figures/-/figures-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/figures@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/figures/-/figures-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mute-stream",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3075ce93bc21b8fab43e1bc4da7e8115ed1e7bab"
        }
      ],
      "purl": "pkg:npm/mute-stream@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mute-stream@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "run-async",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0371ab4ae0bdd720d4166d7dfda64ff7a445a6c0"
        }
      ],
      "purl": "pkg:npm/run-async@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/run-async/-/run-async-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/run-async@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/run-async/-/run-async-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-promise",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79a2a9ece7f096e80f36d2b2f3bc16c1ff4bf3fa"
        }
      ],
      "purl": "pkg:npm/is-promise@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-promise/-/is-promise-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-promise@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-promise/-/is-promise-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rx-lite",
      "version": "4.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0b1e11af8bc44836f04a6407e92da42467b79444"
        }
      ],
      "purl": "pkg:npm/rx-lite@4.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rx-lite/-/rx-lite-4.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rx-lite@4.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rx-lite/-/rx-lite-4.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rx-lite-aggregates",
      "version": "4.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "753b87a89a11c95467c4ac1626c4efc4e05c67be"
        }
      ],
      "purl": "pkg:npm/rx-lite-aggregates@4.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rx-lite-aggregates/-/rx-lite-aggregates-4.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rx-lite-aggregates@4.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rx-lite-aggregates/-/rx-lite-aggregates-4.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-width",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9cea87e7d75e0aaf52447971ab5030f39267b78c3a2af2caa9656293aa00f599255cb3483a5aa0e05db2ad3d4c55a4e302abd5c1d7de67bc3b682bc90fbba093"
        }
      ],
      "purl": "pkg:npm/string-width@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-width@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3b30a5c4f199183167aaab93beefae3ddfb654f"
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-ansi",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a8479022eb1ac368a871389b635262c505ee368f"
        }
      ],
      "purl": "pkg:npm/strip-ansi@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-regex",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ed0317c322064f79466c02966bddb605ab37d998"
        }
      ],
      "purl": "pkg:npm/ansi-regex@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-resolvable",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8df57c61ea2e3c501408d100fb013cf8d6e0cc62"
        }
      ],
      "purl": "pkg:npm/is-resolvable@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-resolvable/-/is-resolvable-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-resolvable@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-resolvable/-/is-resolvable-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tryit",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "393be730a9446fd1ead6da59a014308f36c289cb"
        }
      ],
      "purl": "pkg:npm/tryit@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tryit/-/tryit-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tryit@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tryit/-/tryit-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "js-yaml",
      "version": "3.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3b6bf9d9f7e32daf5578ce372785e871913ffd64fd374222c036b72921c7ed3bbc0ad1fed6a33c48866f9ec4e1eaffb8c85cb9294637047515c23a5f016b2320"
        }
      ],
      "purl": "pkg:npm/js-yaml@3.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1fb5371a32efc41ab108bbdd38996b5e288bfcbccb8e806628ec4855249374d11fc4103f430ae6bfc711d17589cab5c102cd583bc4e5a17e5bc9327a9c1598f"
        }
      ],
      "purl": "pkg:npm/esprima@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "levn",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3b09924edf9f083c0490fdd4c0bc4421e04764ee"
        }
      ],
      "purl": "pkg:npm/levn@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/levn/-/levn-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/levn@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/levn/-/levn-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prelude-ls",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "21932a549f5e52ffd9a827f570e04be62a97da54"
        }
      ],
      "purl": "pkg:npm/prelude-ls@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prelude-ls@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "type-check",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5884cab512cf1d355e3fb784f30804b2b520db72"
        }
      ],
      "purl": "pkg:npm/type-check@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/type-check/-/type-check-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-check@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/type-check/-/type-check-0.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "natural-compare",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4abebfeed7541f2c27acfb29bdbbd15c8d5ba4f7"
        }
      ],
      "purl": "pkg:npm/natural-compare@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/natural-compare@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optionator",
      "version": "0.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "364c5e409d3f4d6301d6c0b4c05bba50180aeb64"
        }
      ],
      "purl": "pkg:npm/optionator@0.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/optionator/-/optionator-0.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optionator@0.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optionator/-/optionator-0.8.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-is",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b369d6fb5dbc13eecf524f91b070feedc357cf34"
        }
      ],
      "purl": "pkg:npm/deep-is@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-is@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-levenshtein",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d8a5c66883a16a30ca8643e851f19baa7797917"
        }
      ],
      "purl": "pkg:npm/fast-levenshtein@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-levenshtein@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "27584810891456a4171c8d0226441ade90cbcaeb"
        }
      ],
      "purl": "pkg:npm/wordwrap@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pluralize",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "01184139dcd2ddee3515b916fd75ab4c4b6e92aa8ba0ae7e67fe1478368bb925bedfd24f78582ce20086aacac91d5657d1f52bc7fff8385d0ad42506c25205a3"
        }
      ],
      "purl": "pkg:npm/pluralize@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pluralize/-/pluralize-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pluralize@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pluralize/-/pluralize-7.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "progress",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a1be366bf8fc23db2bd23f10c6fe920b4389d1f"
        }
      ],
      "purl": "pkg:npm/progress@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/progress/-/progress-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/progress@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/progress/-/progress-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-uncached",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e0d56d6c9662fd31e43011c4b95aa49955421d3"
        }
      ],
      "purl": "pkg:npm/require-uncached@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-uncached/-/require-uncached-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-uncached@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-uncached/-/require-uncached-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caller-path",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "94085ef63581ecd3daa92444a8fe94e82577751f"
        }
      ],
      "purl": "pkg:npm/caller-path@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caller-path/-/caller-path-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caller-path@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caller-path/-/caller-path-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "callsites",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "afab96262910a7f33c19a5775825c69f34e350ca"
        }
      ],
      "purl": "pkg:npm/callsites@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/callsites/-/callsites-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/callsites@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/callsites/-/callsites-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-from",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "26cbfe935d1aeeeabb29bc3fe5aeb01e93d44226"
        }
      ],
      "purl": "pkg:npm/resolve-from@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-from/-/resolve-from-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-from/-/resolve-from-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "table",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "51490400f7521b1b51a6257da3327970c4ed622ab3ecd8b5386a8b5d10b29ebbf376d475a7e71f3967b64492f0bd41bc84d6a769246379c22ac0e8ea79ab43b0"
        }
      ],
      "purl": "pkg:npm/table@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/table/-/table-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/table@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/table/-/table-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ajv-keywords",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "617997fc5f60576894c435f940d819e135b80762"
        }
      ],
      "purl": "pkg:npm/ajv-keywords@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv-keywords@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slice-ansi",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ceab104ae8b6f7abab34e3b0ff5ec0d534f9c5f4397c2526aa7bd87d954465d0e74dab2fee8c3ace8881edb2a5cc19b5964c8a2647300c693c9ac0053ffd17a"
        }
      ],
      "purl": "pkg:npm/slice-ansi@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slice-ansi@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "text-table",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7f5ee823ae805207c00af2df4a84ec3fcfa570b4"
        }
      ],
      "purl": "pkg:npm/text-table@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/text-table@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-config-react-app",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "807b64cdf123297860649d017fe126ced1525b04e2303828cbce6c15a4eaaf1535047489f62e22fc926d5c9a1f54253f48e2b162ce3a2cedda8efbb31501f9af"
        }
      ],
      "purl": "pkg:npm/eslint-config-react-app@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-config-react-app/-/eslint-config-react-app-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-config-react-app@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-config-react-app/-/eslint-config-react-app-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-loader",
      "version": "1.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e3468df7beaa48d3f26fd7a34ea8c4b616484e996cd5254ab7082e6a1987d5dcc60b0414fefc9213ec57df7559983f1cb14d1a855342b4596c3e02aa4418aa82"
        }
      ],
      "purl": "pkg:npm/eslint-loader@1.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-loader/-/eslint-loader-1.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-loader@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-loader/-/eslint-loader-1.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loader-fs-cache",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "56e0bf08bd9708b26a765b68509840c8dec9fdbc"
        }
      ],
      "purl": "pkg:npm/loader-fs-cache@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loader-fs-cache/-/loader-fs-cache-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loader-fs-cache@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loader-fs-cache/-/loader-fs-cache-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-cache-dir",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c8defae57c8a52a8a784f9e31c57c742e993a0b9"
        }
      ],
      "purl": "pkg:npm/find-cache-dir@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/find-cache-dir/-/find-cache-dir-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/find-cache-dir@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/find-cache-dir/-/find-cache-dir-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pkg-dir",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7a4b508a8d5bb2d629d447056ff4e9c9314cf3d4"
        }
      ],
      "purl": "pkg:npm/pkg-dir@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pkg-dir@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-hash",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b264565f392fc70ef656abb2674c208324a5ecf154b680e1be1a5dc201125f152b1fbbd5861a7d6ac7eea75fab54bae1b25ecbe3911ed50fe5e51d9497833052"
        }
      ],
      "purl": "pkg:npm/object-hash@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-hash/-/object-hash-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-hash@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-hash/-/object-hash-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-flowtype",
      "version": "2.39.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46242ffbb67d40326ecedf8d3bcb188242c64fe87e59e0abc4fef2f2523bc29538d71df1ff6a373c6b4793d724f109c0f7f9a56cd732fe11b478abe677b9e968"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-flowtype@2.39.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-flowtype/-/eslint-plugin-flowtype-2.39.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-flowtype@2.39.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-flowtype/-/eslint-plugin-flowtype-2.39.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-import",
      "version": "2.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45fedd7ca271675e90b93815bf539837191972cbbf8542c59c2f9efb0d06ce2ea3302de0b90a16420c58c5ce782034629e56faff4bf9cff3f1c482a655cb4dfa"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-import@2.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-import/-/eslint-plugin-import-2.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-import@2.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-import/-/eslint-plugin-import-2.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "contains-path",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fe8cf184ff6670b6baef01a9d4861a5cbec4120a"
        }
      ],
      "purl": "pkg:npm/contains-path@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/contains-path/-/contains-path-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/contains-path@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/contains-path/-/contains-path-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "doctrine",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "379dce730f6166f76cefa4e6707a159b02c5a6fa"
        }
      ],
      "purl": "pkg:npm/doctrine@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/doctrine/-/doctrine-1.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/doctrine@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/doctrine/-/doctrine-1.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-import-resolver-node",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c94b574b5e6021c8a3ebc3665e63fd362efb010b823748ad5db09cfe359df02ebfc8a65a48d5e27290bc720be39f155d99fb28b085eb8e9cc5abb19c0ebc9be8"
        }
      ],
      "purl": "pkg:npm/eslint-import-resolver-node@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-import-resolver-node/-/eslint-import-resolver-node-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-import-resolver-node@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-import-resolver-node/-/eslint-import-resolver-node-0.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-module-utils",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8c323f5f997fe83d6b443ff74f8deaf1081b96cda7ab9926e4a4aa8b097251b1a8e7ed387d784c29d08f863c1ba806ba1d759a3318fc4388500c887b21a74943"
        }
      ],
      "purl": "pkg:npm/eslint-module-utils@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-module-utils/-/eslint-module-utils-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-module-utils@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-module-utils/-/eslint-module-utils-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.cond",
      "version": "4.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f471a1da486be60f6ab955d17115523dd1d255d5"
        }
      ],
      "purl": "pkg:npm/lodash.cond@4.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.cond/-/lodash.cond-4.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.cond@4.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.cond/-/lodash.cond-4.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg-up",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6b72a8048984e0c41e79510fd5e9fa99b3b549be"
        }
      ],
      "purl": "pkg:npm/read-pkg-up@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg-up@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-pkg",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8ef1c0623c6a6db0dc6713c4bfac46332b2368f8"
        }
      ],
      "purl": "pkg:npm/read-pkg@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-pkg/-/read-pkg-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-pkg/-/read-pkg-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "load-json-file",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7947e42149af80d696cbf797bcaabcfe1fe29ca8"
        }
      ],
      "purl": "pkg:npm/load-json-file@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/load-json-file/-/load-json-file-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/load-json-file@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/load-json-file/-/load-json-file-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-bom",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2334c18e9c759f7bdd56fdef7e9ae3d588e68ed3"
        }
      ],
      "purl": "pkg:npm/strip-bom@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-type",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f012ccb8415b7096fc2daa1054c3d72389594c73"
        }
      ],
      "purl": "pkg:npm/path-type@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-type/-/path-type-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-type@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-type/-/path-type-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-jsx-a11y",
      "version": "5.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e48f52a683fb813e300453ad5d3f3fb5734f6288470557f255f3b5eef91b0bbafd904231609175d83de92aa864f3ec67935dab7f1282952dd6085a557241533d"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-jsx-a11y@5.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-jsx-a11y/-/eslint-plugin-jsx-a11y-5.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-jsx-a11y@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-jsx-a11y/-/eslint-plugin-jsx-a11y-5.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aria-query",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "febda51e5d3d577a3be3ed8c2ca11d7b0a23dfb619aa24199df7a7d4ee22365ace8d481e2aebb5536c85de22a1e87271a85f8e5e42cc7d0bfae59fdcbf10fabc"
        }
      ],
      "purl": "pkg:npm/aria-query@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aria-query/-/aria-query-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aria-query@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aria-query/-/aria-query-0.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ast-types-flow",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f70b735c6bca1a5c9c22d982c3e39e7feba3bdad"
        }
      ],
      "purl": "pkg:npm/ast-types-flow@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ast-types-flow/-/ast-types-flow-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ast-types-flow@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ast-types-flow/-/ast-types-flow-0.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-includes",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "184b48f62d92d7452bb31b323165c7f8bd02266d"
        }
      ],
      "purl": "pkg:npm/array-includes@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-includes/-/array-includes-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-includes@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-includes/-/array-includes-3.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "define-properties",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "83a73f2fea569898fb737193c8f873caf6d45c94"
        }
      ],
      "purl": "pkg:npm/define-properties@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/define-properties/-/define-properties-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-properties@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/define-properties/-/define-properties-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "foreach",
      "version": "2.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0bee005018aeb260d0a3af3ae658dd0136ec1b99"
        }
      ],
      "purl": "pkg:npm/foreach@2.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/foreach/-/foreach-2.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/foreach@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/foreach/-/foreach-2.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-keys",
      "version": "1.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c54601778ad560f1142ce0e01bcca8b56d13426d"
        }
      ],
      "purl": "pkg:npm/object-keys@1.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-keys/-/object-keys-1.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-keys@1.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-keys/-/object-keys-1.0.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-abstract",
      "version": "1.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "924dc82682a8ec0de9589734395f3267f5445f6a12532b5f7a4ac98aaa3106528930500954956919d1c294209376ff859f6cc77e90c71c87a530585955f79fdd"
        }
      ],
      "purl": "pkg:npm/es-abstract@1.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-abstract@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es-to-primitive",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "45355248a88979034b6792e19bb81f2b7975dd0d"
        }
      ],
      "purl": "pkg:npm/es-to-primitive@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-to-primitive@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-callable",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "86eb75392805ddc33af71c92a0eedf74ee7604b2"
        }
      ],
      "purl": "pkg:npm/is-callable@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-callable/-/is-callable-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-callable@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-callable/-/is-callable-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-date-object",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9aa20eb6aeebbff77fbd33e74ca01b33581d3a16"
        }
      ],
      "purl": "pkg:npm/is-date-object@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-date-object@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-symbol",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3cc59f00025194b6ab2e38dbae6689256b660572"
        }
      ],
      "purl": "pkg:npm/is-symbol@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-symbol@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-regex",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5517489b547091b0930e095654ced25ee97e9491"
        }
      ],
      "purl": "pkg:npm/is-regex@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-regex/-/is-regex-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-regex@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-regex/-/is-regex-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "axobject-query",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "62f59dbc59c9f9242759ca349960e7a2fe3c36c0"
        }
      ],
      "purl": "pkg:npm/axobject-query@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/axobject-query/-/axobject-query-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/axobject-query@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/axobject-query/-/axobject-query-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "damerau-levenshtein",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "03191c432cb6eea168bb77f3a55ffdccb8978514"
        }
      ],
      "purl": "pkg:npm/damerau-levenshtein@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/damerau-levenshtein/-/damerau-levenshtein-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/damerau-levenshtein@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/damerau-levenshtein/-/damerau-levenshtein-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "emoji-regex",
      "version": "6.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3c01e9e93c6b0b2ecc18c16276ba3cba292bfb394924a27f43a9a6d84c59ec7c24c91f6549515f13792ddfaa9cc1adb80502fbcb41bd6b1c9c1a32b503fd2e35"
        }
      ],
      "purl": "pkg:npm/emoji-regex@6.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-6.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@6.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-6.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsx-ast-utils",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3867213e8dd79bf1e8f2300c0cfc1efb182c0df1"
        }
      ],
      "purl": "pkg:npm/jsx-ast-utils@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsx-ast-utils/-/jsx-ast-utils-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsx-ast-utils@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsx-ast-utils/-/jsx-ast-utils-1.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-plugin-react",
      "version": "7.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b6f8d4f6edd5aa65b6bd5b989c4f10a6dabeea38b8265b633a327dbbb5403b1558914932059591bcd60a6c3bf97cdf8beb0880fb8c1ef7ea906a16749badd710"
        }
      ],
      "purl": "pkg:npm/eslint-plugin-react@7.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eslint-plugin-react/-/eslint-plugin-react-7.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-react@7.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eslint-plugin-react/-/eslint-plugin-react-7.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsx-ast-utils",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e801b1b39985e20fffc87b40e3748080e2dcac7f"
        }
      ],
      "purl": "pkg:npm/jsx-ast-utils@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsx-ast-utils/-/jsx-ast-utils-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsx-ast-utils@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsx-ast-utils/-/jsx-ast-utils-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extract-text-webpack-plugin",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6edfcb6789b946ab7f0ab9761e22ae025fe8aa0d29b31d6db132e4bd66c97a7d42b43f9f7ed91984c690f473ad636816b25d96abeb000663158bdcf70e129641"
        }
      ],
      "purl": "pkg:npm/extract-text-webpack-plugin@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extract-text-webpack-plugin/-/extract-text-webpack-plugin-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extract-text-webpack-plugin@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extract-text-webpack-plugin/-/extract-text-webpack-plugin-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "2.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c407c6835fcd4cb0412a51c59a777b3e59945bd2a1550214b92ad87a6f71cc5519cb5dd272fb721867a369a7bd880551891abdf82c7b0cf15a000842a72c723f"
        }
      ],
      "purl": "pkg:npm/async@2.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-2.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@2.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-2.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "schema-utils",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5877222ce3e931edae039f17eb3716e7137f8cf"
        }
      ],
      "purl": "pkg:npm/schema-utils@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/schema-utils/-/schema-utils-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/schema-utils@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/schema-utils/-/schema-utils-0.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-sources",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "63b51d74c0afe9d1a3cbcd6706fea7b90785148b7969a9479bbbb20ec02c5bcea76707ce54f191af75cc8c440b693f962a8f2b973842f6ab5b26f60a2ed0306b"
        }
      ],
      "purl": "pkg:npm/webpack-sources@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-sources@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-sources/-/webpack-sources-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-loader",
      "version": "1.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4731870dab5c54da462124ef0a97d47ce1a962e491ec74ac4a0f3b922fb017aaf0d479b44402cf4e201db3102ad54c0b7f445185b7b6dbf7872ba9e15eca6239"
        }
      ],
      "purl": "pkg:npm/file-loader@1.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/file-loader/-/file-loader-1.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/file-loader@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/file-loader/-/file-loader-1.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3794f378c58b342ea7dbbb23095109c4b3b62291"
        }
      ],
      "purl": "pkg:npm/fs-extra@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-extra/-/fs-extra-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-extra/-/fs-extra-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a5ecc6f65f53f662c4415c7675a0331d0992ec66"
        }
      ],
      "purl": "pkg:npm/jsonfile@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonfile/-/jsonfile-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonfile/-/jsonfile-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fa71badd4437af4c148841e3b3b165f9e9e590b7"
        }
      ],
      "purl": "pkg:npm/universalify@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/universalify/-/universalify-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/universalify@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/universalify/-/universalify-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-webpack-plugin",
      "version": "2.29.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e987f421853d3b6938c8c4c8171842e5fd17af23"
        }
      ],
      "purl": "pkg:npm/html-webpack-plugin@2.29.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-webpack-plugin/-/html-webpack-plugin-2.29.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-webpack-plugin@2.29.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-webpack-plugin/-/html-webpack-plugin-2.29.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bluebird",
      "version": "3.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "30a88b895f88d40039f7ab7dc35b1027c8e4892af9f992a2d162ab606527e9dd45c7e223e2d223fa6d96310486733b398d9571577dfd72113c8b093a17ae308c"
        }
      ],
      "purl": "pkg:npm/bluebird@3.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bluebird/-/bluebird-3.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bluebird@3.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bluebird/-/bluebird-3.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-minifier",
      "version": "3.5.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3c163b4aae56a4d978dcce1c6b0689a0cd5e23986cccdd49c744149c46425c99c46e9b491bf88c2154011327c015a7b8f4a77c6e82349ac3d2fe466239fd038"
        }
      ],
      "purl": "pkg:npm/html-minifier@3.5.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-minifier/-/html-minifier-3.5.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-minifier@3.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-minifier/-/html-minifier-3.5.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camel-case",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ca3c3688a4e9cf3a4cda777dc4dcbc713249cf73"
        }
      ],
      "purl": "pkg:npm/camel-case@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camel-case/-/camel-case-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camel-case@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camel-case/-/camel-case-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "no-case",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae64d9f64cfe7f7ac2bcad930f551efe86659ecece1a82163f87dcde5971c515e53a41caa163cf58939f158a484da6d2a30e374096d12281d05edb75d1595dc9"
        }
      ],
      "purl": "pkg:npm/no-case@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/no-case/-/no-case-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/no-case@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/no-case/-/no-case-2.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lower-case",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9a2cabd1b9e8e0ae993a4bf7d5875c39c42e8eac"
        }
      ],
      "purl": "pkg:npm/lower-case@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lower-case/-/lower-case-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lower-case@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lower-case/-/lower-case-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "upper-case",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f6b4501c2ec4cdd26ba78be7222961de77621598"
        }
      ],
      "purl": "pkg:npm/upper-case@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/upper-case/-/upper-case-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/upper-case@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/upper-case/-/upper-case-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "clean-css",
      "version": "4.1.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "35cee8ae7687a49b98034f70de00c4edd3826301"
        }
      ],
      "purl": "pkg:npm/clean-css@4.1.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/clean-css/-/clean-css-4.1.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/clean-css@4.1.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/clean-css/-/clean-css-4.1.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f4e79dee600e580041a0c982066113b3290ed7e5102a79d91f8e2671c22d242f58376ce68134d65f624cedfc22f4ba6803e7073d25e73615b07df028e4311bd"
        }
      ],
      "purl": "pkg:npm/commander@2.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.11.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ncname",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5b57ad18b1ca092864ef62b0b1ed8194f383b71c"
        }
      ],
      "purl": "pkg:npm/ncname@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ncname/-/ncname-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ncname@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ncname/-/ncname-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xml-char-classes",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "64657848a20ffc5df583a42ad8a277b4512bbc4d"
        }
      ],
      "purl": "pkg:npm/xml-char-classes@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xml-char-classes/-/xml-char-classes-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xml-char-classes@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xml-char-classes/-/xml-char-classes-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "param-case",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df94fd8cf6531ecf75e6bef9a0858fbc72be2247"
        }
      ],
      "purl": "pkg:npm/param-case@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/param-case/-/param-case-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/param-case@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/param-case/-/param-case-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "relateurl",
      "version": "0.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "54dbf377e51440aca90a4cd274600d3ff2d888a9"
        }
      ],
      "purl": "pkg:npm/relateurl@0.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/relateurl/-/relateurl-0.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/relateurl@0.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/relateurl/-/relateurl-0.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "3.1.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ab8b613cf5b0fb7fe7cc535ef7360175d8905c3a1828c5ecae0acf7b8792b9f0804436b9c6f5e563da515a76b38f76a7f42a27ecc5599441fcc0d9c1cdc4265"
        }
      ],
      "purl": "pkg:npm/uglify-js@3.1.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.1.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@3.1.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.1.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loader-utils",
      "version": "0.2.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f86e6374d43205a6e6c60e9196f17c0299bfb348"
        }
      ],
      "purl": "pkg:npm/loader-utils@0.2.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loader-utils/-/loader-utils-0.2.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loader-utils@0.2.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loader-utils/-/loader-utils-0.2.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-error",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5f4f87c8f91e5ae3f3ba87ab4cf5e03b1a17f1a3"
        }
      ],
      "purl": "pkg:npm/pretty-error@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pretty-error/-/pretty-error-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pretty-error@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pretty-error/-/pretty-error-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "renderkid",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "898cabfc8bede4b7b91135a3ffd323e58c0db319"
        }
      ],
      "purl": "pkg:npm/renderkid@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/renderkid/-/renderkid-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/renderkid@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/renderkid/-/renderkid-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-select",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b3a110539c5355f1cd8d314623e870b121ec858"
        }
      ],
      "purl": "pkg:npm/css-select@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-select/-/css-select-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-select@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-select/-/css-select-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boolbase",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "68dff5fbe60c51eb37725ea9e3ed310dcc1e776e"
        }
      ],
      "purl": "pkg:npm/boolbase@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boolbase@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "css-what",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9467d032c38cfaefb9f2d79501253062f87fa1bd"
        }
      ],
      "purl": "pkg:npm/css-what@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/css-what/-/css-what-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-what@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/css-what/-/css-what-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domutils",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dcd8488a26f563d61079e48c9f7b7e32373682cf"
        }
      ],
      "purl": "pkg:npm/domutils@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domutils@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-serializer",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "073c697546ce0780ce23be4a28e293e40bc30c82"
        }
      ],
      "purl": "pkg:npm/dom-serializer@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-serializer@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bd28773e2642881aec51544924299c5cd822185b"
        }
      ],
      "purl": "pkg:npm/domelementtype@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "entities",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e5c2d0a5621b5dadaecef80b90edfb5cd7772f0"
        }
      ],
      "purl": "pkg:npm/entities@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/entities/-/entities-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/entities/-/entities-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domelementtype",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b17aed82e8ab59e52dd9c19b1756e0fc187204c2"
        }
      ],
      "purl": "pkg:npm/domelementtype@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nth-check",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9929acdf628fc2c41098deab82ac580cf149aae4"
        }
      ],
      "purl": "pkg:npm/nth-check@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nth-check/-/nth-check-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nth-check@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nth-check/-/nth-check-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-converter",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a45ef5727b890c9bffe6d7c876e7b19cb0e17f3b"
        }
      ],
      "purl": "pkg:npm/dom-converter@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-converter/-/dom-converter-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-converter@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-converter/-/dom-converter-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utila",
      "version": "0.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d7e8e7d7e309107092b05f8d9688824d633a4226"
        }
      ],
      "purl": "pkg:npm/utila@0.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utila/-/utila-0.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utila@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utila/-/utila-0.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "htmlparser2",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cc70d05a59f6542e43f0e685c982e14c924a9efe"
        }
      ],
      "purl": "pkg:npm/htmlparser2@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/htmlparser2@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "domhandler",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d2646f5e57f6c3bab11cf6cb05d3c0acf7412594"
        }
      ],
      "purl": "pkg:npm/domhandler@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domhandler/-/domhandler-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domhandler@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domhandler/-/domhandler-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "domutils",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bddc3de099b9a2efacc51c623f28f416ecc57485"
        }
      ],
      "purl": "pkg:npm/domutils@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/domutils/-/domutils-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domutils@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/domutils/-/domutils-1.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "1.0.34",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "125820e34bc842d2f2aaafafe4c2916ee32c157c"
        }
      ],
      "purl": "pkg:npm/readable-stream@1.0.34",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@1.0.34",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "utila",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8a16a05d445657a3aea5eecc5b12a4fa5379772c"
        }
      ],
      "purl": "pkg:npm/utila@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/utila/-/utila-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/utila@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/utila/-/utila-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "toposort",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c31748e55d210effc00fdcdc7d6e68d7d7bb9cec"
        }
      ],
      "purl": "pkg:npm/toposort@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/toposort/-/toposort-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/toposort@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/toposort/-/toposort-1.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest",
      "version": "20.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3dd260c2989d6dad678b1e9cc4d91944f6d602ac"
        }
      ],
      "purl": "pkg:npm/jest@20.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest/-/jest-20.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest@20.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest/-/jest-20.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-cli",
      "version": "20.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e532b19d88ae5bc6c417e8b0593a6fe954b1dc93"
        }
      ],
      "purl": "pkg:npm/jest-cli@20.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-cli/-/jest-cli-20.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-cli@20.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-cli/-/jest-cli-20.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "ansi-escapes",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d3a8a83b319aa67793662b13e761c7911422306e"
        }
      ],
      "purl": "pkg:npm/ansi-escapes@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-escapes@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "callsites",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "06eb84f00eea413da86affefacbffb36093b3c50"
        }
      ],
      "purl": "pkg:npm/callsites@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/callsites/-/callsites-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/callsites@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/callsites/-/callsites-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-ci",
      "version": "1.0.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f739336b2632365061a9d48270cd56ae3369318e"
        }
      ],
      "purl": "pkg:npm/is-ci@1.0.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-ci/-/is-ci-1.0.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-ci@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-ci/-/is-ci-1.0.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ci-info",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc70c317f6cff516294d6b5486925184215dbefa778835af11bb836d682f8d4acd195d4c5c9ac4d0c3dcc06b4495e774e26eb58b07412d420766d0e0cd64b865"
        }
      ],
      "purl": "pkg:npm/ci-info@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ci-info/-/ci-info-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ci-info@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ci-info/-/ci-info-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-api",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a050b05ef77ae5a9a068f0b3aab47e6b65e36a74b532fa5737a97f3253144efeae880d4d3a0197f88d2ecaaf0b837183c6cc4fb1a3f5d38f64af3de1209e7e28"
        }
      ],
      "purl": "pkg:npm/istanbul-api@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-api/-/istanbul-api-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-api@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-api/-/istanbul-api-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "fileset",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8e7548a96d3cc2327ee5e674168723a333bba2a0"
        }
      ],
      "purl": "pkg:npm/fileset@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fileset/-/fileset-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fileset@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fileset/-/fileset-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-hook",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "537a8483054351ead9d1bb7c71f9777523f74baa290683ad93744e3b97f611f06bfd24620fd150ab3c1a641a85391bbc5bb3b4117a5a8be93b9311cad776de46"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-hook@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-hook/-/istanbul-lib-hook-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-hook@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-hook/-/istanbul-lib-hook-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "append-transform",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d76ebf8ca94d276e247a36bad44a4b74ab611991"
        }
      ],
      "purl": "pkg:npm/append-transform@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/append-transform/-/append-transform-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/append-transform@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/append-transform/-/append-transform-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "default-require-extensions",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f37ea15d3e13ffd9b437d33e1a75b5fb97874cb8"
        }
      ],
      "purl": "pkg:npm/default-require-extensions@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/default-require-extensions/-/default-require-extensions-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/default-require-extensions@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/default-require-extensions/-/default-require-extensions-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-report",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "513bf8546c7e1d98af250c00a35c274707b5293bc5a5f8bf358c0dec372caddccc5f0a514ff61beabe1204fa075a3e15b903da911df68383d451ec8a91d0e404"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-report@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-report@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-report/-/istanbul-lib-report-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-lib-source-maps",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f017dda927c476d8a9effc28d519ebbcba4754477cccc6440e6385127a42e9d834bd77e51edf67be8032414ce2836b8c4977c5d8e0446015770958c82fd26f69"
        }
      ],
      "purl": "pkg:npm/istanbul-lib-source-maps@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-source-maps@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-lib-source-maps/-/istanbul-lib-source-maps-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "istanbul-reports",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6447a590787c86b64d239c4368ac0f305c03b147f9c08108d9b5c0146a757ba75e4769a710a04f84b24482be1906df068ba323dfc13f0bc91ccbd5cb82054ed9"
        }
      ],
      "purl": "pkg:npm/istanbul-reports@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-reports@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/istanbul-reports/-/istanbul-reports-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "handlebars",
      "version": "4.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "630a35dfe0294bc281edae6ffc5d329fc7982dcc"
        }
      ],
      "purl": "pkg:npm/handlebars@4.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/handlebars/-/handlebars-4.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/handlebars@4.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/handlebars/-/handlebars-4.0.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async",
      "version": "1.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ec6a61ae56480c0c3cb241c95618e20892f9672a"
        }
      ],
      "purl": "pkg:npm/async@1.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/async/-/async-1.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async@1.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/async/-/async-1.5.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "optimist",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da3ea74686fa21a19a111c326e90eb15a0196686"
        }
      ],
      "purl": "pkg:npm/optimist@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optimist@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3d5da6cd5c0bc0008d37234bbaf1bed63059107"
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eba4f5da9c0dc999de68032d8b4f76173652036b"
        }
      ],
      "purl": "pkg:npm/source-map@0.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-js",
      "version": "2.8.29",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "29c5733148057bb4e1f75df35b7a9cb72e6a59dd"
        }
      ],
      "purl": "pkg:npm/uglify-js@2.8.29",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.8.29.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@2.8.29",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.8.29.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglify-to-browserify",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e0924d6bda6b5afe349e39a6d632850a0f882b7"
        }
      ],
      "purl": "pkg:npm/uglify-to-browserify@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglify-to-browserify@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "3.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f7ee7bd857dd7c1d2d38c0e74efbd681d1431fd1"
        }
      ],
      "purl": "pkg:npm/yargs@3.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@3.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9bb5304d2e0b56698b2c758b08a3eaa9daa58a39"
        }
      ],
      "purl": "pkg:npm/camelcase@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4b475760ff80264c762c3a1719032e91c7fea0d1"
        }
      ],
      "purl": "pkg:npm/cliui@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "center-align",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "aa0d32629b6ee972200411cbd4461c907bc2b7ad"
        }
      ],
      "purl": "pkg:npm/center-align@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/center-align/-/center-align-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/center-align@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/center-align/-/center-align-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "align-text",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0cd90a561093f35d0a99256c22b7069433fad117"
        }
      ],
      "purl": "pkg:npm/align-text@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/align-text/-/align-text-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/align-text@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/align-text/-/align-text-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "longest",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "30a0b2da38f73770e8294a0d22e6625ed77d0097"
        }
      ],
      "purl": "pkg:npm/longest@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/longest@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lazy-cache",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a1d78fc3a50474cb80845d3b3b6e1da49a446e8e"
        }
      ],
      "purl": "pkg:npm/lazy-cache@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lazy-cache@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "right-align",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "61339b722fe6a3515689210d24e14c96148613ef"
        }
      ],
      "purl": "pkg:npm/right-align@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/right-align/-/right-align-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/right-align@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/right-align/-/right-align-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wordwrap",
      "version": "0.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b79669bb42ecb409f83d583cad52ca17eaa1643f"
        }
      ],
      "purl": "pkg:npm/wordwrap@0.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@0.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "window-size",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5438cd2ea93b202efa3a19fe8887aee7c94f9c9d"
        }
      ],
      "purl": "pkg:npm/window-size@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/window-size@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-changed-files",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9394d5cc65c438406149bef1bf4d52b68e03e3f8"
        }
      ],
      "purl": "pkg:npm/jest-changed-files@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-changed-files/-/jest-changed-files-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-changed-files@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-changed-files/-/jest-changed-files-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-config",
      "version": "20.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e37930ab2217c913605eff13e7bd763ec48faeea"
        }
      ],
      "purl": "pkg:npm/jest-config@20.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-config/-/jest-config-20.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-config@20.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-config/-/jest-config-20.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-environment-jsdom",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "048a8ac12ee225f7190417713834bb999787de99"
        }
      ],
      "purl": "pkg:npm/jest-environment-jsdom@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-environment-jsdom/-/jest-environment-jsdom-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-environment-jsdom@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-environment-jsdom/-/jest-environment-jsdom-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-mock",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8bc070e90414aa155c11a8d64c869a0d5c71da59"
        }
      ],
      "purl": "pkg:npm/jest-mock@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-mock/-/jest-mock-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-mock@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-mock/-/jest-mock-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-util",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0c07f7d80d82f4e5a67c6f8b9c3fe7f65cfd32ad"
        }
      ],
      "purl": "pkg:npm/jest-util@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-util/-/jest-util-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-util@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-util/-/jest-util-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-message-util",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6aec2844306fcb0e6e74d5796c1006d96fdd831c"
        }
      ],
      "purl": "pkg:npm/jest-message-util@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-message-util/-/jest-message-util-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-message-util@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-message-util/-/jest-message-util-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-validate",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d0cfd1de4f579f298484925c280f8f1d94ec3cab"
        }
      ],
      "purl": "pkg:npm/jest-validate@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-validate/-/jest-validate-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-validate@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-validate/-/jest-validate-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-matcher-utils",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b3a6b8e37ca577803b0832a98b164f44b7815612"
        }
      ],
      "purl": "pkg:npm/jest-matcher-utils@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-matcher-utils/-/jest-matcher-utils-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-matcher-utils@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-matcher-utils/-/jest-matcher-utils-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "pretty-format",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "020e350a560a1fe1a98dc3beb6ccffb386de8b14"
        }
      ],
      "purl": "pkg:npm/pretty-format@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pretty-format/-/pretty-format-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pretty-format@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pretty-format/-/pretty-format-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "leven",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c2e7a9f772094dee9d34202ae8acce4687875580"
        }
      ],
      "purl": "pkg:npm/leven@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/leven/-/leven-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/leven@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/leven/-/leven-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsdom",
      "version": "9.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e8c546fffcb06c00d4833ca84410fed7f8a097d4"
        }
      ],
      "purl": "pkg:npm/jsdom@9.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsdom/-/jsdom-9.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsdom@9.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsdom/-/jsdom-9.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "abab",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5faad9c2c07f60dd76770f71cf025b62a63cfd4e"
        }
      ],
      "purl": "pkg:npm/abab@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/abab/-/abab-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/abab@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/abab/-/abab-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-globals",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fd8270f71fbb4996b004fa880ee5d46573a731bf"
        }
      ],
      "purl": "pkg:npm/acorn-globals@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-globals/-/acorn-globals-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-globals@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-globals/-/acorn-globals-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-equal",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8c2a5ef2472fd9ea742b04c77a75093ba2757c93"
        }
      ],
      "purl": "pkg:npm/array-equal@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-equal/-/array-equal-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-equal@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-equal/-/array-equal-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "content-type-parser",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "94ce25e029cc13038b1c01ebfcfe8c119c1914f245b4000a80bea9a206d7995660808a9785d07a45b06d3ce4ecc3615c5f06217a144611126646b8ce88807ca5"
        }
      ],
      "purl": "pkg:npm/content-type-parser@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/content-type-parser/-/content-type-parser-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/content-type-parser@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/content-type-parser/-/content-type-parser-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "cssom",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b8036170c79f07a90ff2f16e22284027a243848b"
        }
      ],
      "purl": "pkg:npm/cssom@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cssom/-/cssom-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssom@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cssom/-/cssom-0.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cssstyle",
      "version": "0.2.37",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "541097234cb2513c83ceed3acddc27ff27987d54"
        }
      ],
      "purl": "pkg:npm/cssstyle@0.2.37",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cssstyle/-/cssstyle-0.2.37.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssstyle@0.2.37",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cssstyle/-/cssstyle-0.2.37.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escodegen",
      "version": "1.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf4318bcd437d9bcf0a06d8e485cd6024b9a8434072bdd8904dd294c000b278448c4465eefae9024f0d1f07ab2ed7354cb92b77e754befa3aa60075ce1364423"
        }
      ],
      "purl": "pkg:npm/escodegen@1.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escodegen/-/escodegen-1.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escodegen@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escodegen/-/escodegen-1.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fdca51cee6133895e3c88d535ce49dbff62a4633"
        }
      ],
      "purl": "pkg:npm/esprima@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/esprima/-/esprima-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/esprima/-/esprima-3.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-encoding-sniffer",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ef5959ce28839ecb9a6df7588947967425722aeab05a2db72fc61e22057d8d24991c2b5beb007504a5a8a07ecbded9f8fc5b9924c556c8d6880ebe111a669263"
        }
      ],
      "purl": "pkg:npm/html-encoding-sniffer@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-encoding-sniffer@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-encoding-sniffer/-/html-encoding-sniffer-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-encoding",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8cb070c0a5218bc5ad05fb0c4252f86d451c4fcb0c900b508a7b1c2407bf3382870a41ee509005eafb81d2db9e348c3873cce23ba024466818fa32f76b48a23f"
        }
      ],
      "purl": "pkg:npm/whatwg-encoding@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-encoding/-/whatwg-encoding-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-encoding@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-encoding/-/whatwg-encoding-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nwmatcher",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "20a7524e20d609aadfd894d2e5ef5edbee6d3d919d91127bf578d8574a732bc43d069b05c81ab54462b1ceced0f1406eb211b0ee6e93cd52b3e9f718f7d8925b"
        }
      ],
      "purl": "pkg:npm/nwmatcher@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nwmatcher/-/nwmatcher-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nwmatcher@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nwmatcher/-/nwmatcher-1.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse5",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9b7f3b0de32be78dc2401b17573ccaf0f6f59d94"
        }
      ],
      "purl": "pkg:npm/parse5@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse5/-/parse5-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse5@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse5/-/parse5-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "request",
      "version": "2.83.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "951de00faf68b2a9ba1182e4f7007f1b55bf95a1968f31fdd2dd6f11adb1bb11c3e4a52b4b3a7da5449f4e6f980b9371b764fc9cc3c4bca9616d06b253b6e017"
        }
      ],
      "purl": "pkg:npm/request@2.83.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/request/-/request-2.83.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/request@2.83.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/request/-/request-2.83.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "aws-sign2",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b46e890934a9591f2d2f6f86d7e6a9f1b3fe76a8"
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aws-sign2@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "form-data",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6fb94fbd71885306d73d15cc497fe4cc4ecd44bf"
        }
      ],
      "purl": "pkg:npm/form-data@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/form-data/-/form-data-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/form-data@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/form-data/-/form-data-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-validator",
      "version": "5.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ba402c266194f15956ef15e0fcf242993f6a7dfd"
        }
      ],
      "purl": "pkg:npm/har-validator@5.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/har-validator/-/har-validator-5.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-validator@5.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/har-validator/-/har-validator-5.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "har-schema",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a94c2224ebcac04782a0d9035521f24735b7ec92"
        }
      ],
      "purl": "pkg:npm/har-schema@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/har-schema/-/har-schema-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/har-schema@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/har-schema/-/har-schema-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hawk",
      "version": "6.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a2a30865dbe53b4257b8bdd2ea0dd3edf66d3d2bac998642c34d61a8522533ad00a7fa61c74a67c9800c8668b4596cf993a9f1458d1575416096d155942416d"
        }
      ],
      "purl": "pkg:npm/hawk@6.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hawk/-/hawk-6.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hawk@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hawk/-/hawk-6.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boom",
      "version": "4.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4f8a3005cb4a7e3889f749030fd25b96e01d2e31"
        }
      ],
      "purl": "pkg:npm/boom@4.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boom/-/boom-4.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boom@4.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boom/-/boom-4.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hoek",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bf45c22f12028bd9cf7d8ad2f512fc1db6275e2f686d801e2db48fd340669d9c022bdf8887d58e8e867c6281c2a1abf672caa7e053b3e0eae576ccb67660f099"
        }
      ],
      "purl": "pkg:npm/hoek@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hoek/-/hoek-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hoek@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hoek/-/hoek-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cryptiles",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a89fbb220f5ce25ec56e8c4aa8a4fd7b5b0d29fe"
        }
      ],
      "purl": "pkg:npm/cryptiles@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cryptiles/-/cryptiles-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cryptiles@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cryptiles/-/cryptiles-3.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boom",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "67905393a6517b8b575d0964a9fb66b005003695e6bb096c1793a8bfc4e1a0c6d04737464c0d67818456d7ad067b180e823b0538a273d0b621a0d8bed8030153"
        }
      ],
      "purl": "pkg:npm/boom@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boom/-/boom-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boom@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boom/-/boom-5.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sntp",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "14bd5be7c043aea4b7035d65274cc476727750e2aa5716b002417793b17409537b550df8699ad5f86f01675582f592fb372af0b16d28be2c2c583811b9562d26"
        }
      ],
      "purl": "pkg:npm/sntp@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sntp/-/sntp-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sntp@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sntp/-/sntp-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-signature",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9aecd925114772f3d95b65a60abb8f7c18fbace1"
        }
      ],
      "purl": "pkg:npm/http-signature@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-signature/-/http-signature-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-signature@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-signature/-/http-signature-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsprim",
      "version": "1.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "313e66bc1e5cc06e438bc1b7499c2e5c56acb6a2"
        }
      ],
      "purl": "pkg:npm/jsprim@1.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsprim@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extsprintf",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "96918440e3041a7a414f8c52e3c574eb3c3e1e05"
        }
      ],
      "purl": "pkg:npm/extsprintf@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extsprintf@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "verror",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a105ca17053af55d6e270c1f8288682e18da400"
        }
      ],
      "purl": "pkg:npm/verror@1.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/verror@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sshpk",
      "version": "1.13.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "512df6da6287144316dc4c18fe1cf1d940739be3"
        }
      ],
      "purl": "pkg:npm/sshpk@1.13.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sshpk/-/sshpk-1.13.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sshpk@1.13.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sshpk/-/sshpk-1.13.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "performance-now",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6309f4e0e5fa913ec1c69307ae364b4b377c9e7b"
        }
      ],
      "purl": "pkg:npm/performance-now@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/performance-now@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tough-cookie",
      "version": "2.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0b618a5565b6dea90bf3425d04d55edc475a7561"
        }
      ],
      "purl": "pkg:npm/tough-cookie@2.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tough-cookie@2.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.3.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0c85adcd4930d383389376dfd487294b6b6781710bdba6140f6334b4c0d4a6752bcf6860cd40650f9e5ae058dd2c63ef7c7c52eae96e196bda544aa005c55afa"
        }
      ],
      "purl": "pkg:npm/uuid@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uuid/-/uuid-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uuid/-/uuid-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "symbol-tree",
      "version": "3.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ae27db38f660a7ae2e1c3b7d1bc290819b8519e6"
        }
      ],
      "purl": "pkg:npm/symbol-tree@3.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/symbol-tree@3.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/symbol-tree/-/symbol-tree-3.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webidl-conversions",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "610f819b1b9381de945d95b7f880867f2a91c875d5943e46b50af9faa8e2356edb17472aaf35f9d341d55cf04ebe05dbe589f30ddfa1d33ab2bfad4a503efe4a"
        }
      ],
      "purl": "pkg:npm/webidl-conversions@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webidl-conversions@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "whatwg-url",
      "version": "4.8.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d2981aa9148c1e00a41c5a6131166ab4683bbcc0"
        }
      ],
      "purl": "pkg:npm/whatwg-url@4.8.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-4.8.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-url@4.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/whatwg-url/-/whatwg-url-4.8.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tr46",
      "version": "0.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8184fd347dac9cdc185992f3a6622e14b9d9ab6a"
        }
      ],
      "purl": "pkg:npm/tr46@0.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tr46@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tr46/-/tr46-0.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webidl-conversions",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "24534275e2a7bc6be7bc86611cc16ae0a5654871"
        }
      ],
      "purl": "pkg:npm/webidl-conversions@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webidl-conversions@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webidl-conversions/-/webidl-conversions-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xml-name-validator",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4d8b8f1eccd3419aa362061becef515e1e559635"
        }
      ],
      "purl": "pkg:npm/xml-name-validator@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xml-name-validator/-/xml-name-validator-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xml-name-validator@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xml-name-validator/-/xml-name-validator-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "jest-environment-node",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d488bc4612af2c246e986e8ae7671a099163d403"
        }
      ],
      "purl": "pkg:npm/jest-environment-node@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-environment-node/-/jest-environment-node-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-environment-node@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-environment-node/-/jest-environment-node-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-jasmine2",
      "version": "20.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fcc5b1411780d911d042902ef1859e852e60d5e1"
        }
      ],
      "purl": "pkg:npm/jest-jasmine2@20.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-jasmine2/-/jest-jasmine2-20.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-jasmine2@20.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-jasmine2/-/jest-jasmine2-20.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-diff",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "81f288fd9e675f0fb23c75f1c2b19445fe586617"
        }
      ],
      "purl": "pkg:npm/jest-diff@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-diff/-/jest-diff-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-diff@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-diff/-/jest-diff-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "diff",
      "version": "3.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42956e31312824c17b70ace2e9bbd6851ba55357d9a999efc954203613dac71b93630ca39ff8f5bfd7da96c790fee5d6c0f9cee7a4417f0b60e21fc44179ae70"
        }
      ],
      "purl": "pkg:npm/diff@3.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/diff/-/diff-3.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@3.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/diff/-/diff-3.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-matchers",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ca69db1c32db5a6f707fa5e0401abb55700dfd60"
        }
      ],
      "purl": "pkg:npm/jest-matchers@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-matchers/-/jest-matchers-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-matchers@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-matchers/-/jest-matchers-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-regex-util",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "85bbab5d133e44625b19faf8c6aa5122d085d762"
        }
      ],
      "purl": "pkg:npm/jest-regex-util@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-regex-util/-/jest-regex-util-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-regex-util@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-regex-util/-/jest-regex-util-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-snapshot",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5b847e1adb1a4d90852a7f9f125086e187c76566"
        }
      ],
      "purl": "pkg:npm/jest-snapshot@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-snapshot/-/jest-snapshot-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-snapshot@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-snapshot/-/jest-snapshot-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "p-map",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "afacca00230d8633c931397c29c147e258bffe092b5d67db0fa7de57c97a768447973963156189d803fa88a682257c9998050c38fb6f6d6ec45e46d63bfa4b10"
        }
      ],
      "purl": "pkg:npm/p-map@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-map/-/p-map-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-map@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-map/-/p-map-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-resolve",
      "version": "20.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9448b3e8b6bafc15479444c6499045b7ffe597a5"
        }
      ],
      "purl": "pkg:npm/jest-resolve@20.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-resolve/-/jest-resolve-20.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-resolve@20.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-resolve/-/jest-resolve-20.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-docblock",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "17bea984342cc33d83c50fbe1545ea0efaa44712"
        }
      ],
      "purl": "pkg:npm/jest-docblock@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-docblock/-/jest-docblock-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-docblock@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-docblock/-/jest-docblock-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-haste-map",
      "version": "20.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d0828042352fb998cc08d8bfd15350405ef8fc7f4a07aee1b0726a1a2c135900ba5cee40cecee42d69bee90fddc2e86f0d4bc00433813052b6fc5c19dec674ed"
        }
      ],
      "purl": "pkg:npm/jest-haste-map@20.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-haste-map/-/jest-haste-map-20.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-haste-map@20.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-haste-map/-/jest-haste-map-20.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "fb-watchman",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "54e9abf7dfa2f26cd9b1636c588c1afc05de5d58"
        }
      ],
      "purl": "pkg:npm/fb-watchman@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fb-watchman/-/fb-watchman-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fb-watchman@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fb-watchman/-/fb-watchman-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bser",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9ac78d3ed5d915804fd87acb158bc797147a1719"
        }
      ],
      "purl": "pkg:npm/bser@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bser/-/bser-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bser@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bser/-/bser-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-int64",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "87a9065cdb355d3182d8f94ce11188b825c68a3b"
        }
      ],
      "purl": "pkg:npm/node-int64@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-int64/-/node-int64-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-int64@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-int64/-/node-int64-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sane",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9610c452307a135d29c1fdfe2547034180c46775"
        }
      ],
      "purl": "pkg:npm/sane@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sane/-/sane-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sane@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sane/-/sane-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "exec-sh",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "68bb7de697b16ae815b507aba66139d7ee107d6acd737d38b9ecfb8ef8fa7d69cdf067841e9b6d07c177ea7f0deee56150c6c7ff57a76f143d1c8999e30ffdaa"
        }
      ],
      "purl": "pkg:npm/exec-sh@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/exec-sh/-/exec-sh-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/exec-sh@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/exec-sh/-/exec-sh-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "merge",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7531e39d4949c281a66b8c5a6e0265e8b05894da"
        }
      ],
      "purl": "pkg:npm/merge@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/merge/-/merge-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/merge@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/merge/-/merge-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fb-watchman",
      "version": "1.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a24cf47827f82d38fb59a69ad70b76e3b6ae7383"
        }
      ],
      "purl": "pkg:npm/fb-watchman@1.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fb-watchman/-/fb-watchman-1.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fb-watchman@1.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fb-watchman/-/fb-watchman-1.9.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bser",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "381116970b2a6deea5646dd15dd7278444b56169"
        }
      ],
      "purl": "pkg:npm/bser@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bser/-/bser-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bser@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bser/-/bser-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "walker",
      "version": "1.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2f7f9b8fd10d677262b18a884e28d19618e028fb"
        }
      ],
      "purl": "pkg:npm/walker@1.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/walker/-/walker-1.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/walker@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/walker/-/walker-1.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "makeerror",
      "version": "1.0.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e01a5c9109f2af79660e4e8b9587790184f5a96c"
        }
      ],
      "purl": "pkg:npm/makeerror@1.0.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/makeerror/-/makeerror-1.0.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/makeerror@1.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/makeerror/-/makeerror-1.0.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmpl",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "23640dd7b42d00433911140820e5cf440e521dd1"
        }
      ],
      "purl": "pkg:npm/tmpl@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tmpl/-/tmpl-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmpl@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tmpl/-/tmpl-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "watch",
      "version": "0.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "77798b2da0f9910d595f1ace5b0c2258521f21dc"
        }
      ],
      "purl": "pkg:npm/watch@0.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/watch/-/watch-0.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/watch@0.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/watch/-/watch-0.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "worker-farm",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4f9347e96aac77c330183e002bc041965532e8b9876aa8c43b2a3f6085047a066e8bafefe41a9d7bfff78f0c84dcf1a21983265a2d3a7b11418b92cd8613c537"
        }
      ],
      "purl": "pkg:npm/worker-farm@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/worker-farm/-/worker-farm-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/worker-farm@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/worker-farm/-/worker-farm-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "errno",
      "version": "0.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b896e23a9e5e8ba33871fc996abd3635fc9a1c7d"
        }
      ],
      "purl": "pkg:npm/errno@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/errno/-/errno-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/errno@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/errno/-/errno-0.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prr",
      "version": "0.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1a84b85908325501411853d0081ee3fa86e2926a"
        }
      ],
      "purl": "pkg:npm/prr@0.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/prr/-/prr-0.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prr@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/prr/-/prr-0.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jest-resolve-dependencies",
      "version": "20.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e14a7b717af0f2cb3667c549de40af017b1723a"
        }
      ],
      "purl": "pkg:npm/jest-resolve-dependencies@20.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-resolve-dependencies/-/jest-resolve-dependencies-20.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-resolve-dependencies@20.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-resolve-dependencies/-/jest-resolve-dependencies-20.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "jest-runtime",
      "version": "20.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a2c802219c4203f754df1404e490186169d124d8"
        }
      ],
      "purl": "pkg:npm/jest-runtime@20.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jest-runtime/-/jest-runtime-20.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jest-runtime@20.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jest-runtime/-/jest-runtime-20.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "yargs",
      "version": "7.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6ba318eb16961727f5d284f8ea003e8d6154d0c8"
        }
      ],
      "purl": "pkg:npm/yargs@7.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-7.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@7.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-7.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "32fc4b9fcdaf845fcdf7e73bb97cac2261f0ab0a"
        }
      ],
      "purl": "pkg:npm/camelcase@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cliui",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "120601537a916d29940f934da3b48d585a39213d"
        }
      ],
      "purl": "pkg:npm/cliui@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cliui/-/cliui-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cliui/-/cliui-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrap-ansi",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8fc3d284dd05794fe84973caecdd1cf824fdd85"
        }
      ],
      "purl": "pkg:npm/wrap-ansi@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-caller-file",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f702e63127e7e231c160a80c1554acb70d5047e5"
        }
      ],
      "purl": "pkg:npm/get-caller-file@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-caller-file@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-locale",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "20f9f17ae29ed345e8bde583b13d2009803c14d9"
        }
      ],
      "purl": "pkg:npm/os-locale@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-locale/-/os-locale-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-locale@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-locale/-/os-locale-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lcid",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "308accafa0bc483a3867b4b6f2b9506251d1b835"
        }
      ],
      "purl": "pkg:npm/lcid@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lcid/-/lcid-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lcid@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lcid/-/lcid-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "invert-kv",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "104a8e4aaca6d3d8cd157a8ef8bfab2d7a3ffdb6"
        }
      ],
      "purl": "pkg:npm/invert-kv@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/invert-kv/-/invert-kv-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/invert-kv@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/invert-kv/-/invert-kv-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-directory",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8c64ad5fd30dab1c976e2344ffe7f792a6a6df42"
        }
      ],
      "purl": "pkg:npm/require-directory@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-directory@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-module",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bba63ca861948994ff307736089e3b96026c2a4f"
        }
      ],
      "purl": "pkg:npm/which-module@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-module/-/which-module-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-module@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-module/-/which-module-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "y18n",
      "version": "3.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d15fba884c08679c0d77e88e7759e811e07fa41"
        }
      ],
      "purl": "pkg:npm/y18n@3.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/y18n/-/y18n-3.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/y18n/-/y18n-3.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "275ecf0d7ffe05c77e64e7c86e4cd94bf0e1228a"
        }
      ],
      "purl": "pkg:npm/yargs-parser@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "node-notifier",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2fa9e12605fa10009d44549d6fcd8a63dde0e4ff"
        }
      ],
      "purl": "pkg:npm/node-notifier@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-notifier/-/node-notifier-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-notifier@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-notifier/-/node-notifier-5.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "growly",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f10748cbe76af964b7c96c93c6bcc28af120c081"
        }
      ],
      "purl": "pkg:npm/growly@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/growly/-/growly-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/growly@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/growly/-/growly-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "shellwords",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc5c1251f42fab26e2202c19639f8301620f2cab163b7d50f752522a5dd462ff8ae5cd9044fce7d2acde73a40fbb541cf5e1d822d88fdcd749a8d56a7ad600c3"
        }
      ],
      "purl": "pkg:npm/shellwords@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/shellwords/-/shellwords-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shellwords@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/shellwords/-/shellwords-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string-length",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "56970fb1c38558e9e70b728bf3de269ac45adfac"
        }
      ],
      "purl": "pkg:npm/string-length@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string-length/-/string-length-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string-length@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string-length/-/string-length-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "throat",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fc463c569be5a89fac16d2cf78e81cf0f97b91054e5afd30a03f3b2935d51cf20013ce361464feae89312217bcc4850fd5c7e0ae4b746acd2f0cb8c388cb6bf3"
        }
      ],
      "purl": "pkg:npm/throat@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/throat/-/throat-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/throat@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/throat/-/throat-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-flexbugs-fixes",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d00b83f471b5132dffde7a8f5aef72a9feeb2f42823eee558230ec8dfe66cc472ea3d1ffcfc9dca3f7e58ca823b0e52b672a5af79308d244b8c4165e073cf697"
        }
      ],
      "purl": "pkg:npm/postcss-flexbugs-fixes@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-flexbugs-fixes/-/postcss-flexbugs-fixes-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-flexbugs-fixes@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-flexbugs-fixes/-/postcss-flexbugs-fixes-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-loader",
      "version": "2.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ad5c1890febfd6616f0bc534892bb87cc0baaf08c4ae6ff06a9919ee77f32ef11cf07e55bd7265f1c2c3306e7d794cdbf6f3b1dcb9f75bdd94acef11ca9c6f1"
        }
      ],
      "purl": "pkg:npm/postcss-loader@2.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-loader/-/postcss-loader-2.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-loader@2.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-loader/-/postcss-loader-2.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-load-config",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "539e9afc9ddc8620121ebf9d8c3673e0ce50d28a"
        }
      ],
      "purl": "pkg:npm/postcss-load-config@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-load-config/-/postcss-load-config-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-load-config@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-load-config/-/postcss-load-config-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cosmiconfig",
      "version": "2.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a23572f00053d81f2db95e64cfa5a7d8be7dc22c0909f052ecb1cabbf0c41dd4a874394e98ce19f8795d8c545e06f561106685841a5b5ab5d47e9ed18f325e4"
        }
      ],
      "purl": "pkg:npm/cosmiconfig@2.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-2.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cosmiconfig@2.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cosmiconfig/-/cosmiconfig-2.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-directory",
      "version": "0.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "61339b6f2475fc772fd9c9d83f5c8575dc154ae1"
        }
      ],
      "purl": "pkg:npm/is-directory@0.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-directory/-/is-directory-0.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-directory@0.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-directory/-/is-directory-0.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-from-string",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "529c9ccef27380adfec9a2f965b649bbee636418"
        }
      ],
      "purl": "pkg:npm/require-from-string@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/require-from-string/-/require-from-string-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-from-string@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/require-from-string/-/require-from-string-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-load-options",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b098b1559ddac2df04bc0bb375f99a5cfe2b6d8c"
        }
      ],
      "purl": "pkg:npm/postcss-load-options@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-load-options/-/postcss-load-options-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-load-options@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-load-options/-/postcss-load-options-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-load-plugins",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "745768116599aca2f009fad426b00175049d8d92"
        }
      ],
      "purl": "pkg:npm/postcss-load-plugins@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/postcss-load-plugins/-/postcss-load-plugins-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-load-plugins@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/postcss-load-plugins/-/postcss-load-plugins-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "promise",
      "version": "8.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e45d68b00a17647b6da711bf85ed6ed47208f450"
        }
      ],
      "purl": "pkg:npm/promise@8.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/promise/-/promise-8.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise@8.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/promise/-/promise-8.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "raf",
      "version": "3.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a433ff34c4405e84dfae109fc9f484c0900a2dac4153d780a4c7813c1d53903a2e666bcf7ab202955f254c077eb85f1989369597af5ed450b142b01dfd54e31b"
        }
      ],
      "purl": "pkg:npm/raf@3.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/raf/-/raf-3.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/raf@3.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/raf/-/raf-3.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-dev-utils",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9f2763e7bafa1a1b9c52254d2a479deec280f111"
        }
      ],
      "purl": "pkg:npm/react-dev-utils@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-dev-utils/-/react-dev-utils-4.2.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-dev-utils@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-dev-utils/-/react-dev-utils-4.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "address",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf9e6873028144baf206cdfde129b7bac853b417a0e9501eba4bbbbad4a84a7b092af29c9d7148c82eaf876ee7deb5f2c5282424104202fc8e9fb81251c4d88e"
        }
      ],
      "purl": "pkg:npm/address@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/address/-/address-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/address@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/address/-/address-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-port-alt",
      "version": "1.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a4d2f061d757a034ecf37c514260a98750f2b131"
        }
      ],
      "purl": "pkg:npm/detect-port-alt@1.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-port-alt/-/detect-port-alt-1.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-port-alt@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-port-alt/-/detect-port-alt-1.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filesize",
      "version": "3.5.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "647ee5a2e78a0680dbef21bd7ac9f553e7e0abb0739735ba3518b9feb31dc48674e5d8fb1850ff5dce6bab6083b7962af3a0b27d2615cb1e36e364103596f1d6"
        }
      ],
      "purl": "pkg:npm/filesize@3.5.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/filesize/-/filesize-3.5.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/filesize@3.5.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/filesize/-/filesize-3.5.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global-modules",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0ace91247f5d46a4e16ec346738f39ade01e146708ce706ef9ecf3efadf87170b15bab4c29b20a4eab1a71b71162086e03b46f7733a5d155b176a0675ebfb6e"
        }
      ],
      "purl": "pkg:npm/global-modules@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global-modules/-/global-modules-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global-modules@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global-modules/-/global-modules-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "global-prefix",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dbf743c6c14992593c655568cb66ed32c0122ebe"
        }
      ],
      "purl": "pkg:npm/global-prefix@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/global-prefix/-/global-prefix-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/global-prefix@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/global-prefix/-/global-prefix-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "expand-tilde",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "97e801aa052df02454de46b02bf621642cdc8502"
        }
      ],
      "purl": "pkg:npm/expand-tilde@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/expand-tilde@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/expand-tilde/-/expand-tilde-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "homedir-polyfill",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4c2bbc8a758998feebf5ed68580f76d46768b4bc"
        }
      ],
      "purl": "pkg:npm/homedir-polyfill@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/homedir-polyfill/-/homedir-polyfill-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/homedir-polyfill@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/homedir-polyfill/-/homedir-polyfill-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "parse-passwd",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6d5b934a456993b23d37f40a382d6f1666a8e5c6"
        }
      ],
      "purl": "pkg:npm/parse-passwd@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/parse-passwd/-/parse-passwd-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-passwd@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/parse-passwd/-/parse-passwd-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-windows",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "310db70f742d259a16a369202b51af84233310d9"
        }
      ],
      "purl": "pkg:npm/is-windows@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-windows@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-windows/-/is-windows-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-dir",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "79a40644c362be82f26effe739c9bb5382046f43"
        }
      ],
      "purl": "pkg:npm/resolve-dir@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-dir/-/resolve-dir-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-dir@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-dir/-/resolve-dir-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gzip-size",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "546188e9bdc337f673772f81660464b389dce520"
        }
      ],
      "purl": "pkg:npm/gzip-size@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/gzip-size/-/gzip-size-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gzip-size@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/gzip-size/-/gzip-size-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "duplexer",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ace6ff808c1ce66b57d1ebf97977acb02334cfc1"
        }
      ],
      "purl": "pkg:npm/duplexer@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/duplexer/-/duplexer-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-root",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "07b6c233bc394cd9d02ba15c966bd6660d6342d5"
        }
      ],
      "purl": "pkg:npm/is-root@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-root/-/is-root-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-root@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-root/-/is-root-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "opn",
      "version": "5.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "88f365ed2c8cf0bdf4466d6c8c674b2e17b21d5c3961755f8b748a589cc123b79fc51c07a237d1163c04fce2cceaaa7dc4960c81a6fc5a271353570fa18f87a6"
        }
      ],
      "purl": "pkg:npm/opn@5.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/opn/-/opn-5.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/opn@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/opn/-/opn-5.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-wsl",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1f16e4aa22b04d1336b66188a66af3c600c3a66d"
        }
      ],
      "purl": "pkg:npm/is-wsl@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-wsl/-/is-wsl-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-wsl@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-wsl/-/is-wsl-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-error-overlay",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5f382fa3016bc03a3a4d672927f59389aadbf5423a9610383cccd2ee7d63a0adec1df04104e40751cd14e2ee7b0fa0d63bdbc7bfa955496c7643f6267f2bf887"
        }
      ],
      "purl": "pkg:npm/react-error-overlay@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-error-overlay/-/react-error-overlay-3.0.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-error-overlay@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-error-overlay/-/react-error-overlay-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "recursive-readdir",
      "version": "2.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "90ef231d0778c5ce093c9a48d74e5c5422d13a99"
        }
      ],
      "purl": "pkg:npm/recursive-readdir@2.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/recursive-readdir/-/recursive-readdir-2.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/recursive-readdir@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/recursive-readdir/-/recursive-readdir-2.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "3.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2a4e4090b96b2db06a9d7df01055a62a77c9b774"
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sockjs-client",
      "version": "1.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5babe386b775e4cf14e7520911452654016c8b12"
        }
      ],
      "purl": "pkg:npm/sockjs-client@1.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sockjs-client/-/sockjs-client-1.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sockjs-client@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sockjs-client/-/sockjs-client-1.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eventsource",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0acede849ed7dd1ccc32c811bb11b944d4f29232"
        }
      ],
      "purl": "pkg:npm/eventsource@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eventsource/-/eventsource-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eventsource@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eventsource/-/eventsource-0.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "original",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9147f93fa1696d04be61e01bd50baeaca656bd3b"
        }
      ],
      "purl": "pkg:npm/original@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/original/-/original-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/original@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/original/-/original-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-parse",
      "version": "1.0.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0854860422afdcfefeb6c965c662d4800169927b"
        }
      ],
      "purl": "pkg:npm/url-parse@1.0.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url-parse/-/url-parse-1.0.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url-parse@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url-parse/-/url-parse-1.0.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "querystringify",
      "version": "0.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0cf7f84f9463ff0ae51c4c4b142d95be37724d9c"
        }
      ],
      "purl": "pkg:npm/querystringify@0.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/querystringify/-/querystringify-0.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystringify@0.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/querystringify/-/querystringify-0.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "requires-port",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "925d2601d39ac485e091cf0da5c6e694dc3dcaff"
        }
      ],
      "purl": "pkg:npm/requires-port@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/requires-port@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "faye-websocket",
      "version": "0.11.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f0efe18c4f56e4f40afc7e06c719fd5ee6188f38"
        }
      ],
      "purl": "pkg:npm/faye-websocket@0.11.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.11.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/faye-websocket@0.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.11.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "websocket-driver",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0caf9d2d755d93aee049d4bdd0d3fe2cca2a24eb"
        }
      ],
      "purl": "pkg:npm/websocket-driver@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/websocket-driver@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/websocket-driver/-/websocket-driver-0.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "driver"
      ]
    },
    {
      "group": "",
      "name": "http-parser-js",
      "version": "0.4.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ea1a04fb64adff0242e9974f297dd4c3cad271e1"
        }
      ],
      "purl": "pkg:npm/http-parser-js@0.4.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-parser-js/-/http-parser-js-0.4.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-parser-js@0.4.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-parser-js/-/http-parser-js-0.4.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "websocket-extensions",
      "version": "0.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ea1d49cc5e60734f4c39ef4af62692717e2483d48ce823e1c655d777699d32362de782f4388efd5db47b79546c5f236ca3e72a8898f84e2b8be6221db131b1a"
        }
      ],
      "purl": "pkg:npm/websocket-extensions@0.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/websocket-extensions/-/websocket-extensions-0.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/websocket-extensions@0.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/websocket-extensions/-/websocket-extensions-0.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json3",
      "version": "3.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3c0434743df93e2f5c42aee7b19bcb483575f4e1"
        }
      ],
      "purl": "pkg:npm/json3@3.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json3@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json3/-/json3-3.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-parse",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0d3d576d801f9903fae4cfe613a3802f1997cd9ff3d7e7b9ce4d9371229efca8986cd199c60b6db730b4991fec8e8a5ba4e5dc6e78aaede20a9a87099d45a513"
        }
      ],
      "purl": "pkg:npm/url-parse@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url-parse/-/url-parse-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url-parse@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url-parse/-/url-parse-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "querystringify",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6286242112c5b712fa654e526652bf6a13ff05cb"
        }
      ],
      "purl": "pkg:npm/querystringify@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/querystringify/-/querystringify-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/querystringify@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/querystringify/-/querystringify-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "style-loader",
      "version": "0.19.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f66c7db02f675f57603fde8c64e383a460ba9754734012132360f958986efb09dbad261528b1aecb5e172522d542287fd0616b3e98de96dfacfff55c650d84bf"
        }
      ],
      "purl": "pkg:npm/style-loader@0.19.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/style-loader/-/style-loader-0.19.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/style-loader@0.19.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/style-loader/-/style-loader-0.19.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sw-precache-webpack-plugin",
      "version": "0.11.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a695017e54eed575551493a519dc1da8da2dc5e0"
        }
      ],
      "purl": "pkg:npm/sw-precache-webpack-plugin@0.11.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sw-precache-webpack-plugin/-/sw-precache-webpack-plugin-0.11.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sw-precache-webpack-plugin@0.11.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sw-precache-webpack-plugin/-/sw-precache-webpack-plugin-0.11.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sw-precache",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b0a72d757fb9854c64a89ff50ccf3cb9b43e411bf2c3b0a7c56764f74f4dd8382fc4ca9cd6071016bc0bef3a5573cef0166080fcebd141dd22302d97745a2962"
        }
      ],
      "purl": "pkg:npm/sw-precache@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sw-precache/-/sw-precache-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sw-precache@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sw-precache/-/sw-precache-5.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dom-urls",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "001ddf81628cd1e706125c7176f53ccec55d918e"
        }
      ],
      "purl": "pkg:npm/dom-urls@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dom-urls/-/dom-urls-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-urls@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dom-urls/-/dom-urls-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "urijs",
      "version": "1.19.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42cda87579f48524f95523d58e98bbdc232ab5b0286a76a16aa581ba3194f88c8caccaa959c2210dec31411842926a98c6ecaf2020dc4ae2ddbf63bb9dc5811b"
        }
      ],
      "purl": "pkg:npm/urijs@1.19.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/urijs/-/urijs-1.19.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/urijs@1.19.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/urijs/-/urijs-1.19.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-promise",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39a5358478e025ff9bd0dcecc4283b35d2181110fa1f2fcf12614b4e3c3e6fae6c72e8ac1b72ade10a13bc9eba04190f679f3582bd24a685732a7c6788cf279e"
        }
      ],
      "purl": "pkg:npm/es6-promise@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-promise/-/es6-promise-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-promise@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-promise/-/es6-promise-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.defaults",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d09178716ffea4dde9e5fb7b37f6f0802274580c"
        }
      ],
      "purl": "pkg:npm/lodash.defaults@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.defaults@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.defaults/-/lodash.defaults-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.template",
      "version": "4.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e73a0385c8355591746e020b99679c690e68fba0"
        }
      ],
      "purl": "pkg:npm/lodash.template@4.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.template/-/lodash.template-4.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.template@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.template/-/lodash.template-4.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash._reinterpolate",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0ccf2d89166af03b3663c796538b75ac6e114d9d"
        }
      ],
      "purl": "pkg:npm/lodash._reinterpolate@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash._reinterpolate/-/lodash._reinterpolate-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash._reinterpolate@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash._reinterpolate/-/lodash._reinterpolate-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lodash.templatesettings",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2b4d4e95ba440d915ff08bc899e4553666713316"
        }
      ],
      "purl": "pkg:npm/lodash.templatesettings@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lodash.templatesettings/-/lodash.templatesettings-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.templatesettings@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lodash.templatesettings/-/lodash.templatesettings-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "meow",
      "version": "3.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "72cb668b425228290abbfa856892587308a801fb"
        }
      ],
      "purl": "pkg:npm/meow@3.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/meow/-/meow-3.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/meow@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/meow/-/meow-3.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase-keys",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "308beeaffdf28119051efa1d932213c91b8f92e7"
        }
      ],
      "purl": "pkg:npm/camelcase-keys@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase-keys@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7c1d16d679a1bbe59ca02cacecfb011e201f5a1f"
        }
      ],
      "purl": "pkg:npm/camelcase@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "map-obj",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d933ceb9205d82bdcf4886f6742bdc2b4dea146d"
        }
      ],
      "purl": "pkg:npm/map-obj@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/map-obj/-/map-obj-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/map-obj@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/map-obj/-/map-obj-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loud-rejection",
      "version": "1.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5b46f80147edee578870f086d04821cf998e551f"
        }
      ],
      "purl": "pkg:npm/loud-rejection@1.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loud-rejection/-/loud-rejection-1.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loud-rejection@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loud-rejection/-/loud-rejection-1.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "currently-unhandled",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "988df33feab191ef799a61369dd76c17adf957ea"
        }
      ],
      "purl": "pkg:npm/currently-unhandled@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/currently-unhandled/-/currently-unhandled-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/currently-unhandled@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/currently-unhandled/-/currently-unhandled-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-find-index",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df010aa1287e164bbda6f9723b0a96a1ec4187a1"
        }
      ],
      "purl": "pkg:npm/array-find-index@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-find-index/-/array-find-index-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-find-index@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-find-index/-/array-find-index-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "redent",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "cf916ab1fd5f1f16dfb20822dd6ec7f730c2afde"
        }
      ],
      "purl": "pkg:npm/redent@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/redent/-/redent-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/redent@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/redent/-/redent-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "indent-string",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8e2d48348742121b4a8218b7a137e9a52049dc80"
        }
      ],
      "purl": "pkg:npm/indent-string@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/indent-string/-/indent-string-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/indent-string@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/indent-string/-/indent-string-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-indent",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0c7962a6adefa7bbd4ac366460a638552ae1a0a2"
        }
      ],
      "purl": "pkg:npm/strip-indent@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-indent/-/strip-indent-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-indent@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-indent/-/strip-indent-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stdin",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b968c6b0a04384324902e8bf1a5df32579a450fe"
        }
      ],
      "purl": "pkg:npm/get-stdin@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stdin/-/get-stdin-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stdin@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stdin/-/get-stdin-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "trim-newlines",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5887966bb582a4503a41eb524f7d35011815a613"
        }
      ],
      "purl": "pkg:npm/trim-newlines@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/trim-newlines@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pretty-bytes",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b2bf82e7350d65c6c33aa95aaa5a4f6327f61cd9"
        }
      ],
      "purl": "pkg:npm/pretty-bytes@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pretty-bytes/-/pretty-bytes-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pretty-bytes@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pretty-bytes/-/pretty-bytes-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sw-toolbox",
      "version": "3.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "26df1d1c70348658e4dea2884319149b7b3183b5"
        }
      ],
      "purl": "pkg:npm/sw-toolbox@3.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sw-toolbox/-/sw-toolbox-3.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sw-toolbox@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sw-toolbox/-/sw-toolbox-3.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-to-regexp",
      "version": "1.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "59fde0f435badacba103a84e9d3bc64e96b9937d"
        }
      ],
      "purl": "pkg:npm/path-to-regexp@1.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-1.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-to-regexp@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-1.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serviceworker-cache-polyfill",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "de19ee73bef21ab3c0740a37b33db62464babdeb"
        }
      ],
      "purl": "pkg:npm/serviceworker-cache-polyfill@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serviceworker-cache-polyfill/-/serviceworker-cache-polyfill-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serviceworker-cache-polyfill@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serviceworker-cache-polyfill/-/serviceworker-cache-polyfill-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "update-notifier",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8f92c515482bd6831b7c93013e70f87552c7cf5a"
        }
      ],
      "purl": "pkg:npm/update-notifier@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/update-notifier/-/update-notifier-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/update-notifier@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/update-notifier/-/update-notifier-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "boxen",
      "version": "0.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8364d4248ac34ff0ef1b2f2bf49a6c60ce0d81b6"
        }
      ],
      "purl": "pkg:npm/boxen@0.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/boxen/-/boxen-0.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boxen@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/boxen/-/boxen-0.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-align",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "2f0c1658829739add5ebb15e6b0c6e3423f016ba"
        }
      ],
      "purl": "pkg:npm/ansi-align@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-align/-/ansi-align-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-align@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-align/-/ansi-align-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cli-boxes",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4fa917c3e59c94a004cd61f8ee509da651687143"
        }
      ],
      "purl": "pkg:npm/cli-boxes@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cli-boxes/-/cli-boxes-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cli-boxes@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cli-boxes/-/cli-boxes-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filled-array",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c3c4f6c663b923459a9aa29912d2d031f1507f84"
        }
      ],
      "purl": "pkg:npm/filled-array@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/filled-array/-/filled-array-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/filled-array@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/filled-array/-/filled-array-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "widest-line",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0c09c85c2a94683d0d7eaf8ee097d564bf0e105c"
        }
      ],
      "purl": "pkg:npm/widest-line@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/widest-line/-/widest-line-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/widest-line@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/widest-line/-/widest-line-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "configstore",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "737a3a7036e9886102aa6099e47bb33ab1aba1a1"
        }
      ],
      "purl": "pkg:npm/configstore@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/configstore/-/configstore-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/configstore@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/configstore/-/configstore-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dot-prop",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1b708af094a49c9a0e7dbcad790aba539dac1177"
        }
      ],
      "purl": "pkg:npm/dot-prop@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dot-prop/-/dot-prop-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dot-prop@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dot-prop/-/dot-prop-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-obj",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3e4729ac1f5fde025cd7d83a896dab9f4f67db0f"
        }
      ],
      "purl": "pkg:npm/is-obj@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-obj/-/is-obj-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-obj@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-obj/-/is-obj-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "67e2e863797215530dff318e5bf9dcebfd47b21a"
        }
      ],
      "purl": "pkg:npm/uuid@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uuid/-/uuid-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uuid/-/uuid-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "write-file-atomic",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f807a4f0b1d9e913ae7a48112e6cc3af1991b45f"
        }
      ],
      "purl": "pkg:npm/write-file-atomic@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/write-file-atomic@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-1.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slide",
      "version": "1.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "56eb027d65b4d2dce6cb2e2d32c4d4afc9e1d707"
        }
      ],
      "purl": "pkg:npm/slide@1.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slide/-/slide-1.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slide@1.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slide/-/slide-1.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xdg-basedir",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "edbc903cc385fc04523d966a335504b5504d1bd2"
        }
      ],
      "purl": "pkg:npm/xdg-basedir@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xdg-basedir/-/xdg-basedir-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xdg-basedir@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xdg-basedir/-/xdg-basedir-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-npm",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f2fb63a65e4905b406c86072765a1a4dc793b9f4"
        }
      ],
      "purl": "pkg:npm/is-npm@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-npm/-/is-npm-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-npm@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-npm/-/is-npm-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "latest-version",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "56f8d6139620847b8017f8f1f4d78e211324168b"
        }
      ],
      "purl": "pkg:npm/latest-version@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/latest-version/-/latest-version-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/latest-version@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/latest-version/-/latest-version-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "package-json",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0d15bd67d1cbbddbb2ca222ff2edb86bcb31a8bb"
        }
      ],
      "purl": "pkg:npm/package-json@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/package-json/-/package-json-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/package-json@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/package-json/-/package-json-2.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "got",
      "version": "5.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5f81635a61e4a6589f180569ea4e381680a51f35"
        }
      ],
      "purl": "pkg:npm/got@5.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/got/-/got-5.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/got@5.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/got/-/got-5.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-error-class",
      "version": "3.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "06be7abef947a3f14a30fd610671d401bca8b7b6"
        }
      ],
      "purl": "pkg:npm/create-error-class@3.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/create-error-class/-/create-error-class-3.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/create-error-class@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/create-error-class/-/create-error-class-3.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "capture-stack-trace",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4a6fa07399c26bba47f0b2496b4d0fb408c5550d"
        }
      ],
      "purl": "pkg:npm/capture-stack-trace@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/capture-stack-trace/-/capture-stack-trace-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/capture-stack-trace@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/capture-stack-trace/-/capture-stack-trace-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-redirect",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1d03dded53bd8db0f30c26e4f95d36fc7c87dc24"
        }
      ],
      "purl": "pkg:npm/is-redirect@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-redirect/-/is-redirect-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-redirect@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-redirect/-/is-redirect-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-retry-allowed",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "11a060568b67339444033d0125a61a20d564fb34"
        }
      ],
      "purl": "pkg:npm/is-retry-allowed@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-retry-allowed/-/is-retry-allowed-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-retry-allowed@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-retry-allowed/-/is-retry-allowed-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lowercase-keys",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e3366b39e7f5457e35f1324bdf6f88d0bfc7306"
        }
      ],
      "purl": "pkg:npm/lowercase-keys@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lowercase-keys@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-status-codes",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5ae5541d024645d32a58fcddc9ceecea7ae3ac2f"
        }
      ],
      "purl": "pkg:npm/node-status-codes@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-status-codes/-/node-status-codes-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-status-codes@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-status-codes/-/node-status-codes-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "read-all-stream",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "35c3e177f2078ef789ee4bfafa4373074eaef4fa"
        }
      ],
      "purl": "pkg:npm/read-all-stream@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/read-all-stream/-/read-all-stream-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-all-stream@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/read-all-stream/-/read-all-stream-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "timed-out",
      "version": "3.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "95860bfcc5c76c277f8f8326fd0f5b2e20eba217"
        }
      ],
      "purl": "pkg:npm/timed-out@3.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/timed-out/-/timed-out-3.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/timed-out@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/timed-out/-/timed-out-3.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unzip-response",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b984f0877fc0a89c2c773cc1ef7b5b232b5b06fe"
        }
      ],
      "purl": "pkg:npm/unzip-response@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unzip-response/-/unzip-response-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unzip-response@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unzip-response/-/unzip-response-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-parse-lax",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7af8f303645e9bd79a272e7a14ac68bc0609da73"
        }
      ],
      "purl": "pkg:npm/url-parse-lax@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url-parse-lax/-/url-parse-lax-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url-parse-lax@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url-parse-lax/-/url-parse-lax-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "registry-auth-token",
      "version": "3.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fb0d3289ee0d9ada2cbb52af5dfe66cb070d3006"
        }
      ],
      "purl": "pkg:npm/registry-auth-token@3.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/registry-auth-token/-/registry-auth-token-3.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/registry-auth-token@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/registry-auth-token/-/registry-auth-token-3.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rc",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d8ce9cb57e8d64d9c7badd9876c7c34cbe3c7077"
        }
      ],
      "purl": "pkg:npm/rc@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rc/-/rc-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rc@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rc/-/rc-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "registry-url",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3d4ef870f73dde1d77f0cf9a381432444e174942"
        }
      ],
      "purl": "pkg:npm/registry-url@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/registry-url/-/registry-url-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/registry-url@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/registry-url/-/registry-url-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lazy-req",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bdaebead30f8d824039ce0ce149d4daa07ba1fac"
        }
      ],
      "purl": "pkg:npm/lazy-req@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/lazy-req/-/lazy-req-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lazy-req@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/lazy-req/-/lazy-req-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver-diff",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4bbb8437c8d37e4b0cf1a68fd726ec6d645d6d36"
        }
      ],
      "purl": "pkg:npm/semver-diff@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver-diff/-/semver-diff-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver-diff@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver-diff/-/semver-diff-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "url-loader",
      "version": "0.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "877a9ff53367e77069b974d37290be51e86246b9740afe3962bff159ac80a63c3a1bc060d9d1a47bbac8c03437f6989c896096ac2f968aa2e33a1dd2529f67d1"
        }
      ],
      "purl": "pkg:npm/url-loader@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/url-loader/-/url-loader-0.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/url-loader@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/url-loader/-/url-loader-0.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack",
      "version": "3.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e595cb596b0ca87285af9cb4377128e48222b3178479101a8cdab89842dbfd610b391eecadd6d09363795e2c8dcb603f020be5477026781099256f251eba256f"
        }
      ],
      "purl": "pkg:npm/webpack@3.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack/-/webpack-3.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack@3.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack/-/webpack-3.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-dynamic-import",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c752bd210bef679501b6c6cb7fc84f8f47158cc4"
        }
      ],
      "purl": "pkg:npm/acorn-dynamic-import@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn-dynamic-import/-/acorn-dynamic-import-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-dynamic-import@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn-dynamic-import/-/acorn-dynamic-import-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "enhanced-resolve",
      "version": "3.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0421e339fd71419b3da13d129b3979040230476e"
        }
      ],
      "purl": "pkg:npm/enhanced-resolve@3.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-3.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/enhanced-resolve@3.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/enhanced-resolve/-/enhanced-resolve-3.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "memory-fs",
      "version": "0.4.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3a9a20b8462523e447cfbc7e8bb80ed667bfc552"
        }
      ],
      "purl": "pkg:npm/memory-fs@0.4.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/memory-fs/-/memory-fs-0.4.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/memory-fs@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/memory-fs/-/memory-fs-0.4.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tapable",
      "version": "0.2.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "99372a5c999bf2df160afc0d74bed4f47948cd22"
        }
      ],
      "purl": "pkg:npm/tapable@0.2.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tapable/-/tapable-0.2.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tapable@0.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tapable/-/tapable-0.2.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escope",
      "version": "3.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "e01975e812781a163a6dadfdd80398dc64c889c3"
        }
      ],
      "purl": "pkg:npm/escope@3.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/escope/-/escope-3.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escope@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/escope/-/escope-3.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-map",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9136e0503dcc06a301690f0bb14ff4e364e949f0"
        }
      ],
      "purl": "pkg:npm/es6-map@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-map/-/es6-map-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-map@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-map/-/es6-map-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "d",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "754bb5bfe55451da69a58b94d45f4c5b0462d58f"
        }
      ],
      "purl": "pkg:npm/d@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/d/-/d-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/d@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/d/-/d-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es5-ext",
      "version": "0.10.35",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "18ee858ce6a3c45c7d79e91c15fcca9ec568494f"
        }
      ],
      "purl": "pkg:npm/es5-ext@0.10.35",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.35.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es5-ext@0.10.35",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.35.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-iterator",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a7de889141a05a94b0854403b2d0a0fbfa98f3b7"
        }
      ],
      "purl": "pkg:npm/es6-iterator@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-iterator/-/es6-iterator-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-iterator@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-iterator/-/es6-iterator-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-symbol",
      "version": "3.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bf00ef4fdab6ba1b46ecb7b629b4c7ed5715cc77"
        }
      ],
      "purl": "pkg:npm/es6-symbol@3.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-3.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-symbol@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-3.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-set",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d2b3ec5d4d800ced818db538d28974db0a73ccb1"
        }
      ],
      "purl": "pkg:npm/es6-set@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-set/-/es6-set-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-set@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-set/-/es6-set-0.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-emitter",
      "version": "0.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "df8c69eef1647923c7157b9ce83840610b02cc39"
        }
      ],
      "purl": "pkg:npm/event-emitter@0.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-emitter@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "es6-weak-map",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5e3ab32251ffd1538a1f8e5ffa1357772f92d96f"
        }
      ],
      "purl": "pkg:npm/es6-weak-map@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/es6-weak-map/-/es6-weak-map-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-weak-map@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/es6-weak-map/-/es6-weak-map-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "interpret",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "820cdd588b868ffb191a809506d6c9c8f212b1b0"
        }
      ],
      "purl": "pkg:npm/interpret@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/interpret/-/interpret-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/interpret@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/interpret/-/interpret-1.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "json-loader",
      "version": "0.5.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "40b3ecf038fb9677f77b74184b5ce40a8fb8670a8e885f5dfe7667628cd3212c575827cdb3dcae932e6b270e3f5b7e2cecf39a3656d999019a0793625c26cfe3"
        }
      ],
      "purl": "pkg:npm/json-loader@0.5.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/json-loader/-/json-loader-0.5.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-loader@0.5.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/json-loader/-/json-loader-0.5.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loader-runner",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f482aea82d543e07921700d5a46ef26fdac6b8a2"
        }
      ],
      "purl": "pkg:npm/loader-runner@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loader-runner/-/loader-runner-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loader-runner@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loader-runner/-/loader-runner-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-libs-browser",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a3a59ec97024985b46e958379646f96c4b616646"
        }
      ],
      "purl": "pkg:npm/node-libs-browser@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-libs-browser/-/node-libs-browser-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-libs-browser@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-libs-browser/-/node-libs-browser-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-browserify",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "63fc4ccee5d2d7763d26bbf8601078e6c2e0044f"
        }
      ],
      "purl": "pkg:npm/os-browserify@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-browserify/-/os-browserify-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-browserify@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-browserify/-/os-browserify-0.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "timers-browserify",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b99621c94dc45fc3bb1d03fe27d7d3558c2cabdd15afaf313c4168ef2ad522623162f1e0ba404480e07f4a01a8a2b5954f318cff767ec143676e803833c8d6ae"
        }
      ],
      "purl": "pkg:npm/timers-browserify@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/timers-browserify/-/timers-browserify-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/timers-browserify@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/timers-browserify/-/timers-browserify-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uglifyjs-webpack-plugin",
      "version": "0.4.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b951f4abb6bd617e66f63eb891498e391763e309"
        }
      ],
      "purl": "pkg:npm/uglifyjs-webpack-plugin@0.4.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/uglifyjs-webpack-plugin/-/uglifyjs-webpack-plugin-0.4.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uglifyjs-webpack-plugin@0.4.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/uglifyjs-webpack-plugin/-/uglifyjs-webpack-plugin-0.4.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "watchpack",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4a1472bcbb952bd0a9bb4036801f954dfb39faac"
        }
      ],
      "purl": "pkg:npm/watchpack@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/watchpack/-/watchpack-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/watchpack@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/watchpack/-/watchpack-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "binary-extensions",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "9aeb9a6c5e88638aad171e167f5900abe24835d0"
        }
      ],
      "purl": "pkg:npm/binary-extensions@1.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-1.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/binary-extensions@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/binary-extensions/-/binary-extensions-1.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a7e38139c105b86d31d7bd09af487c2a6ee897b5db83e91ae39b666d50419bcab8a0fa7507dedfd00f8338fd95d5898e79e930694606641cb0f1dc9c4fc318b"
        }
      ],
      "purl": "pkg:npm/fsevents@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fsevents/-/fsevents-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fsevents/-/fsevents-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "nan",
      "version": "2.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d95bf721ec877e08db276ed3fc6eb78f9083ad46"
        }
      ],
      "purl": "pkg:npm/nan@2.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/nan/-/nan-2.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nan@2.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/nan/-/nan-2.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-pre-gyp",
      "version": "0.6.36",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "db604112cb74e0d477554e9b505b17abddfab786"
        }
      ],
      "purl": "pkg:npm/node-pre-gyp@0.6.36",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-pre-gyp/-/node-pre-gyp-0.6.36.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-pre-gyp@0.6.36",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-pre-gyp/-/node-pre-gyp-0.6.36.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "8.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6299a9055b1cefc969ff7e79c1d918dceb22c360"
        }
      ],
      "purl": "pkg:npm/yargs@8.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-8.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@8.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-8.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "camelcase",
      "version": "4.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d545635be1e33c542649c69173e5de6acfae34dd"
        }
      ],
      "purl": "pkg:npm/camelcase@4.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-4.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/camelcase/-/camelcase-4.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "os-locale",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "decb251b7cc96c461c682e18540bc3a2b8c6c5ceedbfa2950139cb3d938d8a58ec52772f8a17bd050a15084b34459d6499fe0793d381aa565f259588e066a728"
        }
      ],
      "purl": "pkg:npm/os-locale@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/os-locale/-/os-locale-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/os-locale@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/os-locale/-/os-locale-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "execa",
      "version": "0.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "944becd34cc41ee32a63a9faf27ad5a65fc59777"
        }
      ],
      "purl": "pkg:npm/execa@0.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/execa/-/execa-0.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/execa@0.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/execa/-/execa-0.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stream",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8e943d1358dc37555054ecbe2edb05aa174ede14"
        }
      ],
      "purl": "pkg:npm/get-stream@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stream/-/get-stream-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "npm-run-path",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "35a9232dfa35d7067b4cb2ddf2357b1871536c5f"
        }
      ],
      "purl": "pkg:npm/npm-run-path@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-run-path@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "path-key",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "411cadb574c5a140d3a4b1910d40d80cc9f40b40"
        }
      ],
      "purl": "pkg:npm/path-key@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/path-key/-/path-key-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-key@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/path-key/-/path-key-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-finally",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3fbcfb15b899a44123b34b6dcc18b724336a2cae"
        }
      ],
      "purl": "pkg:npm/p-finally@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/p-finally@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-eof",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb43ff5598a6eb05d89b59fcd129c983313606bf"
        }
      ],
      "purl": "pkg:npm/strip-eof@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-eof/-/strip-eof-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-eof@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-eof/-/strip-eof-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mem",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "5edd52b485ca1d900fe64895505399a0dfa45f76"
        }
      ],
      "purl": "pkg:npm/mem@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/mem/-/mem-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mem@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/mem/-/mem-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-module",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d9ef07dce77b9902b8a3a8fa4b31c3e3f7e6e87a"
        }
      ],
      "purl": "pkg:npm/which-module@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/which-module/-/which-module-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-module@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/which-module/-/which-module-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "7.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8d0ac42f16ea55debd332caf4c4038b3e3f5dfd9"
        }
      ],
      "purl": "pkg:npm/yargs-parser@7.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-7.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-7.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "webpack-dev-server",
      "version": "2.9.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b61aea0b41101284a35de6203faa545dc50267e2cdacab033e7fa622d2e79f9572c8d64e24a774ea150fe6faa46302fc9d6597b228b4968485f4d1cd71c4faa3"
        }
      ],
      "purl": "pkg:npm/webpack-dev-server@2.9.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-dev-server/-/webpack-dev-server-2.9.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-dev-server@2.9.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-dev-server/-/webpack-dev-server-2.9.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ansi-html",
      "version": "0.0.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "813584021962a9e9e6fd039f940d12f56ca7859e"
        }
      ],
      "purl": "pkg:npm/ansi-html@0.0.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ansi-html/-/ansi-html-0.0.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansi-html@0.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ansi-html/-/ansi-html-0.0.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bonjour",
      "version": "3.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "8e890a183d8ee9a2393b3844c691a42bcf7bc9f5"
        }
      ],
      "purl": "pkg:npm/bonjour@3.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bonjour/-/bonjour-3.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bonjour@3.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bonjour/-/bonjour-3.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "array-flatten",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "426bb9da84090c1838d812c8150af20a8331e296"
        }
      ],
      "purl": "pkg:npm/array-flatten@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/array-flatten/-/array-flatten-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-flatten@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/array-flatten/-/array-flatten-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deep-equal",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5d260292b660e084eff4cdbc9f08ad3247448b5"
        }
      ],
      "purl": "pkg:npm/deep-equal@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/deep-equal/-/deep-equal-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-equal@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/deep-equal/-/deep-equal-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dns-equal",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b39e7f1da6eb0a75ba9c17324b34753c47e0654d"
        }
      ],
      "purl": "pkg:npm/dns-equal@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dns-equal/-/dns-equal-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dns-equal@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dns-equal/-/dns-equal-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dns-txt",
      "version": "2.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b91d806f5d27188e4ab3e7d107d881a1cc4642b6"
        }
      ],
      "purl": "pkg:npm/dns-txt@2.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dns-txt/-/dns-txt-2.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dns-txt@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dns-txt/-/dns-txt-2.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-indexof",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e3face120f3a8e2bed3d378e5144fad6324ed586b54eb47f3a4a824990f2abce16261dcbbae8a984160937e7e6e71b9f224e17005704c2d7bff16cc2f087ffd6"
        }
      ],
      "purl": "pkg:npm/buffer-indexof@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-indexof/-/buffer-indexof-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-indexof@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-indexof/-/buffer-indexof-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multicast-dns",
      "version": "6.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "6e7de86a570872ab17058adea7160bbeca814dde"
        }
      ],
      "purl": "pkg:npm/multicast-dns@6.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/multicast-dns/-/multicast-dns-6.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multicast-dns@6.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multicast-dns/-/multicast-dns-6.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "dns-packet",
      "version": "1.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "90df838df185edd24650bee759192d2fd675f2dd6b58fdda425c99758f17969bd4dcd73a19e153400a5fb5c8ed58ac4065f8a0819486ac2128b33360be7a700e"
        }
      ],
      "purl": "pkg:npm/dns-packet@1.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/dns-packet/-/dns-packet-1.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dns-packet@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/dns-packet/-/dns-packet-1.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ip",
      "version": "1.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bdded70114290828c0a039e72ef25f5aaec4354a"
        }
      ],
      "purl": "pkg:npm/ip@1.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ip/-/ip-1.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ip@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ip/-/ip-1.1.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "thunky",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bf30146824e2b6e67b0f2d7a4ac8beb26908684e"
        }
      ],
      "purl": "pkg:npm/thunky@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/thunky/-/thunky-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/thunky@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/thunky/-/thunky-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "multicast-dns-service-types",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "899f11d9686e5e05cb91b35d5f0e63b773cfc901"
        }
      ],
      "purl": "pkg:npm/multicast-dns-service-types@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/multicast-dns-service-types/-/multicast-dns-service-types-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/multicast-dns-service-types@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/multicast-dns-service-types/-/multicast-dns-service-types-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compression",
      "version": "1.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "eff2603efc2e22cf86f35d2eb93589f9875373db"
        }
      ],
      "purl": "pkg:npm/compression@1.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compression/-/compression-1.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compression@1.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compression/-/compression-1.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "compressible",
      "version": "2.0.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "c59a5c99db76767e9876500e271ef63b3493bd66"
        }
      ],
      "purl": "pkg:npm/compressible@2.0.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/compressible/-/compressible-2.0.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compressible@2.0.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/compressible/-/compressible-2.0.12.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "on-headers",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "928f5d0f470d49342651ea6794b0857c100693f7"
        }
      ],
      "purl": "pkg:npm/on-headers@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/on-headers@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/on-headers/-/on-headers-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "connect-history-api-fallback",
      "version": "1.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b06873934bc5e344fef611a196a6faae0aee015a"
        }
      ],
      "purl": "pkg:npm/connect-history-api-fallback@1.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/connect-history-api-fallback/-/connect-history-api-fallback-1.5.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/connect-history-api-fallback@1.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/connect-history-api-fallback/-/connect-history-api-fallback-1.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "del",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "53ecf699ffcbcb39637691ab13baf160819766e5"
        }
      ],
      "purl": "pkg:npm/del@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/del/-/del-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/del@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/del/-/del-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globby",
      "version": "6.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f5a6d70e8395e21c858fb0489d64df02424d506c"
        }
      ],
      "purl": "pkg:npm/globby@6.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/globby/-/globby-6.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globby@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/globby/-/globby-6.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "html-entities",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "0df29351f0721163515dfb9e5543e5f6eed5162f"
        }
      ],
      "purl": "pkg:npm/html-entities@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/html-entities/-/html-entities-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-entities@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/html-entities/-/html-entities-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-proxy-middleware",
      "version": "0.17.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "642e8848851d66f09d4f124912846dbaeb41b833"
        }
      ],
      "purl": "pkg:npm/http-proxy-middleware@0.17.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-0.17.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy-middleware@0.17.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-proxy-middleware/-/http-proxy-middleware-0.17.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "middleware"
      ]
    },
    {
      "group": "",
      "name": "http-proxy",
      "version": "1.16.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "06dff292952bf64dbe8471fa9df73066d4f37742"
        }
      ],
      "purl": "pkg:npm/http-proxy@1.16.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-proxy/-/http-proxy-1.16.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy@1.16.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-proxy/-/http-proxy-1.16.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eventemitter3",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "1c86991d816ad1e504750e73874224ecf3bec508"
        }
      ],
      "purl": "pkg:npm/eventemitter3@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eventemitter3@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eventemitter3/-/eventemitter3-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-glob",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "7ba5ae24217804ac70707b96922567486cc3e84a"
        }
      ],
      "purl": "pkg:npm/is-glob@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-glob/-/is-glob-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-glob/-/is-glob-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-extglob",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a88c02535791f02ed37c76a1b9ea9773c833f8c2"
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "import-local",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b1179572aacdc11c6a91009fb430dbcab5f668a8"
        }
      ],
      "purl": "pkg:npm/import-local@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/import-local/-/import-local-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/import-local@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/import-local/-/import-local-0.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-cwd",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "00a9f7387556e27038eae232caa372a6a59b665a"
        }
      ],
      "purl": "pkg:npm/resolve-cwd@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-cwd/-/resolve-cwd-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-cwd@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-cwd/-/resolve-cwd-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "resolve-from",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "b22c7af7d9d6881bc8b6e653335eebcb0a188748"
        }
      ],
      "purl": "pkg:npm/resolve-from@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/resolve-from/-/resolve-from-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/resolve-from/-/resolve-from-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "internal-ip",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "ae9fbf93b984878785d50a8de1b356956058cf5c"
        }
      ],
      "purl": "pkg:npm/internal-ip@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/internal-ip/-/internal-ip-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/internal-ip@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/internal-ip/-/internal-ip-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "killable",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "da8b84bd47de5395878f95d64d02f2449fe05e6b"
        }
      ],
      "purl": "pkg:npm/killable@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/killable/-/killable-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/killable@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/killable/-/killable-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "loglevel",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "189078c94ab9053ee215a0acdbf24244ea0f6502"
        }
      ],
      "purl": "pkg:npm/loglevel@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/loglevel/-/loglevel-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loglevel@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/loglevel/-/loglevel-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "portfinder",
      "version": "1.0.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bb32ecd87c27104ae6ee44b5a3ccbf0ebb1aede9"
        }
      ],
      "purl": "pkg:npm/portfinder@1.0.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/portfinder/-/portfinder-1.0.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/portfinder@1.0.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/portfinder/-/portfinder-1.0.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "selfsigned",
      "version": "1.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "bf8cb7b83256c4551e31347c6311778db99eec52"
        }
      ],
      "purl": "pkg:npm/selfsigned@1.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/selfsigned/-/selfsigned-1.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/selfsigned@1.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/selfsigned/-/selfsigned-1.10.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-forge",
      "version": "0.6.33",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "463811879f573d45155ad6a9f43dc296e8e85ebc"
        }
      ],
      "purl": "pkg:npm/node-forge@0.6.33",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-forge/-/node-forge-0.6.33.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-forge@0.6.33",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-forge/-/node-forge-0.6.33.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serve-index",
      "version": "1.9.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d3768d69b1e7d82e5ce050fff5b453bea12a9239"
        }
      ],
      "purl": "pkg:npm/serve-index@1.9.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serve-index/-/serve-index-1.9.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serve-index@1.9.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serve-index/-/serve-index-1.9.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "batch",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "dc34314f4e679318093fc760272525f94bf25c16"
        }
      ],
      "purl": "pkg:npm/batch@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/batch/-/batch-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/batch@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/batch/-/batch-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sockjs",
      "version": "0.3.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d9b289316ca7df77595ef299e075f0f937eb4207"
        }
      ],
      "purl": "pkg:npm/sockjs@0.3.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/sockjs/-/sockjs-0.3.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sockjs@0.3.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/sockjs/-/sockjs-0.3.18.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "faye-websocket",
      "version": "0.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4e492f8d04dfb6f89003507f6edbf2d501e7c6f4"
        }
      ],
      "purl": "pkg:npm/faye-websocket@0.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/faye-websocket@0.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdy",
      "version": "3.4.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "42ff41ece5cc0f99a3a6c28aabb73f5c3b03acbc"
        }
      ],
      "purl": "pkg:npm/spdy@3.4.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdy/-/spdy-3.4.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdy@3.4.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdy/-/spdy-3.4.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "handle-thing",
      "version": "1.2.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fd7aad726bf1a5fd16dfc29b2f7a6601d27139c4"
        }
      ],
      "purl": "pkg:npm/handle-thing@1.2.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/handle-thing/-/handle-thing-1.2.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/handle-thing@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/handle-thing/-/handle-thing-1.2.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "http-deceiver",
      "version": "1.2.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "fa7168944ab9a519d337cb0bec7284dc3e723d87"
        }
      ],
      "purl": "pkg:npm/http-deceiver@1.2.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/http-deceiver/-/http-deceiver-1.2.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-deceiver@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/http-deceiver/-/http-deceiver-1.2.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "select-hose",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "625d8658f865af43ec962bfc376a37359a4994ca"
        }
      ],
      "purl": "pkg:npm/select-hose@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/select-hose/-/select-hose-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/select-hose@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/select-hose/-/select-hose-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdy-transport",
      "version": "2.0.20",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "735e72054c486b2354fe89e702256004a39ace4d"
        }
      ],
      "purl": "pkg:npm/spdy-transport@2.0.20",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdy-transport/-/spdy-transport-2.0.20.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdy-transport@2.0.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdy-transport/-/spdy-transport-2.0.20.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "detect-node",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "a2033c09cc8e158d37748fbde7507832bd6ce127"
        }
      ],
      "purl": "pkg:npm/detect-node@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/detect-node/-/detect-node-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/detect-node@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/detect-node/-/detect-node-2.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "hpack.js",
      "version": "2.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "87774c0949e513f42e84575b3c45681fade2a0b2"
        }
      ],
      "purl": "pkg:npm/hpack.js@2.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/hpack.js/-/hpack.js-2.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hpack.js@2.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/hpack.js/-/hpack.js-2.1.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "obuf",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "104124b6c602c6796881a042541d36db43a5264e"
        }
      ],
      "purl": "pkg:npm/obuf@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/obuf/-/obuf-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/obuf@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/obuf/-/obuf-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wbuf",
      "version": "1.7.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d697b99f1f59512df2751be42769c1580b5801fe"
        }
      ],
      "purl": "pkg:npm/wbuf@1.7.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wbuf/-/wbuf-1.7.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wbuf@1.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wbuf/-/wbuf-1.7.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "webpack-dev-middleware",
      "version": "1.12.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "d34efefb2edda7e1d3b5dbe07289513219651709"
        }
      ],
      "purl": "pkg:npm/webpack-dev-middleware@1.12.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-dev-middleware/-/webpack-dev-middleware-1.12.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-dev-middleware@1.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-dev-middleware/-/webpack-dev-middleware-1.12.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "middleware"
      ]
    },
    {
      "group": "",
      "name": "time-stamp",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "95c6a44530e15ba8d6f4a3ecb8c3a3fac46da357"
        }
      ],
      "purl": "pkg:npm/time-stamp@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/time-stamp/-/time-stamp-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/time-stamp@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/time-stamp/-/time-stamp-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "6.6.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "782ec21ef403345f830a808ca3d513af56065208"
        }
      ],
      "purl": "pkg:npm/yargs@6.6.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs/-/yargs-6.6.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs/-/yargs-6.6.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs-parser",
      "version": "4.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "29cceac0dc4f03c6c87b4a9f217dd18c9f74871c"
        }
      ],
      "purl": "pkg:npm/yargs-parser@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-4.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "webpack-manifest-plugin",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "317eb406fd86f37664b3da62de82ce9918273c09f0ae5327fa57ed32b5819b5f7d5508e4e3aff1833062f653dfa5995dc36f842364be39ebee2c8683bb109647"
        }
      ],
      "purl": "pkg:npm/webpack-manifest-plugin@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/webpack-manifest-plugin/-/webpack-manifest-plugin-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/webpack-manifest-plugin@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/webpack-manifest-plugin/-/webpack-manifest-plugin-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "0.30.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "f233ffcc08d4da7d432daa449776989db1df93f0"
        }
      ],
      "purl": "pkg:npm/fs-extra@0.30.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-extra/-/fs-extra-0.30.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@0.30.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-extra/-/fs-extra-0.30.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "2.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "3736a2b428b87bbda0cc83b53fa3d633a35c2ae8"
        }
      ],
      "purl": "pkg:npm/jsonfile@2.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/jsonfile/-/jsonfile-2.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@2.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/jsonfile/-/jsonfile-2.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "klaw",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "4088433b46b3b1ba259d78785d8e96f73ba02439"
        }
      ],
      "purl": "pkg:npm/klaw@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/klaw/-/klaw-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/klaw@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/klaw/-/klaw-1.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-star-ratings",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "377beac6aa461d327892581924fc76368f0a4cab89b737b3ca6126af20983e5b9824710716191fc713def76325e8026f2a6580ea4567ea97ba103e0d59ccfbd5"
        }
      ],
      "purl": "pkg:npm/react-star-ratings@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/react-star-ratings/-/react-star-ratings-2.1.0.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-star-ratings@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "test/package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/react-star-ratings/-/react-star-ratings-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "test/package-lock.json"
              }
            ],
            "concludedValue": "test/package-lock.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/classnames@2.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-js@1.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.19",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/encoding@0.1.12",
      "dependsOn": [
        "pkg:npm/iconv-lite@0.4.19"
      ]
    },
    {
      "ref": "pkg:npm/is-stream@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-fetch@1.7.3",
      "dependsOn": [
        "pkg:npm/encoding@0.1.12",
        "pkg:npm/is-stream@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/whatwg-fetch@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isomorphic-fetch@2.2.1",
      "dependsOn": [
        "pkg:npm/node-fetch@1.7.3",
        "pkg:npm/whatwg-fetch@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/js-tokens@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loose-envify@1.3.1",
      "dependsOn": [
        "pkg:npm/js-tokens@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/object-assign@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asap@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/promise@7.3.1",
      "dependsOn": [
        "pkg:npm/asap@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/setimmediate@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ua-parser-js@0.7.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fbjs@0.8.16",
      "dependsOn": [
        "pkg:npm/core-js@1.2.7",
        "pkg:npm/isomorphic-fetch@2.2.1",
        "pkg:npm/loose-envify@1.3.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/promise@7.3.1",
        "pkg:npm/setimmediate@1.0.5",
        "pkg:npm/ua-parser-js@0.7.17"
      ]
    },
    {
      "ref": "pkg:npm/prop-types@15.6.0",
      "dependsOn": [
        "pkg:npm/fbjs@0.8.16",
        "pkg:npm/loose-envify@1.3.1",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/react@16.1.0",
      "dependsOn": [
        "pkg:npm/fbjs@0.8.16",
        "pkg:npm/loose-envify@1.3.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/prop-types@15.6.0"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@2.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-ansi@2.0.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/strip-ansi@3.0.1",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/supports-color@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/chalk@1.1.3",
      "dependsOn": [
        "pkg:npm/ansi-styles@2.2.1",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/has-ansi@2.0.0",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/supports-color@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/esutils@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-code-frame@6.26.0",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/esutils@2.0.2",
        "pkg:npm/js-tokens@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/core-js@2.5.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regenerator-runtime@0.11.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-runtime@6.26.0",
      "dependsOn": [
        "pkg:npm/core-js@2.5.1",
        "pkg:npm/core-js@2.5.3",
        "pkg:npm/regenerator-runtime@0.11.0",
        "pkg:npm/regenerator-runtime@0.11.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-messages@6.23.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash@4.17.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-fast-properties@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-types@6.26.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/esutils@2.0.2",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/to-fast-properties@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/number-is-nan@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-finite@1.0.2",
      "dependsOn": [
        "pkg:npm/number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/repeating@2.0.1",
      "dependsOn": [
        "pkg:npm/is-finite@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/detect-indent@4.0.0",
      "dependsOn": [
        "pkg:npm/repeating@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/jsesc@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.5.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/trim-right@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-generator@6.26.0",
      "dependsOn": [
        "pkg:npm/babel-messages@6.23.0",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-types@6.26.0",
        "pkg:npm/detect-indent@4.0.0",
        "pkg:npm/jsesc@1.3.0",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/source-map@0.5.7",
        "pkg:npm/trim-right@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/babylon@6.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.6.9",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/globals@9.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/invariant@2.2.2",
      "dependsOn": [
        "pkg:npm/loose-envify@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-traverse@6.26.0",
      "dependsOn": [
        "pkg:npm/babel-code-frame@6.26.0",
        "pkg:npm/babel-messages@6.23.0",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-types@6.26.0",
        "pkg:npm/babylon@6.18.0",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/globals@9.18.0",
        "pkg:npm/invariant@2.2.2",
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/babel-template@6.26.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-traverse@6.26.0",
        "pkg:npm/babel-types@6.26.0",
        "pkg:npm/babylon@6.18.0",
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/babel-helpers@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/os-homedir@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/os-tmpdir@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/home-or-tmp@2.0.0",
      "dependsOn": [
        "pkg:npm/os-homedir@1.0.2",
        "pkg:npm/os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.8"
      ]
    },
    {
      "ref": "pkg:npm/source-map-support@0.4.18",
      "dependsOn": [
        "pkg:npm/source-map@0.5.7"
      ]
    },
    {
      "ref": "pkg:npm/babel-register@6.26.0",
      "dependsOn": [
        "pkg:npm/babel-core@6.26.0",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/core-js@2.5.1",
        "pkg:npm/core-js@2.5.3",
        "pkg:npm/home-or-tmp@2.0.0",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/source-map-support@0.4.18"
      ]
    },
    {
      "ref": "pkg:npm/convert-source-map@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json5@0.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/balanced-match@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-map@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.8",
      "dependsOn": [
        "pkg:npm/balanced-match@1.0.0",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@3.0.4",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.7",
        "pkg:npm/brace-expansion@1.1.8"
      ]
    },
    {
      "ref": "pkg:npm/path-is-absolute@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/private@0.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/slash@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-core@6.26.0",
      "dependsOn": [
        "pkg:npm/babel-code-frame@6.26.0",
        "pkg:npm/babel-generator@6.26.0",
        "pkg:npm/babel-helpers@6.24.1",
        "pkg:npm/babel-messages@6.23.0",
        "pkg:npm/babel-register@6.26.0",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0",
        "pkg:npm/babel-traverse@6.26.0",
        "pkg:npm/babel-types@6.26.0",
        "pkg:npm/babylon@6.18.0",
        "pkg:npm/convert-source-map@1.5.0",
        "pkg:npm/convert-source-map@1.5.1",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/json5@0.5.1",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/private@0.1.8",
        "pkg:npm/slash@1.0.0",
        "pkg:npm/source-map@0.5.7"
      ]
    },
    {
      "ref": "pkg:npm/regenerator-runtime@0.10.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-polyfill@6.26.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/core-js@2.5.3",
        "pkg:npm/regenerator-runtime@0.10.5"
      ]
    },
    {
      "ref": "pkg:npm/commander@2.12.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs-readdir-recursive@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs.realpath@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inflight@1.0.6",
      "dependsOn": [
        "pkg:npm/once@1.4.0",
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/glob@7.1.2",
      "dependsOn": [
        "pkg:npm/fs.realpath@1.0.0",
        "pkg:npm/inflight@1.0.6",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/once@1.4.0",
        "pkg:npm/path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@4.1.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/output-file-sync@1.1.2",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/user-home@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/v8flags@2.1.1",
      "dependsOn": [
        "pkg:npm/user-home@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/arr-flatten@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arr-diff@2.0.0",
      "dependsOn": [
        "pkg:npm/arr-flatten@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/array-unique@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-buffer@1.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/kind-of@3.2.2",
      "dependsOn": [
        "pkg:npm/is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pkg:npm/is-number@2.1.0",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/isarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isobject@2.1.0",
      "dependsOn": [
        "pkg:npm/isarray@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-number@3.0.0",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2"
      ]
    },
    {
      "ref": "pkg:npm/kind-of@4.0.0",
      "dependsOn": [
        "pkg:npm/is-buffer@1.1.6"
      ]
    },
    {
      "ref": "pkg:npm/randomatic@1.1.7",
      "dependsOn": [
        "pkg:npm/is-number@3.0.0",
        "pkg:npm/kind-of@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/repeat-element@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/repeat-string@1.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fill-range@2.2.3",
      "dependsOn": [
        "pkg:npm/is-number@2.1.0",
        "pkg:npm/isobject@2.1.0",
        "pkg:npm/randomatic@1.1.7",
        "pkg:npm/repeat-element@1.1.2",
        "pkg:npm/repeat-string@1.6.1"
      ]
    },
    {
      "ref": "pkg:npm/expand-range@1.8.2",
      "dependsOn": [
        "pkg:npm/fill-range@2.2.3"
      ]
    },
    {
      "ref": "pkg:npm/preserve@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/braces@1.8.5",
      "dependsOn": [
        "pkg:npm/expand-range@1.8.2",
        "pkg:npm/preserve@0.2.0",
        "pkg:npm/repeat-element@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/is-posix-bracket@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/expand-brackets@0.1.5",
      "dependsOn": [
        "pkg:npm/is-posix-bracket@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-extglob@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extglob@0.3.2",
      "dependsOn": [
        "pkg:npm/is-extglob@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/filename-regex@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@2.0.1",
      "dependsOn": [
        "pkg:npm/is-extglob@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/remove-trailing-separator@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/normalize-path@2.1.1",
      "dependsOn": [
        "pkg:npm/remove-trailing-separator@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/for-in@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/for-own@0.1.5",
      "dependsOn": [
        "pkg:npm/for-in@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-extendable@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object.omit@2.0.1",
      "dependsOn": [
        "pkg:npm/for-own@0.1.5",
        "pkg:npm/is-extendable@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/glob-parent@2.0.0",
      "dependsOn": [
        "pkg:npm/is-glob@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob-base@0.3.0",
      "dependsOn": [
        "pkg:npm/glob-parent@2.0.0",
        "pkg:npm/is-glob@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-dotfile@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-glob@3.0.4",
      "dependsOn": [
        "pkg:npm/glob-base@0.3.0",
        "pkg:npm/is-dotfile@1.0.3",
        "pkg:npm/is-extglob@1.0.0",
        "pkg:npm/is-glob@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-primitive@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-equal-shallow@0.1.3",
      "dependsOn": [
        "pkg:npm/is-primitive@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/regex-cache@0.4.4",
      "dependsOn": [
        "pkg:npm/is-equal-shallow@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/micromatch@2.3.11",
      "dependsOn": [
        "pkg:npm/arr-diff@2.0.0",
        "pkg:npm/array-unique@0.2.1",
        "pkg:npm/braces@1.8.5",
        "pkg:npm/expand-brackets@0.1.5",
        "pkg:npm/extglob@0.3.2",
        "pkg:npm/filename-regex@2.0.1",
        "pkg:npm/is-extglob@1.0.0",
        "pkg:npm/is-glob@2.0.1",
        "pkg:npm/kind-of@3.2.2",
        "pkg:npm/normalize-path@2.1.1",
        "pkg:npm/object.omit@2.0.1",
        "pkg:npm/parse-glob@3.0.4",
        "pkg:npm/regex-cache@0.4.4"
      ]
    },
    {
      "ref": "pkg:npm/anymatch@1.3.2",
      "dependsOn": [
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/normalize-path@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/async-each@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/binary-extensions@1.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-binary-path@1.0.1",
      "dependsOn": [
        "pkg:npm/binary-extensions@1.10.0",
        "pkg:npm/binary-extensions@1.11.0"
      ]
    },
    {
      "ref": "pkg:npm/core-util-is@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process-nextick-args@1.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.0.3",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/util-deprecate@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@2.3.3",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@1.0.7",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/string_decoder@1.0.3",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/set-immediate-shim@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readdirp@2.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/set-immediate-shim@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/nan@2.8.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-libc@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hoek@2.16.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/boom@2.10.1",
      "dependsOn": [
        "pkg:npm/hoek@2.16.3"
      ]
    },
    {
      "ref": "pkg:npm/cryptiles@2.0.5",
      "dependsOn": [
        "pkg:npm/boom@2.10.1"
      ]
    },
    {
      "ref": "pkg:npm/sntp@1.0.9",
      "dependsOn": [
        "pkg:npm/hoek@2.16.3"
      ]
    },
    {
      "ref": "pkg:npm/hawk@3.1.3",
      "dependsOn": [
        "pkg:npm/boom@2.10.1",
        "pkg:npm/cryptiles@2.0.5",
        "pkg:npm/hoek@2.16.3",
        "pkg:npm/sntp@1.0.9"
      ]
    },
    {
      "ref": "pkg:npm/abbrev@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/osenv@0.1.4",
      "dependsOn": [
        "pkg:npm/os-homedir@1.0.2",
        "pkg:npm/os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/nopt@4.0.1",
      "dependsOn": [
        "pkg:npm/abbrev@1.1.0",
        "pkg:npm/osenv@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/delegates@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-shims@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.0.1",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.0.1"
      ]
    },
    {
      "ref": "pkg:npm/readable-stream@2.2.9",
      "dependsOn": [
        "pkg:npm/buffer-shims@1.0.0",
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@1.0.7",
        "pkg:npm/string_decoder@1.0.1",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/are-we-there-yet@1.1.4",
      "dependsOn": [
        "pkg:npm/delegates@1.0.0",
        "pkg:npm/readable-stream@2.2.9"
      ]
    },
    {
      "ref": "pkg:npm/console-control-strings@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aproba@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-unicode@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/signal-exit@3.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/code-point-at@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "dependsOn": [
        "pkg:npm/number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/string-width@1.0.2",
      "dependsOn": [
        "pkg:npm/code-point-at@1.1.0",
        "pkg:npm/is-fullwidth-code-point@1.0.0",
        "pkg:npm/strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/wide-align@1.1.2",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/gauge@2.7.4",
      "dependsOn": [
        "pkg:npm/aproba@1.1.1",
        "pkg:npm/console-control-strings@1.1.0",
        "pkg:npm/has-unicode@2.0.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/signal-exit@3.0.2",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/wide-align@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/set-blocking@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npmlog@4.1.0",
      "dependsOn": [
        "pkg:npm/are-we-there-yet@1.1.4",
        "pkg:npm/console-control-strings@1.1.0",
        "pkg:npm/gauge@2.7.4",
        "pkg:npm/set-blocking@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/deep-extend@0.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ini@1.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimist@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-json-comments@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rc@1.2.1",
      "dependsOn": [
        "pkg:npm/deep-extend@0.4.2",
        "pkg:npm/ini@1.3.4",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/strip-json-comments@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/aws-sign2@0.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws4@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caseless@0.12.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/delayed-stream@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combined-stream@1.0.5",
      "dependsOn": [
        "pkg:npm/delayed-stream@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/extend@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forever-agent@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/asynckit@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-db@1.27.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.15",
      "dependsOn": [
        "pkg:npm/mime-db@1.27.0"
      ]
    },
    {
      "ref": "pkg:npm/form-data@2.1.4",
      "dependsOn": [
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/combined-stream@1.0.5",
        "pkg:npm/mime-types@2.1.15"
      ]
    },
    {
      "ref": "pkg:npm/co@4.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonify@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stable-stringify@1.0.1",
      "dependsOn": [
        "pkg:npm/jsonify@0.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ajv@4.11.8",
      "dependsOn": [
        "pkg:npm/co@4.6.0",
        "pkg:npm/json-stable-stringify@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/har-schema@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/har-validator@4.2.1",
      "dependsOn": [
        "pkg:npm/ajv@4.11.8",
        "pkg:npm/har-schema@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/assert-plus@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/assert-plus@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extsprintf@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema@0.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/verror@1.3.6",
      "dependsOn": [
        "pkg:npm/extsprintf@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/jsprim@1.4.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/extsprintf@1.0.2",
        "pkg:npm/json-schema@0.2.3",
        "pkg:npm/verror@1.3.6"
      ]
    },
    {
      "ref": "pkg:npm/asn1@0.2.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dashdash@1.14.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/getpass@0.1.7",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/tweetnacl@0.14.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bcrypt-pbkdf@1.0.1",
      "dependsOn": [
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/jsbn@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ecc-jsbn@0.1.1",
      "dependsOn": [
        "pkg:npm/jsbn@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/jodid25519@1.0.2",
      "dependsOn": [
        "pkg:npm/jsbn@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/sshpk@1.13.0",
      "dependsOn": [
        "pkg:npm/asn1@0.2.3",
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/bcrypt-pbkdf@1.0.1",
        "pkg:npm/dashdash@1.14.1",
        "pkg:npm/ecc-jsbn@0.1.1",
        "pkg:npm/getpass@0.1.7",
        "pkg:npm/jodid25519@1.0.2",
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/http-signature@1.1.1",
      "dependsOn": [
        "pkg:npm/assert-plus@0.2.0",
        "pkg:npm/jsprim@1.4.0",
        "pkg:npm/sshpk@1.13.0"
      ]
    },
    {
      "ref": "pkg:npm/is-typedarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isstream@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-stringify-safe@5.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/oauth-sign@0.8.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/performance-now@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/qs@6.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stringstream@0.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tough-cookie@2.3.2",
      "dependsOn": [
        "pkg:npm/punycode@1.4.1"
      ]
    },
    {
      "ref": "pkg:npm/tunnel-agent@0.6.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.0.1",
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/uuid@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.81.0",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.6.0",
        "pkg:npm/aws4@1.6.0",
        "pkg:npm/caseless@0.12.0",
        "pkg:npm/combined-stream@1.0.5",
        "pkg:npm/extend@3.0.1",
        "pkg:npm/forever-agent@0.6.1",
        "pkg:npm/form-data@2.1.4",
        "pkg:npm/har-validator@4.2.1",
        "pkg:npm/hawk@3.1.3",
        "pkg:npm/http-signature@1.1.1",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/mime-types@2.1.15",
        "pkg:npm/oauth-sign@0.8.2",
        "pkg:npm/performance-now@0.2.0",
        "pkg:npm/qs@6.4.0",
        "pkg:npm/safe-buffer@5.0.1",
        "pkg:npm/stringstream@0.0.5",
        "pkg:npm/tough-cookie@2.3.2",
        "pkg:npm/tunnel-agent@0.6.0",
        "pkg:npm/uuid@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/balanced-match@0.4.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brace-expansion@1.1.7",
      "dependsOn": [
        "pkg:npm/balanced-match@0.4.2",
        "pkg:npm/concat-map@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@2.6.1",
      "dependsOn": [
        "pkg:npm/glob@7.1.2"
      ]
    },
    {
      "ref": "pkg:npm/semver@5.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/block-stream@0.0.9",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/fstream@1.0.11",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/rimraf@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/tar@2.2.1",
      "dependsOn": [
        "pkg:npm/block-stream@0.0.9",
        "pkg:npm/fstream@1.0.11",
        "pkg:npm/inherits@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/debug@2.6.8",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fstream-ignore@1.0.5",
      "dependsOn": [
        "pkg:npm/fstream@1.0.11",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/uid-number@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tar-pack@3.4.0",
      "dependsOn": [
        "pkg:npm/debug@2.6.8",
        "pkg:npm/fstream-ignore@1.0.5",
        "pkg:npm/fstream@1.0.11",
        "pkg:npm/once@1.4.0",
        "pkg:npm/readable-stream@2.2.9",
        "pkg:npm/rimraf@2.6.1",
        "pkg:npm/tar@2.2.1",
        "pkg:npm/uid-number@0.0.6"
      ]
    },
    {
      "ref": "pkg:npm/node-pre-gyp@0.6.39",
      "dependsOn": [
        "pkg:npm/detect-libc@1.0.2",
        "pkg:npm/hawk@3.1.3",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/nopt@4.0.1",
        "pkg:npm/npmlog@4.1.0",
        "pkg:npm/rc@1.2.1",
        "pkg:npm/request@2.81.0",
        "pkg:npm/rimraf@2.6.1",
        "pkg:npm/semver@5.3.0",
        "pkg:npm/tar-pack@3.4.0",
        "pkg:npm/tar@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/fsevents@1.1.3",
      "dependsOn": [
        "pkg:npm/nan@2.8.0",
        "pkg:npm/node-pre-gyp@0.6.39"
      ]
    },
    {
      "ref": "pkg:npm/chokidar@1.7.0",
      "dependsOn": [
        "pkg:npm/anymatch@1.3.2",
        "pkg:npm/async-each@1.0.1",
        "pkg:npm/fsevents@1.1.2",
        "pkg:npm/fsevents@1.1.3",
        "pkg:npm/glob-parent@2.0.0",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/is-binary-path@1.0.1",
        "pkg:npm/is-glob@2.0.1",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/readdirp@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-cli@6.26.0",
      "dependsOn": [
        "pkg:npm/babel-core@6.26.0",
        "pkg:npm/babel-polyfill@6.26.0",
        "pkg:npm/babel-register@6.26.0",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/chokidar@1.7.0",
        "pkg:npm/commander@2.12.2",
        "pkg:npm/convert-source-map@1.5.1",
        "pkg:npm/fs-readdir-recursive@1.1.0",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/output-file-sync@1.1.2",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/slash@1.0.0",
        "pkg:npm/source-map@0.5.7",
        "pkg:npm/v8flags@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-react-transform@2.0.2",
      "dependsOn": [
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-decorators@6.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-decorators-legacy@1.3.4",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-decorators@6.13.0",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-runtime@6.23.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-check-es2015-constants@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-arrow-functions@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-block-scoped-functions@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-block-scoping@6.26.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0",
        "pkg:npm/babel-traverse@6.26.0",
        "pkg:npm/babel-types@6.26.0",
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-get-function-arity@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-function-name@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-get-function-arity@6.24.1",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0",
        "pkg:npm/babel-traverse@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-define-map@6.26.0",
      "dependsOn": [
        "pkg:npm/babel-helper-function-name@6.24.1",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-types@6.26.0",
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-optimise-call-expression@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-replace-supers@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-optimise-call-expression@6.24.1",
        "pkg:npm/babel-messages@6.23.0",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0",
        "pkg:npm/babel-traverse@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-classes@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-define-map@6.26.0",
        "pkg:npm/babel-helper-function-name@6.24.1",
        "pkg:npm/babel-helper-optimise-call-expression@6.24.1",
        "pkg:npm/babel-helper-replace-supers@6.24.1",
        "pkg:npm/babel-messages@6.23.0",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0",
        "pkg:npm/babel-traverse@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-computed-properties@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-destructuring@6.23.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-duplicate-keys@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-for-of@6.23.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-function-name@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-function-name@6.24.1",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-literals@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-strict-mode@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.26.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-transform-strict-mode@6.24.1",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-modules-amd@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.26.0",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-hoist-variables@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-modules-systemjs@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-hoist-variables@6.24.1",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-modules-umd@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-plugin-transform-es2015-modules-amd@6.24.1",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-object-super@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-replace-supers@6.24.1",
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-call-delegate@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-hoist-variables@6.24.1",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-traverse@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-parameters@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-call-delegate@6.24.1",
        "pkg:npm/babel-helper-get-function-arity@6.24.1",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0",
        "pkg:npm/babel-traverse@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-shorthand-properties@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-spread@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-regex@6.26.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-types@6.26.0",
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-sticky-regex@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-regex@6.26.0",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-template-literals@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-typeof-symbol@6.23.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/regenerate@1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regjsgen@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsesc@0.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regjsparser@0.1.5",
      "dependsOn": [
        "pkg:npm/jsesc@0.5.0"
      ]
    },
    {
      "ref": "pkg:npm/regexpu-core@2.0.0",
      "dependsOn": [
        "pkg:npm/regenerate@1.3.3",
        "pkg:npm/regjsgen@0.2.0",
        "pkg:npm/regjsparser@0.1.5"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-es2015-unicode-regex@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-regex@6.26.0",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/regexpu-core@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/regenerator-transform@0.10.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-types@6.26.0",
        "pkg:npm/private@0.1.8"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-regenerator@6.26.0",
      "dependsOn": [
        "pkg:npm/regenerator-transform@0.10.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-es2015@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-plugin-check-es2015-constants@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-arrow-functions@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-block-scoped-functions@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-block-scoping@6.26.0",
        "pkg:npm/babel-plugin-transform-es2015-classes@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-computed-properties@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-destructuring@6.23.0",
        "pkg:npm/babel-plugin-transform-es2015-duplicate-keys@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-for-of@6.23.0",
        "pkg:npm/babel-plugin-transform-es2015-function-name@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-literals@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-modules-amd@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.26.0",
        "pkg:npm/babel-plugin-transform-es2015-modules-systemjs@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-modules-umd@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-object-super@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-parameters@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-shorthand-properties@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-spread@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-sticky-regex@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-template-literals@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-typeof-symbol@6.23.0",
        "pkg:npm/babel-plugin-transform-es2015-unicode-regex@6.24.1",
        "pkg:npm/babel-plugin-transform-regenerator@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-jsx@6.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-react-display-name@6.25.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-builder-react-jsx@6.26.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-types@6.26.0",
        "pkg:npm/esutils@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-react-jsx@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-builder-react-jsx@6.26.0",
        "pkg:npm/babel-plugin-syntax-jsx@6.18.0",
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-react-jsx-self@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-jsx@6.18.0",
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-react-jsx-source@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-jsx@6.18.0",
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-flow@6.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-flow-strip-types@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-flow@6.18.0",
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-flow@6.23.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-transform-flow-strip-types@6.22.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-react@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-jsx@6.18.0",
        "pkg:npm/babel-plugin-transform-react-display-name@6.25.0",
        "pkg:npm/babel-plugin-transform-react-jsx-self@6.22.0",
        "pkg:npm/babel-plugin-transform-react-jsx-source@6.22.0",
        "pkg:npm/babel-plugin-transform-react-jsx@6.24.1",
        "pkg:npm/babel-preset-flow@6.23.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-do-expressions@6.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-do-expressions@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-do-expressions@6.13.0",
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-function-bind@6.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-function-bind@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-function-bind@6.13.0",
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-class-constructor-call@6.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-class-constructor-call@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-class-constructor-call@6.18.0",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-export-extensions@6.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-export-extensions@6.22.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-export-extensions@6.13.0",
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-dynamic-import@6.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-class-properties@6.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-class-properties@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-function-name@6.24.1",
        "pkg:npm/babel-plugin-syntax-class-properties@6.13.0",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-bindify-decorators@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-traverse@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-explode-class@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-bindify-decorators@6.24.1",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-traverse@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-decorators@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-explode-class@6.24.1",
        "pkg:npm/babel-plugin-syntax-decorators@6.13.0",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-trailing-function-commas@6.22.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-helper-remap-async-to-generator@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-function-name@6.24.1",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-template@6.26.0",
        "pkg:npm/babel-traverse@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-async-generators@6.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-async-generator-functions@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-remap-async-to-generator@6.24.1",
        "pkg:npm/babel-plugin-syntax-async-generators@6.13.0",
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-async-functions@6.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-async-to-generator@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-remap-async-to-generator@6.24.1",
        "pkg:npm/babel-plugin-syntax-async-functions@6.13.0",
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-explode-assignable-expression@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-traverse@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-helper-builder-binary-assignment-operator-visitor@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-explode-assignable-expression@6.24.1",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-exponentiation-operator@6.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-exponentiation-operator@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-helper-builder-binary-assignment-operator-visitor@6.24.1",
        "pkg:npm/babel-plugin-syntax-exponentiation-operator@6.13.0",
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-object-rest-spread@6.13.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-object-rest-spread@6.26.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-object-rest-spread@6.13.0",
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-stage-3@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-trailing-function-commas@6.22.0",
        "pkg:npm/babel-plugin-transform-async-generator-functions@6.24.1",
        "pkg:npm/babel-plugin-transform-async-to-generator@6.24.1",
        "pkg:npm/babel-plugin-transform-exponentiation-operator@6.24.1",
        "pkg:npm/babel-plugin-transform-object-rest-spread@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-stage-2@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-dynamic-import@6.18.0",
        "pkg:npm/babel-plugin-transform-class-properties@6.24.1",
        "pkg:npm/babel-plugin-transform-decorators@6.24.1",
        "pkg:npm/babel-preset-stage-3@6.24.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-stage-1@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-plugin-transform-class-constructor-call@6.24.1",
        "pkg:npm/babel-plugin-transform-export-extensions@6.22.0",
        "pkg:npm/babel-preset-stage-2@6.24.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-stage-0@6.24.1",
      "dependsOn": [
        "pkg:npm/babel-plugin-transform-do-expressions@6.22.0",
        "pkg:npm/babel-plugin-transform-function-bind@6.22.0",
        "pkg:npm/babel-preset-stage-1@6.24.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-object-rest-spread@7.0.0-alpha.19",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-syntax-typescript@7.0.0-alpha.19",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-typescript@7.0.0-alpha.19",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-typescript@7.0.0-alpha.19"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-typescript@7.0.0-alpha.19",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-object-rest-spread@7.0.0-alpha.19",
        "pkg:npm/babel-plugin-transform-typescript@7.0.0-alpha.19"
      ]
    },
    {
      "ref": "pkg:npm/babelify@7.3.0",
      "dependsOn": [
        "pkg:npm/babel-core@6.26.0",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/inherits@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/util@0.10.3",
      "dependsOn": [
        "pkg:npm/inherits@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/assert@1.4.1",
      "dependsOn": [
        "pkg:npm/util@0.10.3"
      ]
    },
    {
      "ref": "pkg:npm/convert-source-map@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inline-source-map@0.6.2",
      "dependsOn": [
        "pkg:npm/source-map@0.5.7"
      ]
    },
    {
      "ref": "pkg:npm/lodash.memoize@3.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/combine-source-map@0.7.2",
      "dependsOn": [
        "pkg:npm/convert-source-map@1.1.3",
        "pkg:npm/inline-source-map@0.6.2",
        "pkg:npm/lodash.memoize@3.0.4",
        "pkg:npm/source-map@0.5.7"
      ]
    },
    {
      "ref": "pkg:npm/defined@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonparse@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through@2.3.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/JSONStream@1.3.2",
      "dependsOn": [
        "pkg:npm/jsonparse@1.3.1",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/xtend@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/through2@2.0.3",
      "dependsOn": [
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/umd@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browser-pack@6.0.2",
      "dependsOn": [
        "pkg:npm/JSONStream@1.3.2",
        "pkg:npm/combine-source-map@0.7.2",
        "pkg:npm/defined@1.0.0",
        "pkg:npm/through2@2.0.3",
        "pkg:npm/umd@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/resolve@1.1.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browser-resolve@1.11.2",
      "dependsOn": [
        "pkg:npm/resolve@1.1.7"
      ]
    },
    {
      "ref": "pkg:npm/pako@0.2.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browserify-zlib@0.1.4",
      "dependsOn": [
        "pkg:npm/pako@0.2.9"
      ]
    },
    {
      "ref": "pkg:npm/base64-js@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ieee754@1.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer@4.9.1",
      "dependsOn": [
        "pkg:npm/base64-js@1.2.1",
        "pkg:npm/ieee754@1.1.8",
        "pkg:npm/isarray@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cached-path-relative@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@0.10.31",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@2.0.6",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@1.0.7",
        "pkg:npm/string_decoder@0.10.31",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/typedarray@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/concat-stream@1.5.2",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/readable-stream@2.0.6",
        "pkg:npm/typedarray@0.0.6"
      ]
    },
    {
      "ref": "pkg:npm/date-now@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/console-browserify@1.1.0",
      "dependsOn": [
        "pkg:npm/date-now@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/constants-browserify@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-xor@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cipher-base@1.0.4",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/hash-base@2.0.2",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/ripemd160@2.0.1",
      "dependsOn": [
        "pkg:npm/hash-base@2.0.2",
        "pkg:npm/inherits@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/sha.js@2.4.9",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/create-hash@1.1.3",
      "dependsOn": [
        "pkg:npm/cipher-base@1.0.4",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/ripemd160@2.0.1",
        "pkg:npm/sha.js@2.4.9"
      ]
    },
    {
      "ref": "pkg:npm/hash-base@3.0.4",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/md5.js@1.3.4",
      "dependsOn": [
        "pkg:npm/hash-base@3.0.4",
        "pkg:npm/inherits@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/evp_bytestokey@1.0.3",
      "dependsOn": [
        "pkg:npm/md5.js@1.3.4",
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/browserify-aes@1.1.1",
      "dependsOn": [
        "pkg:npm/buffer-xor@1.0.3",
        "pkg:npm/cipher-base@1.0.4",
        "pkg:npm/create-hash@1.1.3",
        "pkg:npm/evp_bytestokey@1.0.3",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/minimalistic-assert@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/des.js@1.0.0",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimalistic-assert@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/browserify-des@1.0.0",
      "dependsOn": [
        "pkg:npm/cipher-base@1.0.4",
        "pkg:npm/des.js@1.0.0",
        "pkg:npm/inherits@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/browserify-cipher@1.0.0",
      "dependsOn": [
        "pkg:npm/browserify-aes@1.1.1",
        "pkg:npm/browserify-des@1.0.0",
        "pkg:npm/evp_bytestokey@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/bn.js@4.11.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/randombytes@2.0.5",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/browserify-rsa@4.0.1",
      "dependsOn": [
        "pkg:npm/bn.js@4.11.8",
        "pkg:npm/randombytes@2.0.5"
      ]
    },
    {
      "ref": "pkg:npm/create-hmac@1.1.6",
      "dependsOn": [
        "pkg:npm/cipher-base@1.0.4",
        "pkg:npm/create-hash@1.1.3",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/ripemd160@2.0.1",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/sha.js@2.4.9"
      ]
    },
    {
      "ref": "pkg:npm/brorand@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hash.js@1.1.3",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimalistic-assert@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/minimalistic-crypto-utils@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/hmac-drbg@1.0.1",
      "dependsOn": [
        "pkg:npm/hash.js@1.1.3",
        "pkg:npm/minimalistic-assert@1.0.0",
        "pkg:npm/minimalistic-crypto-utils@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/elliptic@6.4.0",
      "dependsOn": [
        "pkg:npm/bn.js@4.11.8",
        "pkg:npm/brorand@1.1.0",
        "pkg:npm/hash.js@1.1.3",
        "pkg:npm/hmac-drbg@1.0.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimalistic-assert@1.0.0",
        "pkg:npm/minimalistic-crypto-utils@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/asn1.js@4.9.2",
      "dependsOn": [
        "pkg:npm/bn.js@4.11.8",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimalistic-assert@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pbkdf2@3.0.14",
      "dependsOn": [
        "pkg:npm/create-hash@1.1.3",
        "pkg:npm/create-hmac@1.1.6",
        "pkg:npm/ripemd160@2.0.1",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/sha.js@2.4.9"
      ]
    },
    {
      "ref": "pkg:npm/parse-asn1@5.1.0",
      "dependsOn": [
        "pkg:npm/asn1.js@4.9.2",
        "pkg:npm/browserify-aes@1.1.1",
        "pkg:npm/create-hash@1.1.3",
        "pkg:npm/evp_bytestokey@1.0.3",
        "pkg:npm/pbkdf2@3.0.14"
      ]
    },
    {
      "ref": "pkg:npm/browserify-sign@4.0.4",
      "dependsOn": [
        "pkg:npm/bn.js@4.11.8",
        "pkg:npm/browserify-rsa@4.0.1",
        "pkg:npm/create-hash@1.1.3",
        "pkg:npm/create-hmac@1.1.6",
        "pkg:npm/elliptic@6.4.0",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/parse-asn1@5.1.0"
      ]
    },
    {
      "ref": "pkg:npm/create-ecdh@4.0.0",
      "dependsOn": [
        "pkg:npm/bn.js@4.11.8",
        "pkg:npm/elliptic@6.4.0"
      ]
    },
    {
      "ref": "pkg:npm/miller-rabin@4.0.1",
      "dependsOn": [
        "pkg:npm/bn.js@4.11.8",
        "pkg:npm/brorand@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/diffie-hellman@5.0.2",
      "dependsOn": [
        "pkg:npm/bn.js@4.11.8",
        "pkg:npm/miller-rabin@4.0.1",
        "pkg:npm/randombytes@2.0.5"
      ]
    },
    {
      "ref": "pkg:npm/public-encrypt@4.0.0",
      "dependsOn": [
        "pkg:npm/bn.js@4.11.8",
        "pkg:npm/browserify-rsa@4.0.1",
        "pkg:npm/create-hash@1.1.3",
        "pkg:npm/parse-asn1@5.1.0",
        "pkg:npm/randombytes@2.0.5"
      ]
    },
    {
      "ref": "pkg:npm/randomfill@1.0.3",
      "dependsOn": [
        "pkg:npm/randombytes@2.0.5",
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/crypto-browserify@3.12.0",
      "dependsOn": [
        "pkg:npm/browserify-cipher@1.0.0",
        "pkg:npm/browserify-sign@4.0.4",
        "pkg:npm/create-ecdh@4.0.0",
        "pkg:npm/create-hash@1.1.3",
        "pkg:npm/create-hmac@1.1.6",
        "pkg:npm/diffie-hellman@5.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/pbkdf2@3.0.14",
        "pkg:npm/public-encrypt@4.0.0",
        "pkg:npm/randombytes@2.0.5",
        "pkg:npm/randomfill@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/json-stable-stringify@0.0.1",
      "dependsOn": [
        "pkg:npm/jsonify@0.0.0"
      ]
    },
    {
      "ref": "pkg:npm/shasum@1.0.2",
      "dependsOn": [
        "pkg:npm/json-stable-stringify@0.0.1",
        "pkg:npm/sha.js@2.4.9"
      ]
    },
    {
      "ref": "pkg:npm/subarg@1.0.0",
      "dependsOn": [
        "pkg:npm/minimist@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/deps-sort@2.0.0",
      "dependsOn": [
        "pkg:npm/JSONStream@1.3.2",
        "pkg:npm/shasum@1.0.2",
        "pkg:npm/subarg@1.0.0",
        "pkg:npm/through2@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/domain-browser@1.1.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/duplexer2@0.1.4",
      "dependsOn": [
        "pkg:npm/readable-stream@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/events@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/function-bind@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has@1.0.1",
      "dependsOn": [
        "pkg:npm/function-bind@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/htmlescape@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/https-browserify@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn@4.0.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/astw@2.2.0",
      "dependsOn": [
        "pkg:npm/acorn@4.0.13"
      ]
    },
    {
      "ref": "pkg:npm/lexical-scope@1.2.0",
      "dependsOn": [
        "pkg:npm/astw@2.2.0"
      ]
    },
    {
      "ref": "pkg:npm/process@0.11.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/insert-module-globals@7.0.1",
      "dependsOn": [
        "pkg:npm/JSONStream@1.3.2",
        "pkg:npm/combine-source-map@0.7.2",
        "pkg:npm/concat-stream@1.5.2",
        "pkg:npm/is-buffer@1.1.6",
        "pkg:npm/lexical-scope@1.2.0",
        "pkg:npm/process@0.11.10",
        "pkg:npm/through2@2.0.3",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/isarray@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stream-splicer@2.0.0",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/readable-stream@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/labeled-stream-splicer@2.0.0",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/stream-splicer@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/acorn@5.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detective@4.7.1",
      "dependsOn": [
        "pkg:npm/acorn@5.3.0",
        "pkg:npm/defined@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/path-platform@0.11.15",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parents@1.0.1",
      "dependsOn": [
        "pkg:npm/path-platform@0.11.15"
      ]
    },
    {
      "ref": "pkg:npm/path-parse@1.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve@1.5.0",
      "dependsOn": [
        "pkg:npm/path-parse@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/stream-combiner2@1.1.1",
      "dependsOn": [
        "pkg:npm/duplexer2@0.1.4",
        "pkg:npm/readable-stream@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/module-deps@4.1.1",
      "dependsOn": [
        "pkg:npm/JSONStream@1.3.2",
        "pkg:npm/browser-resolve@1.11.2",
        "pkg:npm/cached-path-relative@1.0.1",
        "pkg:npm/concat-stream@1.5.2",
        "pkg:npm/defined@1.0.0",
        "pkg:npm/detective@4.7.1",
        "pkg:npm/duplexer2@0.1.4",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/parents@1.0.1",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/resolve@1.5.0",
        "pkg:npm/stream-combiner2@1.1.1",
        "pkg:npm/subarg@1.0.0",
        "pkg:npm/through2@2.0.3",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/os-browserify@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-browserify@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/querystring-es3@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/read-only-stream@2.0.0",
      "dependsOn": [
        "pkg:npm/readable-stream@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/array-filter@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-map@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-reduce@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shell-quote@1.6.1",
      "dependsOn": [
        "pkg:npm/array-filter@0.0.1",
        "pkg:npm/array-map@0.0.0",
        "pkg:npm/array-reduce@0.0.0",
        "pkg:npm/jsonify@0.0.0"
      ]
    },
    {
      "ref": "pkg:npm/stream-browserify@2.0.1",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/readable-stream@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/builtin-status-codes@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-arraybuffer@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stream-http@2.7.2",
      "dependsOn": [
        "pkg:npm/builtin-status-codes@3.0.0",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/to-arraybuffer@1.0.1",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/syntax-error@1.3.0",
      "dependsOn": [
        "pkg:npm/acorn@4.0.13"
      ]
    },
    {
      "ref": "pkg:npm/timers-browserify@1.4.2",
      "dependsOn": [
        "pkg:npm/process@0.11.10"
      ]
    },
    {
      "ref": "pkg:npm/tty-browserify@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/punycode@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/querystring@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url@0.11.0",
      "dependsOn": [
        "pkg:npm/punycode@1.3.2",
        "pkg:npm/querystring@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/indexof@0.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vm-browserify@0.0.4",
      "dependsOn": [
        "pkg:npm/indexof@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/browserify@13.3.0",
      "dependsOn": [
        "pkg:npm/JSONStream@1.3.2",
        "pkg:npm/assert@1.4.1",
        "pkg:npm/browser-pack@6.0.2",
        "pkg:npm/browser-resolve@1.11.2",
        "pkg:npm/browserify-zlib@0.1.4",
        "pkg:npm/buffer@4.9.1",
        "pkg:npm/cached-path-relative@1.0.1",
        "pkg:npm/concat-stream@1.5.2",
        "pkg:npm/console-browserify@1.1.0",
        "pkg:npm/constants-browserify@1.0.0",
        "pkg:npm/crypto-browserify@3.12.0",
        "pkg:npm/defined@1.0.0",
        "pkg:npm/deps-sort@2.0.0",
        "pkg:npm/domain-browser@1.1.7",
        "pkg:npm/duplexer2@0.1.4",
        "pkg:npm/events@1.1.1",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/has@1.0.1",
        "pkg:npm/htmlescape@1.1.1",
        "pkg:npm/https-browserify@0.0.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/insert-module-globals@7.0.1",
        "pkg:npm/labeled-stream-splicer@2.0.0",
        "pkg:npm/module-deps@4.1.1",
        "pkg:npm/os-browserify@0.1.2",
        "pkg:npm/parents@1.0.1",
        "pkg:npm/path-browserify@0.0.0",
        "pkg:npm/process@0.11.10",
        "pkg:npm/punycode@1.4.1",
        "pkg:npm/querystring-es3@0.2.1",
        "pkg:npm/read-only-stream@2.0.0",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/resolve@1.5.0",
        "pkg:npm/shasum@1.0.2",
        "pkg:npm/shell-quote@1.6.1",
        "pkg:npm/stream-browserify@2.0.1",
        "pkg:npm/stream-http@2.7.2",
        "pkg:npm/string_decoder@0.10.31",
        "pkg:npm/subarg@1.0.0",
        "pkg:npm/syntax-error@1.3.0",
        "pkg:npm/through2@2.0.3",
        "pkg:npm/timers-browserify@1.4.2",
        "pkg:npm/tty-browserify@0.0.0",
        "pkg:npm/url@0.11.0",
        "pkg:npm/util@0.10.3",
        "pkg:npm/vm-browserify@0.0.4",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/mime-db@1.30.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime-types@2.1.17",
      "dependsOn": [
        "pkg:npm/mime-db@1.30.0"
      ]
    },
    {
      "ref": "pkg:npm/negotiator@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/accepts@1.3.4",
      "dependsOn": [
        "pkg:npm/mime-types@2.1.17",
        "pkg:npm/negotiator@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/array-flatten@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bytes@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-type@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/depd@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/setprototypeof@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/statuses@1.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-errors@1.6.2",
      "dependsOn": [
        "pkg:npm/depd@1.1.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/setprototypeof@1.0.3",
        "pkg:npm/statuses@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/ee-first@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/on-finished@2.3.0",
      "dependsOn": [
        "pkg:npm/ee-first@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/qs@6.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unpipe@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/raw-body@2.3.2",
      "dependsOn": [
        "pkg:npm/bytes@3.0.0",
        "pkg:npm/http-errors@1.6.2",
        "pkg:npm/iconv-lite@0.4.19",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/media-typer@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-is@1.6.15",
      "dependsOn": [
        "pkg:npm/media-typer@0.3.0",
        "pkg:npm/mime-types@2.1.17"
      ]
    },
    {
      "ref": "pkg:npm/body-parser@1.18.2",
      "dependsOn": [
        "pkg:npm/bytes@3.0.0",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@1.1.1",
        "pkg:npm/http-errors@1.6.2",
        "pkg:npm/iconv-lite@0.4.19",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/qs@6.5.1",
        "pkg:npm/raw-body@2.3.2",
        "pkg:npm/type-is@1.6.15"
      ]
    },
    {
      "ref": "pkg:npm/content-disposition@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cookie-signature@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/encodeurl@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-html@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/etag@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parseurl@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/finalhandler@1.1.0",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/encodeurl@1.0.1",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/statuses@1.3.1",
        "pkg:npm/unpipe@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/fresh@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/merge-descriptors@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/methods@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-to-regexp@0.1.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/forwarded@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ipaddr.js@1.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/proxy-addr@2.0.2",
      "dependsOn": [
        "pkg:npm/forwarded@0.1.2",
        "pkg:npm/ipaddr.js@1.5.2"
      ]
    },
    {
      "ref": "pkg:npm/range-parser@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/destroy@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mime@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/send@0.16.1",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@1.1.1",
        "pkg:npm/destroy@1.0.4",
        "pkg:npm/encodeurl@1.0.1",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/fresh@0.5.2",
        "pkg:npm/http-errors@1.6.2",
        "pkg:npm/mime@1.4.1",
        "pkg:npm/ms@2.0.0",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/range-parser@1.2.0",
        "pkg:npm/statuses@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/serve-static@1.13.1",
      "dependsOn": [
        "pkg:npm/encodeurl@1.0.1",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/send@0.16.1"
      ]
    },
    {
      "ref": "pkg:npm/setprototypeof@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/utils-merge@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/vary@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/express@4.16.2",
      "dependsOn": [
        "pkg:npm/accepts@1.3.4",
        "pkg:npm/array-flatten@1.1.1",
        "pkg:npm/body-parser@1.18.2",
        "pkg:npm/content-disposition@0.5.2",
        "pkg:npm/content-type@1.0.4",
        "pkg:npm/cookie-signature@1.0.6",
        "pkg:npm/cookie@0.3.1",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/depd@1.1.1",
        "pkg:npm/encodeurl@1.0.1",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/etag@1.8.1",
        "pkg:npm/finalhandler@1.1.0",
        "pkg:npm/fresh@0.5.2",
        "pkg:npm/merge-descriptors@1.0.1",
        "pkg:npm/methods@1.1.2",
        "pkg:npm/on-finished@2.3.0",
        "pkg:npm/parseurl@1.3.2",
        "pkg:npm/path-to-regexp@0.1.7",
        "pkg:npm/proxy-addr@2.0.2",
        "pkg:npm/qs@6.5.1",
        "pkg:npm/range-parser@1.2.0",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/send@0.16.1",
        "pkg:npm/serve-static@1.13.1",
        "pkg:npm/setprototypeof@1.1.0",
        "pkg:npm/statuses@1.3.1",
        "pkg:npm/type-is@1.6.15",
        "pkg:npm/utils-merge@1.0.1",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/rsvp@4.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/accepts@1.3.3",
      "dependsOn": [
        "pkg:npm/mime-types@2.1.17",
        "pkg:npm/negotiator@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/base64id@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/after@0.8.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/arraybuffer.slice@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base64-arraybuffer@0.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/blob@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isarray@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-binary2@1.0.2",
      "dependsOn": [
        "pkg:npm/isarray@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/engine.io-parser@2.1.2",
      "dependsOn": [
        "pkg:npm/after@0.8.2",
        "pkg:npm/arraybuffer.slice@0.0.7",
        "pkg:npm/base64-arraybuffer@0.1.5",
        "pkg:npm/blob@0.0.4",
        "pkg:npm/has-binary2@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/async-limiter@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ultron@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ws@3.3.3",
      "dependsOn": [
        "pkg:npm/async-limiter@1.0.0",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/ultron@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/uws@0.14.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/engine.io@3.1.4",
      "dependsOn": [
        "pkg:npm/accepts@1.3.3",
        "pkg:npm/base64id@1.0.0",
        "pkg:npm/cookie@0.3.1",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/engine.io-parser@2.1.2",
        "pkg:npm/uws@0.14.5",
        "pkg:npm/ws@3.3.3"
      ]
    },
    {
      "ref": "pkg:npm/socket.io-adapter@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/backo2@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/component-bind@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/component-emitter@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/component-inherit@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-cors@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/callsite@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/better-assert@1.0.2",
      "dependsOn": [
        "pkg:npm/callsite@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/parseqs@0.0.5",
      "dependsOn": [
        "pkg:npm/better-assert@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/parseuri@0.0.5",
      "dependsOn": [
        "pkg:npm/better-assert@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/xmlhttprequest-ssl@1.5.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yeast@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/engine.io-client@3.1.4",
      "dependsOn": [
        "pkg:npm/component-emitter@1.2.1",
        "pkg:npm/component-inherit@0.0.3",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/engine.io-parser@2.1.2",
        "pkg:npm/has-cors@1.1.0",
        "pkg:npm/indexof@0.0.1",
        "pkg:npm/parseqs@0.0.5",
        "pkg:npm/parseuri@0.0.5",
        "pkg:npm/ws@3.3.3",
        "pkg:npm/xmlhttprequest-ssl@1.5.4",
        "pkg:npm/yeast@0.1.2"
      ]
    },
    {
      "ref": "pkg:npm/object-component@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/socket.io-parser@3.1.2",
      "dependsOn": [
        "pkg:npm/component-emitter@1.2.1",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/has-binary2@1.0.2",
        "pkg:npm/isarray@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/to-array@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/socket.io-client@2.0.4",
      "dependsOn": [
        "pkg:npm/backo2@1.0.2",
        "pkg:npm/base64-arraybuffer@0.1.5",
        "pkg:npm/component-bind@1.0.0",
        "pkg:npm/component-emitter@1.2.1",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/engine.io-client@3.1.4",
        "pkg:npm/has-cors@1.1.0",
        "pkg:npm/indexof@0.0.1",
        "pkg:npm/object-component@0.0.3",
        "pkg:npm/parseqs@0.0.5",
        "pkg:npm/parseuri@0.0.5",
        "pkg:npm/socket.io-parser@3.1.2",
        "pkg:npm/to-array@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/socket.io@2.0.4",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/engine.io@3.1.4",
        "pkg:npm/socket.io-adapter@1.1.1",
        "pkg:npm/socket.io-client@2.0.4",
        "pkg:npm/socket.io-parser@3.1.2"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/synchd@1.0.2",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/browserify-hmr@0.3.6",
      "dependsOn": [
        "pkg:npm/convert-source-map@1.5.1",
        "pkg:npm/express@4.16.2",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/rsvp@4.7.0",
        "pkg:npm/socket.io-client@2.0.4",
        "pkg:npm/socket.io@2.0.4",
        "pkg:npm/source-map@0.6.1",
        "pkg:npm/synchd@1.0.2",
        "pkg:npm/through2@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/he@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url-join@2.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ecstatic@2.2.1",
      "dependsOn": [
        "pkg:npm/he@1.1.1",
        "pkg:npm/mime@1.4.1",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/url-join@2.0.2"
      ]
    },
    {
      "ref": "pkg:npm/create-react-class@15.6.2",
      "dependsOn": [
        "pkg:npm/fbjs@0.8.16",
        "pkg:npm/loose-envify@1.3.1",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/react@15.6.2",
      "dependsOn": [
        "pkg:npm/create-react-class@15.6.2",
        "pkg:npm/fbjs@0.8.16",
        "pkg:npm/loose-envify@1.3.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/prop-types@15.6.0"
      ]
    },
    {
      "ref": "pkg:npm/react-dom@15.6.2",
      "dependsOn": [
        "pkg:npm/fbjs@0.8.16",
        "pkg:npm/loose-envify@1.3.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/prop-types@15.6.0",
        "pkg:npm/react@16.1.0"
      ]
    },
    {
      "ref": "pkg:npm/commander@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@2.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sigmund@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@0.3.0",
      "dependsOn": [
        "pkg:npm/lru-cache@2.7.3",
        "pkg:npm/sigmund@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/glob@3.2.11",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/minimatch@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.2.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/install@0.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.3.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/q@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/depd@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ast-types@0.4.13",
      "dependsOn": [
        "pkg:npm/depd@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cls@0.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esprima-fb@6001.1001.0-dev-harmony-fb",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/amdefine@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.1.32",
      "dependsOn": [
        "pkg:npm/amdefine@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/recast@0.7.5",
      "dependsOn": [
        "pkg:npm/ast-types@0.4.13",
        "pkg:npm/cls@0.1.5",
        "pkg:npm/esprima-fb@6001.1001.0-dev-harmony-fb",
        "pkg:npm/private@0.1.8",
        "pkg:npm/source-map@0.1.32"
      ]
    },
    {
      "ref": "pkg:npm/commoner@0.9.8",
      "dependsOn": [
        "pkg:npm/commander@2.2.0",
        "pkg:npm/glob@3.2.11",
        "pkg:npm/graceful-fs@2.0.3",
        "pkg:npm/iconv-lite@0.2.11",
        "pkg:npm/install@0.1.8",
        "pkg:npm/mkdirp@0.3.5",
        "pkg:npm/private@0.1.8",
        "pkg:npm/q@1.0.1",
        "pkg:npm/recast@0.7.5"
      ]
    },
    {
      "ref": "pkg:npm/esprima-fb@3001.1.0-dev-harmony-fb",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/base62@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.1.31",
      "dependsOn": [
        "pkg:npm/amdefine@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/jstransform@3.0.0",
      "dependsOn": [
        "pkg:npm/base62@0.1.1",
        "pkg:npm/esprima-fb@3001.1.0-dev-harmony-fb",
        "pkg:npm/source-map@0.1.31"
      ]
    },
    {
      "ref": "pkg:npm/react-tools@0.10.0",
      "dependsOn": [
        "pkg:npm/commoner@0.9.8",
        "pkg:npm/esprima-fb@3001.1.0-dev-harmony-fb",
        "pkg:npm/jstransform@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/react-transform@0.0.3",
      "dependsOn": [
        "pkg:npm/react-tools@0.10.0"
      ]
    },
    {
      "ref": "pkg:npm/dom-walk@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/min-document@2.19.0",
      "dependsOn": [
        "pkg:npm/dom-walk@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/process@0.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/global@4.3.2",
      "dependsOn": [
        "pkg:npm/min-document@2.19.0",
        "pkg:npm/process@0.5.2"
      ]
    },
    {
      "ref": "pkg:npm/react-deep-force-update@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/react-proxy@1.1.8",
      "dependsOn": [
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/react-deep-force-update@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/react-transform-hmr@1.0.4",
      "dependsOn": [
        "pkg:npm/global@4.3.2",
        "pkg:npm/react-proxy@1.1.8"
      ]
    },
    {
      "ref": "pkg:npm/pako@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browserify-zlib@0.2.0",
      "dependsOn": [
        "pkg:npm/pako@1.0.6"
      ]
    },
    {
      "ref": "pkg:npm/buffer@5.0.8",
      "dependsOn": [
        "pkg:npm/base64-js@1.2.1",
        "pkg:npm/ieee754@1.1.8"
      ]
    },
    {
      "ref": "pkg:npm/https-browserify@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/os-browserify@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browserify@14.5.0",
      "dependsOn": [
        "pkg:npm/JSONStream@1.3.2",
        "pkg:npm/assert@1.4.1",
        "pkg:npm/browser-pack@6.0.2",
        "pkg:npm/browser-resolve@1.11.2",
        "pkg:npm/browserify-zlib@0.2.0",
        "pkg:npm/buffer@5.0.8",
        "pkg:npm/cached-path-relative@1.0.1",
        "pkg:npm/concat-stream@1.5.2",
        "pkg:npm/console-browserify@1.1.0",
        "pkg:npm/constants-browserify@1.0.0",
        "pkg:npm/crypto-browserify@3.12.0",
        "pkg:npm/defined@1.0.0",
        "pkg:npm/deps-sort@2.0.0",
        "pkg:npm/domain-browser@1.1.7",
        "pkg:npm/duplexer2@0.1.4",
        "pkg:npm/events@1.1.1",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/has@1.0.1",
        "pkg:npm/htmlescape@1.1.1",
        "pkg:npm/https-browserify@1.0.0",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/insert-module-globals@7.0.1",
        "pkg:npm/labeled-stream-splicer@2.0.0",
        "pkg:npm/module-deps@4.1.1",
        "pkg:npm/os-browserify@0.3.0",
        "pkg:npm/parents@1.0.1",
        "pkg:npm/path-browserify@0.0.0",
        "pkg:npm/process@0.11.10",
        "pkg:npm/punycode@1.4.1",
        "pkg:npm/querystring-es3@0.2.1",
        "pkg:npm/read-only-stream@2.0.0",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/resolve@1.5.0",
        "pkg:npm/shasum@1.0.2",
        "pkg:npm/shell-quote@1.6.1",
        "pkg:npm/stream-browserify@2.0.1",
        "pkg:npm/stream-http@2.7.2",
        "pkg:npm/string_decoder@1.0.3",
        "pkg:npm/subarg@1.0.0",
        "pkg:npm/syntax-error@1.3.0",
        "pkg:npm/through2@2.0.3",
        "pkg:npm/timers-browserify@1.4.2",
        "pkg:npm/tty-browserify@0.0.0",
        "pkg:npm/url@0.11.0",
        "pkg:npm/util@0.10.3",
        "pkg:npm/vm-browserify@0.0.4",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/outpipe@1.1.1",
      "dependsOn": [
        "pkg:npm/shell-quote@1.6.1"
      ]
    },
    {
      "ref": "pkg:npm/watchify@3.9.0",
      "dependsOn": [
        "pkg:npm/anymatch@1.3.2",
        "pkg:npm/browserify@14.5.0",
        "pkg:npm/chokidar@1.7.0",
        "pkg:npm/defined@1.0.0",
        "pkg:npm/outpipe@1.1.1",
        "pkg:npm/through2@2.0.3",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/react-fatigue-dev@1.0.0?vcs_url=git+ssh://git@github.com/ekeric13/react-fatigue-dev.git#fadba8f808376e8b6f0e4b07e9744f6e4b44cf09",
      "dependsOn": [
        "pkg:npm/babel-cli@6.26.0",
        "pkg:npm/babel-plugin-react-transform@2.0.2",
        "pkg:npm/babel-plugin-transform-decorators-legacy@1.3.4",
        "pkg:npm/babel-plugin-transform-runtime@6.23.0",
        "pkg:npm/babel-preset-es2015@6.24.1",
        "pkg:npm/babel-preset-react@6.24.1",
        "pkg:npm/babel-preset-stage-0@6.24.1",
        "pkg:npm/babel-preset-typescript@7.0.0-alpha.19",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/babelify@7.3.0",
        "pkg:npm/browserify-hmr@0.3.6",
        "pkg:npm/browserify@13.3.0",
        "pkg:npm/ecstatic@2.2.1",
        "pkg:npm/react-dom@15.6.2",
        "pkg:npm/react-transform-hmr@1.0.4",
        "pkg:npm/react-transform@0.0.3",
        "pkg:npm/react@15.6.2",
        "pkg:npm/watchify@3.9.0"
      ]
    },
    {
      "ref": "pkg:npm/react-star-ratings@2.3.0",
      "dependsOn": [
        "pkg:npm/classnames@2.2.5",
        "pkg:npm/prop-types@15.6.0",
        "pkg:npm/react@16.1.0"
      ]
    },
    {
      "ref": "pkg:npm/react-dom@16.1.0",
      "dependsOn": [
        "pkg:npm/fbjs@0.8.16",
        "pkg:npm/loose-envify@1.3.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/prop-types@15.6.0"
      ]
    },
    {
      "ref": "pkg:npm/caniuse-lite@1.0.30000760",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/electron-to-chromium@1.3.27",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browserslist@2.9.0",
      "dependsOn": [
        "pkg:npm/caniuse-lite@1.0.30000760",
        "pkg:npm/electron-to-chromium@1.3.27"
      ]
    },
    {
      "ref": "pkg:npm/normalize-range@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/num2fraction@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-name@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-convert@1.9.1",
      "dependsOn": [
        "pkg:npm/color-name@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/ansi-styles@3.2.0",
      "dependsOn": [
        "pkg:npm/color-convert@1.9.1"
      ]
    },
    {
      "ref": "pkg:npm/has-flag@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@4.5.0",
      "dependsOn": [
        "pkg:npm/has-flag@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/chalk@2.3.0",
      "dependsOn": [
        "pkg:npm/ansi-styles@3.2.0",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/supports-color@4.5.0"
      ]
    },
    {
      "ref": "pkg:npm/postcss@6.0.14",
      "dependsOn": [
        "pkg:npm/chalk@2.3.0",
        "pkg:npm/source-map@0.6.1",
        "pkg:npm/supports-color@4.5.0"
      ]
    },
    {
      "ref": "pkg:npm/postcss-value-parser@3.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/autoprefixer@7.1.6",
      "dependsOn": [
        "pkg:npm/browserslist@2.9.0",
        "pkg:npm/caniuse-lite@1.0.30000760",
        "pkg:npm/normalize-range@0.1.2",
        "pkg:npm/num2fraction@1.2.2",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@6.0.14"
      ]
    },
    {
      "ref": "pkg:npm/core-js@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regenerator-runtime@0.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/convert-source-map@1.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-eslint@7.2.3",
      "dependsOn": [
        "pkg:npm/babel-code-frame@6.26.0",
        "pkg:npm/babel-traverse@6.26.0",
        "pkg:npm/babel-types@6.26.0",
        "pkg:npm/babylon@6.18.0"
      ]
    },
    {
      "ref": "pkg:npm/p-limit@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/p-locate@2.0.0",
      "dependsOn": [
        "pkg:npm/p-limit@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/locate-path@2.0.0",
      "dependsOn": [
        "pkg:npm/p-locate@2.0.0",
        "pkg:npm/path-exists@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/find-up@2.1.0",
      "dependsOn": [
        "pkg:npm/locate-path@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-coverage@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@5.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/istanbul-lib-instrument@1.9.1",
      "dependsOn": [
        "pkg:npm/babel-generator@6.26.0",
        "pkg:npm/babel-template@6.26.0",
        "pkg:npm/babel-traverse@6.26.0",
        "pkg:npm/babel-types@6.26.0",
        "pkg:npm/babylon@6.18.0",
        "pkg:npm/istanbul-lib-coverage@1.1.1",
        "pkg:npm/semver@5.4.1"
      ]
    },
    {
      "ref": "pkg:npm/arrify@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie-promise@2.0.1",
      "dependsOn": [
        "pkg:npm/pinkie@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/path-exists@2.1.0",
      "dependsOn": [
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/find-up@1.1.2",
      "dependsOn": [
        "pkg:npm/path-exists@2.1.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-arrayish@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-ex@1.3.1",
      "dependsOn": [
        "pkg:npm/is-arrayish@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/parse-json@2.2.0",
      "dependsOn": [
        "pkg:npm/error-ex@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/pify@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-utf8@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom@2.0.0",
      "dependsOn": [
        "pkg:npm/is-utf8@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/load-json-file@1.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/strip-bom@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/hosted-git-info@2.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/builtin-modules@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-builtin-module@1.0.0",
      "dependsOn": [
        "pkg:npm/builtin-modules@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/spdx-license-ids@1.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-correct@1.0.2",
      "dependsOn": [
        "pkg:npm/spdx-license-ids@1.2.2"
      ]
    },
    {
      "ref": "pkg:npm/spdx-expression-parse@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/validate-npm-package-license@3.0.1",
      "dependsOn": [
        "pkg:npm/spdx-correct@1.0.2",
        "pkg:npm/spdx-expression-parse@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/normalize-package-data@2.4.0",
      "dependsOn": [
        "pkg:npm/hosted-git-info@2.5.0",
        "pkg:npm/is-builtin-module@1.0.0",
        "pkg:npm/semver@5.4.1",
        "pkg:npm/validate-npm-package-license@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/path-type@1.1.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg@1.1.0",
      "dependsOn": [
        "pkg:npm/load-json-file@1.1.0",
        "pkg:npm/normalize-package-data@2.4.0",
        "pkg:npm/path-type@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg-up@1.0.1",
      "dependsOn": [
        "pkg:npm/find-up@1.1.2",
        "pkg:npm/read-pkg@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/require-main-filename@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/test-exclude@4.1.1",
      "dependsOn": [
        "pkg:npm/arrify@1.0.1",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/require-main-filename@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-istanbul@4.1.5",
      "dependsOn": [
        "pkg:npm/find-up@2.1.0",
        "pkg:npm/istanbul-lib-instrument@1.9.1",
        "pkg:npm/test-exclude@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-jest-hoist@20.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/babel-preset-jest@20.0.3",
      "dependsOn": [
        "pkg:npm/babel-plugin-jest-hoist@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/babel-jest@20.0.3",
      "dependsOn": [
        "pkg:npm/babel-core@6.26.0",
        "pkg:npm/babel-plugin-istanbul@4.1.5",
        "pkg:npm/babel-preset-jest@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/commondir@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pify@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/make-dir@1.1.0",
      "dependsOn": [
        "pkg:npm/pify@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pkg-dir@2.0.0",
      "dependsOn": [
        "pkg:npm/find-up@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/find-cache-dir@1.0.0",
      "dependsOn": [
        "pkg:npm/commondir@1.0.1",
        "pkg:npm/make-dir@1.1.0",
        "pkg:npm/pkg-dir@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/big.js@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/emojis-list@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loader-utils@1.1.0",
      "dependsOn": [
        "pkg:npm/big.js@3.2.0",
        "pkg:npm/emojis-list@2.1.0",
        "pkg:npm/json5@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-loader@7.1.2",
      "dependsOn": [
        "pkg:npm/find-cache-dir@1.0.0",
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/mkdirp@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-dynamic-import-node@1.1.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-syntax-dynamic-import@6.18.0",
        "pkg:npm/babel-template@6.26.0",
        "pkg:npm/babel-types@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-plugin-transform-react-constant-elements@6.23.0",
      "dependsOn": [
        "pkg:npm/babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-env@1.6.1",
      "dependsOn": [
        "pkg:npm/babel-plugin-check-es2015-constants@6.22.0",
        "pkg:npm/babel-plugin-syntax-trailing-function-commas@6.22.0",
        "pkg:npm/babel-plugin-transform-async-to-generator@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-arrow-functions@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-block-scoped-functions@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-block-scoping@6.26.0",
        "pkg:npm/babel-plugin-transform-es2015-classes@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-computed-properties@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-destructuring@6.23.0",
        "pkg:npm/babel-plugin-transform-es2015-duplicate-keys@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-for-of@6.23.0",
        "pkg:npm/babel-plugin-transform-es2015-function-name@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-literals@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-modules-amd@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-modules-commonjs@6.26.0",
        "pkg:npm/babel-plugin-transform-es2015-modules-systemjs@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-modules-umd@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-object-super@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-parameters@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-shorthand-properties@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-spread@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-sticky-regex@6.24.1",
        "pkg:npm/babel-plugin-transform-es2015-template-literals@6.22.0",
        "pkg:npm/babel-plugin-transform-es2015-typeof-symbol@6.23.0",
        "pkg:npm/babel-plugin-transform-es2015-unicode-regex@6.24.1",
        "pkg:npm/babel-plugin-transform-exponentiation-operator@6.24.1",
        "pkg:npm/babel-plugin-transform-regenerator@6.26.0",
        "pkg:npm/browserslist@2.9.0",
        "pkg:npm/invariant@2.2.2",
        "pkg:npm/semver@5.4.1"
      ]
    },
    {
      "ref": "pkg:npm/babel-preset-react-app@3.1.0",
      "dependsOn": [
        "pkg:npm/babel-plugin-dynamic-import-node@1.1.0",
        "pkg:npm/babel-plugin-syntax-dynamic-import@6.18.0",
        "pkg:npm/babel-plugin-transform-class-properties@6.24.1",
        "pkg:npm/babel-plugin-transform-object-rest-spread@6.26.0",
        "pkg:npm/babel-plugin-transform-react-constant-elements@6.23.0",
        "pkg:npm/babel-plugin-transform-react-jsx-self@6.22.0",
        "pkg:npm/babel-plugin-transform-react-jsx-source@6.22.0",
        "pkg:npm/babel-plugin-transform-react-jsx@6.24.1",
        "pkg:npm/babel-plugin-transform-regenerator@6.26.0",
        "pkg:npm/babel-plugin-transform-runtime@6.23.0",
        "pkg:npm/babel-preset-env@1.6.1",
        "pkg:npm/babel-preset-react@6.24.1"
      ]
    },
    {
      "ref": "pkg:npm/case-sensitive-paths-webpack-plugin@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cssesc@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fastparse@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regexpu-core@1.0.0",
      "dependsOn": [
        "pkg:npm/regenerate@1.3.3",
        "pkg:npm/regjsgen@0.2.0",
        "pkg:npm/regjsparser@0.1.5"
      ]
    },
    {
      "ref": "pkg:npm/css-selector-tokenizer@0.7.0",
      "dependsOn": [
        "pkg:npm/cssesc@0.1.0",
        "pkg:npm/fastparse@1.1.1",
        "pkg:npm/regexpu-core@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/caniuse-db@1.0.30000760",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/browserslist@1.7.7",
      "dependsOn": [
        "pkg:npm/caniuse-db@1.0.30000760",
        "pkg:npm/electron-to-chromium@1.3.27"
      ]
    },
    {
      "ref": "pkg:npm/js-base64@2.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/has-flag@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/supports-color@3.2.3",
      "dependsOn": [
        "pkg:npm/has-flag@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/postcss@5.2.18",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/js-base64@2.3.2",
        "pkg:npm/source-map@0.5.7",
        "pkg:npm/supports-color@3.2.3"
      ]
    },
    {
      "ref": "pkg:npm/autoprefixer@6.7.7",
      "dependsOn": [
        "pkg:npm/browserslist@1.7.7",
        "pkg:npm/caniuse-db@1.0.30000760",
        "pkg:npm/normalize-range@0.1.2",
        "pkg:npm/num2fraction@1.2.2",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/decamelize@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-message-helpers@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/math-expression-evaluator@1.2.17",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/reduce-function-call@1.0.2",
      "dependsOn": [
        "pkg:npm/balanced-match@0.4.2"
      ]
    },
    {
      "ref": "pkg:npm/reduce-css-calc@1.3.0",
      "dependsOn": [
        "pkg:npm/balanced-match@0.4.2",
        "pkg:npm/math-expression-evaluator@1.2.17",
        "pkg:npm/reduce-function-call@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/postcss-calc@5.3.1",
      "dependsOn": [
        "pkg:npm/postcss-message-helpers@2.0.0",
        "pkg:npm/postcss@5.2.18",
        "pkg:npm/reduce-css-calc@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/clone@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/color-string@0.3.0",
      "dependsOn": [
        "pkg:npm/color-name@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/color@0.11.4",
      "dependsOn": [
        "pkg:npm/clone@1.0.3",
        "pkg:npm/color-convert@1.9.1",
        "pkg:npm/color-string@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/css-color-names@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/colormin@1.1.2",
      "dependsOn": [
        "pkg:npm/color@0.11.4",
        "pkg:npm/css-color-names@0.0.4",
        "pkg:npm/has@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/postcss-colormin@2.2.2",
      "dependsOn": [
        "pkg:npm/colormin@1.1.2",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/postcss-convert-values@2.6.1",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/postcss-discard-comments@2.0.4",
      "dependsOn": [
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/postcss-discard-duplicates@2.1.0",
      "dependsOn": [
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/postcss-discard-empty@2.1.0",
      "dependsOn": [
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/postcss-discard-overridden@0.1.1",
      "dependsOn": [
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/uniqs@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-discard-unused@2.2.3",
      "dependsOn": [
        "pkg:npm/postcss@5.2.18",
        "pkg:npm/uniqs@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/macaddress@0.2.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uniqid@4.1.1",
      "dependsOn": [
        "pkg:npm/macaddress@0.2.8"
      ]
    },
    {
      "ref": "pkg:npm/postcss-filter-plugins@2.0.2",
      "dependsOn": [
        "pkg:npm/postcss@5.2.18",
        "pkg:npm/uniqid@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/postcss-merge-idents@2.1.7",
      "dependsOn": [
        "pkg:npm/has@1.0.1",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/postcss-merge-longhand@2.0.2",
      "dependsOn": [
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/lodash.memoize@4.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.uniq@4.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caniuse-api@1.6.1",
      "dependsOn": [
        "pkg:npm/browserslist@1.7.7",
        "pkg:npm/caniuse-db@1.0.30000760",
        "pkg:npm/lodash.memoize@4.1.2",
        "pkg:npm/lodash.uniq@4.5.0"
      ]
    },
    {
      "ref": "pkg:npm/flatten@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/indexes-of@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uniq@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-selector-parser@2.2.3",
      "dependsOn": [
        "pkg:npm/flatten@1.0.2",
        "pkg:npm/indexes-of@1.0.1",
        "pkg:npm/uniq@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/vendors@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-merge-rules@2.1.2",
      "dependsOn": [
        "pkg:npm/browserslist@1.7.7",
        "pkg:npm/caniuse-api@1.6.1",
        "pkg:npm/postcss-selector-parser@2.2.3",
        "pkg:npm/postcss@5.2.18",
        "pkg:npm/vendors@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/postcss-minify-font-values@1.0.5",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/postcss-minify-gradients@1.0.5",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/alphanum-sort@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-minify-params@1.2.2",
      "dependsOn": [
        "pkg:npm/alphanum-sort@1.0.2",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.18",
        "pkg:npm/uniqs@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/postcss-minify-selectors@2.1.1",
      "dependsOn": [
        "pkg:npm/alphanum-sort@1.0.2",
        "pkg:npm/has@1.0.1",
        "pkg:npm/postcss-selector-parser@2.2.3",
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/postcss-normalize-charset@1.1.1",
      "dependsOn": [
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/is-absolute-url@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prepend-http@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strict-uri-encode@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/query-string@4.3.4",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/strict-uri-encode@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/is-plain-obj@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sort-keys@1.1.2",
      "dependsOn": [
        "pkg:npm/is-plain-obj@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/normalize-url@1.9.1",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/prepend-http@1.0.4",
        "pkg:npm/query-string@4.3.4",
        "pkg:npm/sort-keys@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/postcss-normalize-url@3.0.8",
      "dependsOn": [
        "pkg:npm/is-absolute-url@2.1.0",
        "pkg:npm/normalize-url@1.9.1",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/postcss-ordered-values@2.2.3",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/postcss-reduce-idents@2.4.0",
      "dependsOn": [
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/postcss-reduce-initial@1.0.1",
      "dependsOn": [
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/postcss-reduce-transforms@1.0.4",
      "dependsOn": [
        "pkg:npm/has@1.0.1",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/html-comment-regex@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-svg@2.1.0",
      "dependsOn": [
        "pkg:npm/html-comment-regex@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/q@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/coa@1.0.4",
      "dependsOn": [
        "pkg:npm/q@1.5.1"
      ]
    },
    {
      "ref": "pkg:npm/colors@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/clap@1.2.3",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/csso@2.3.2",
      "dependsOn": [
        "pkg:npm/clap@1.2.3",
        "pkg:npm/source-map@0.5.7"
      ]
    },
    {
      "ref": "pkg:npm/sprintf-js@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/argparse@1.0.9",
      "dependsOn": [
        "pkg:npm/sprintf-js@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/esprima@2.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@3.7.0",
      "dependsOn": [
        "pkg:npm/argparse@1.0.9",
        "pkg:npm/esprima@2.7.3"
      ]
    },
    {
      "ref": "pkg:npm/sax@1.2.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/whet.extend@0.9.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/svgo@0.7.2",
      "dependsOn": [
        "pkg:npm/coa@1.0.4",
        "pkg:npm/colors@1.1.2",
        "pkg:npm/csso@2.3.2",
        "pkg:npm/js-yaml@3.7.0",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/sax@1.2.4",
        "pkg:npm/whet.extend@0.9.9"
      ]
    },
    {
      "ref": "pkg:npm/postcss-svgo@2.1.6",
      "dependsOn": [
        "pkg:npm/is-svg@2.1.0",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.18",
        "pkg:npm/svgo@0.7.2"
      ]
    },
    {
      "ref": "pkg:npm/postcss-unique-selectors@2.0.2",
      "dependsOn": [
        "pkg:npm/alphanum-sort@1.0.2",
        "pkg:npm/postcss@5.2.18",
        "pkg:npm/uniqs@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/postcss-zindex@2.2.0",
      "dependsOn": [
        "pkg:npm/has@1.0.1",
        "pkg:npm/postcss@5.2.18",
        "pkg:npm/uniqs@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cssnano@3.10.0",
      "dependsOn": [
        "pkg:npm/autoprefixer@6.7.7",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/defined@1.0.0",
        "pkg:npm/has@1.0.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/postcss-calc@5.3.1",
        "pkg:npm/postcss-colormin@2.2.2",
        "pkg:npm/postcss-convert-values@2.6.1",
        "pkg:npm/postcss-discard-comments@2.0.4",
        "pkg:npm/postcss-discard-duplicates@2.1.0",
        "pkg:npm/postcss-discard-empty@2.1.0",
        "pkg:npm/postcss-discard-overridden@0.1.1",
        "pkg:npm/postcss-discard-unused@2.2.3",
        "pkg:npm/postcss-filter-plugins@2.0.2",
        "pkg:npm/postcss-merge-idents@2.1.7",
        "pkg:npm/postcss-merge-longhand@2.0.2",
        "pkg:npm/postcss-merge-rules@2.1.2",
        "pkg:npm/postcss-minify-font-values@1.0.5",
        "pkg:npm/postcss-minify-gradients@1.0.5",
        "pkg:npm/postcss-minify-params@1.2.2",
        "pkg:npm/postcss-minify-selectors@2.1.1",
        "pkg:npm/postcss-normalize-charset@1.1.1",
        "pkg:npm/postcss-normalize-url@3.0.8",
        "pkg:npm/postcss-ordered-values@2.2.3",
        "pkg:npm/postcss-reduce-idents@2.4.0",
        "pkg:npm/postcss-reduce-initial@1.0.1",
        "pkg:npm/postcss-reduce-transforms@1.0.4",
        "pkg:npm/postcss-svgo@2.1.6",
        "pkg:npm/postcss-unique-selectors@2.0.2",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss-zindex@2.2.0",
        "pkg:npm/postcss@5.2.18"
      ]
    },
    {
      "ref": "pkg:npm/icss-utils@2.1.0",
      "dependsOn": [
        "pkg:npm/postcss@6.0.14"
      ]
    },
    {
      "ref": "pkg:npm/lodash.camelcase@4.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-modules-extract-imports@1.1.0",
      "dependsOn": [
        "pkg:npm/postcss@6.0.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-modules-local-by-default@1.2.0",
      "dependsOn": [
        "pkg:npm/css-selector-tokenizer@0.7.0",
        "pkg:npm/postcss@6.0.14"
      ]
    },
    {
      "ref": "pkg:npm/postcss-modules-scope@1.1.0",
      "dependsOn": [
        "pkg:npm/css-selector-tokenizer@0.7.0",
        "pkg:npm/postcss@6.0.14"
      ]
    },
    {
      "ref": "pkg:npm/icss-replace-symbols@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/postcss-modules-values@1.3.0",
      "dependsOn": [
        "pkg:npm/icss-replace-symbols@1.1.0",
        "pkg:npm/postcss@6.0.14"
      ]
    },
    {
      "ref": "pkg:npm/source-list-map@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-loader@0.28.7",
      "dependsOn": [
        "pkg:npm/babel-code-frame@6.26.0",
        "pkg:npm/css-selector-tokenizer@0.7.0",
        "pkg:npm/cssnano@3.10.0",
        "pkg:npm/icss-utils@2.1.0",
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/lodash.camelcase@4.3.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/postcss-modules-extract-imports@1.1.0",
        "pkg:npm/postcss-modules-local-by-default@1.2.0",
        "pkg:npm/postcss-modules-scope@1.1.0",
        "pkg:npm/postcss-modules-values@1.3.0",
        "pkg:npm/postcss-value-parser@3.3.0",
        "pkg:npm/postcss@5.2.18",
        "pkg:npm/source-list-map@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/dotenv@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-deep-equal@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-json-stable-stringify@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-schema-traverse@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ajv@5.3.0",
      "dependsOn": [
        "pkg:npm/co@4.6.0",
        "pkg:npm/fast-deep-equal@1.0.0",
        "pkg:npm/fast-json-stable-stringify@2.0.0",
        "pkg:npm/json-schema-traverse@0.3.1"
      ]
    },
    {
      "ref": "pkg:npm/concat-stream@1.6.0",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/typedarray@0.0.6"
      ]
    },
    {
      "ref": "pkg:npm/pseudomap@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yallist@2.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@4.1.1",
      "dependsOn": [
        "pkg:npm/pseudomap@1.0.2",
        "pkg:npm/yallist@2.1.2"
      ]
    },
    {
      "ref": "pkg:npm/shebang-regex@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shebang-command@1.2.0",
      "dependsOn": [
        "pkg:npm/shebang-regex@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/isexe@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which@1.3.0",
      "dependsOn": [
        "pkg:npm/isexe@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cross-spawn@5.1.0",
      "dependsOn": [
        "pkg:npm/lru-cache@4.1.1",
        "pkg:npm/shebang-command@1.2.0",
        "pkg:npm/which@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/debug@3.1.0",
      "dependsOn": [
        "pkg:npm/ms@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/doctrine@2.0.0",
      "dependsOn": [
        "pkg:npm/esutils@2.0.2",
        "pkg:npm/isarray@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/estraverse@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esrecurse@4.2.0",
      "dependsOn": [
        "pkg:npm/estraverse@4.2.0",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/eslint-scope@3.7.1",
      "dependsOn": [
        "pkg:npm/esrecurse@4.2.0",
        "pkg:npm/estraverse@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/acorn@5.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn@3.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-jsx@3.0.1",
      "dependsOn": [
        "pkg:npm/acorn@3.3.0"
      ]
    },
    {
      "ref": "pkg:npm/espree@3.5.2",
      "dependsOn": [
        "pkg:npm/acorn-jsx@3.0.1",
        "pkg:npm/acorn@5.2.1"
      ]
    },
    {
      "ref": "pkg:npm/esquery@1.0.0",
      "dependsOn": [
        "pkg:npm/estraverse@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/circular-json@0.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-uniq@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-union@1.0.2",
      "dependsOn": [
        "pkg:npm/array-uniq@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/globby@5.0.0",
      "dependsOn": [
        "pkg:npm/array-union@1.0.2",
        "pkg:npm/arrify@1.0.1",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-path-cwd@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-is-inside@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-path-inside@1.0.0",
      "dependsOn": [
        "pkg:npm/path-is-inside@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/is-path-in-cwd@1.0.0",
      "dependsOn": [
        "pkg:npm/is-path-inside@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/rimraf@2.6.2",
      "dependsOn": [
        "pkg:npm/glob@7.1.2"
      ]
    },
    {
      "ref": "pkg:npm/del@2.2.2",
      "dependsOn": [
        "pkg:npm/globby@5.0.0",
        "pkg:npm/is-path-cwd@1.0.0",
        "pkg:npm/is-path-in-cwd@1.0.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/rimraf@2.6.2"
      ]
    },
    {
      "ref": "pkg:npm/write@0.2.1",
      "dependsOn": [
        "pkg:npm/mkdirp@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/flat-cache@1.3.0",
      "dependsOn": [
        "pkg:npm/circular-json@0.3.3",
        "pkg:npm/del@2.2.2",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/write@0.2.1"
      ]
    },
    {
      "ref": "pkg:npm/file-entry-cache@2.0.0",
      "dependsOn": [
        "pkg:npm/flat-cache@1.3.0",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/functional-red-black-tree@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ignore@3.3.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/imurmurhash@0.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-escapes@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mimic-fn@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/onetime@2.0.1",
      "dependsOn": [
        "pkg:npm/mimic-fn@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/restore-cursor@2.0.0",
      "dependsOn": [
        "pkg:npm/onetime@2.0.1",
        "pkg:npm/signal-exit@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/cli-cursor@2.1.0",
      "dependsOn": [
        "pkg:npm/restore-cursor@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/cli-width@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jschardet@1.6.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tmp@0.0.33",
      "dependsOn": [
        "pkg:npm/os-tmpdir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/external-editor@2.0.5",
      "dependsOn": [
        "pkg:npm/iconv-lite@0.4.19",
        "pkg:npm/jschardet@1.6.0",
        "pkg:npm/tmp@0.0.33"
      ]
    },
    {
      "ref": "pkg:npm/figures@2.0.0",
      "dependsOn": [
        "pkg:npm/escape-string-regexp@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/mute-stream@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-promise@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/run-async@2.3.0",
      "dependsOn": [
        "pkg:npm/is-promise@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/rx-lite@4.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rx-lite-aggregates@4.0.8",
      "dependsOn": [
        "pkg:npm/rx-lite@4.0.8"
      ]
    },
    {
      "ref": "pkg:npm/is-fullwidth-code-point@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ansi-regex@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-ansi@4.0.0",
      "dependsOn": [
        "pkg:npm/ansi-regex@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/string-width@2.1.1",
      "dependsOn": [
        "pkg:npm/is-fullwidth-code-point@2.0.0",
        "pkg:npm/strip-ansi@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/inquirer@3.3.0",
      "dependsOn": [
        "pkg:npm/ansi-escapes@3.0.0",
        "pkg:npm/chalk@2.3.0",
        "pkg:npm/cli-cursor@2.1.0",
        "pkg:npm/cli-width@2.2.0",
        "pkg:npm/external-editor@2.0.5",
        "pkg:npm/figures@2.0.0",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/mute-stream@0.0.7",
        "pkg:npm/run-async@2.3.0",
        "pkg:npm/rx-lite-aggregates@4.0.8",
        "pkg:npm/rx-lite@4.0.8",
        "pkg:npm/string-width@2.1.1",
        "pkg:npm/strip-ansi@4.0.0",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/tryit@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-resolvable@1.0.0",
      "dependsOn": [
        "pkg:npm/tryit@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/esprima@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/js-yaml@3.10.0",
      "dependsOn": [
        "pkg:npm/argparse@1.0.9",
        "pkg:npm/esprima@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/prelude-ls@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/type-check@0.3.2",
      "dependsOn": [
        "pkg:npm/prelude-ls@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/levn@0.3.0",
      "dependsOn": [
        "pkg:npm/prelude-ls@1.1.2",
        "pkg:npm/type-check@0.3.2"
      ]
    },
    {
      "ref": "pkg:npm/natural-compare@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-is@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fast-levenshtein@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrap@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optionator@0.8.2",
      "dependsOn": [
        "pkg:npm/deep-is@0.1.3",
        "pkg:npm/fast-levenshtein@2.0.6",
        "pkg:npm/levn@0.3.0",
        "pkg:npm/prelude-ls@1.1.2",
        "pkg:npm/type-check@0.3.2",
        "pkg:npm/wordwrap@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pluralize@7.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/progress@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/callsites@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caller-path@0.1.0",
      "dependsOn": [
        "pkg:npm/callsites@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/resolve-from@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/require-uncached@1.0.3",
      "dependsOn": [
        "pkg:npm/caller-path@0.1.0",
        "pkg:npm/resolve-from@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/ajv-keywords@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/slice-ansi@1.0.0",
      "dependsOn": [
        "pkg:npm/is-fullwidth-code-point@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/table@4.0.2",
      "dependsOn": [
        "pkg:npm/ajv-keywords@2.1.1",
        "pkg:npm/ajv@5.3.0",
        "pkg:npm/chalk@2.3.0",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/slice-ansi@1.0.0",
        "pkg:npm/string-width@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/text-table@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint@4.10.0",
      "dependsOn": [
        "pkg:npm/ajv@5.3.0",
        "pkg:npm/babel-code-frame@6.26.0",
        "pkg:npm/chalk@2.3.0",
        "pkg:npm/concat-stream@1.6.0",
        "pkg:npm/cross-spawn@5.1.0",
        "pkg:npm/debug@3.1.0",
        "pkg:npm/doctrine@2.0.0",
        "pkg:npm/eslint-scope@3.7.1",
        "pkg:npm/espree@3.5.2",
        "pkg:npm/esquery@1.0.0",
        "pkg:npm/estraverse@4.2.0",
        "pkg:npm/esutils@2.0.2",
        "pkg:npm/file-entry-cache@2.0.0",
        "pkg:npm/functional-red-black-tree@1.0.1",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/globals@9.18.0",
        "pkg:npm/ignore@3.3.7",
        "pkg:npm/imurmurhash@0.1.4",
        "pkg:npm/inquirer@3.3.0",
        "pkg:npm/is-resolvable@1.0.0",
        "pkg:npm/js-yaml@3.10.0",
        "pkg:npm/json-stable-stringify@1.0.1",
        "pkg:npm/levn@0.3.0",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/natural-compare@1.4.0",
        "pkg:npm/optionator@0.8.2",
        "pkg:npm/path-is-inside@1.0.2",
        "pkg:npm/pluralize@7.0.0",
        "pkg:npm/progress@2.0.0",
        "pkg:npm/require-uncached@1.0.3",
        "pkg:npm/semver@5.4.1",
        "pkg:npm/strip-ansi@4.0.0",
        "pkg:npm/strip-json-comments@2.0.1",
        "pkg:npm/table@4.0.2",
        "pkg:npm/text-table@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-config-react-app@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pkg-dir@1.0.0",
      "dependsOn": [
        "pkg:npm/find-up@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/find-cache-dir@0.1.1",
      "dependsOn": [
        "pkg:npm/commondir@1.0.1",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/pkg-dir@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/loader-fs-cache@1.0.1",
      "dependsOn": [
        "pkg:npm/find-cache-dir@0.1.1",
        "pkg:npm/mkdirp@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/object-hash@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-loader@1.9.0",
      "dependsOn": [
        "pkg:npm/loader-fs-cache@1.0.1",
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/object-hash@1.2.0",
        "pkg:npm/rimraf@2.6.2"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-flowtype@2.39.1",
      "dependsOn": [
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/contains-path@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/doctrine@1.5.0",
      "dependsOn": [
        "pkg:npm/esutils@2.0.2",
        "pkg:npm/isarray@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-import-resolver-node@0.3.1",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/resolve@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-module-utils@2.1.1",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/pkg-dir@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.cond@4.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-bom@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/load-json-file@2.0.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/strip-bom@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/path-type@2.0.0",
      "dependsOn": [
        "pkg:npm/pify@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg@2.0.0",
      "dependsOn": [
        "pkg:npm/load-json-file@2.0.0",
        "pkg:npm/normalize-package-data@2.4.0",
        "pkg:npm/path-type@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/read-pkg-up@2.0.0",
      "dependsOn": [
        "pkg:npm/find-up@2.1.0",
        "pkg:npm/read-pkg@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-import@2.8.0",
      "dependsOn": [
        "pkg:npm/builtin-modules@1.1.1",
        "pkg:npm/contains-path@0.1.0",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/doctrine@1.5.0",
        "pkg:npm/eslint-import-resolver-node@0.3.1",
        "pkg:npm/eslint-module-utils@2.1.1",
        "pkg:npm/has@1.0.1",
        "pkg:npm/lodash.cond@4.5.2",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/read-pkg-up@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ast-types-flow@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aria-query@0.7.0",
      "dependsOn": [
        "pkg:npm/ast-types-flow@0.0.7"
      ]
    },
    {
      "ref": "pkg:npm/foreach@2.0.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-keys@1.0.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/define-properties@1.1.2",
      "dependsOn": [
        "pkg:npm/foreach@2.0.5",
        "pkg:npm/object-keys@1.0.11"
      ]
    },
    {
      "ref": "pkg:npm/is-callable@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-date-object@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-symbol@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/es-to-primitive@1.1.1",
      "dependsOn": [
        "pkg:npm/is-callable@1.1.3",
        "pkg:npm/is-date-object@1.0.1",
        "pkg:npm/is-symbol@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-regex@1.0.4",
      "dependsOn": [
        "pkg:npm/has@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/es-abstract@1.9.0",
      "dependsOn": [
        "pkg:npm/es-to-primitive@1.1.1",
        "pkg:npm/function-bind@1.1.1",
        "pkg:npm/has@1.0.1",
        "pkg:npm/is-callable@1.1.3",
        "pkg:npm/is-regex@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/array-includes@3.0.3",
      "dependsOn": [
        "pkg:npm/define-properties@1.1.2",
        "pkg:npm/es-abstract@1.9.0"
      ]
    },
    {
      "ref": "pkg:npm/axobject-query@0.1.0",
      "dependsOn": [
        "pkg:npm/ast-types-flow@0.0.7"
      ]
    },
    {
      "ref": "pkg:npm/damerau-levenshtein@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/emoji-regex@6.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsx-ast-utils@1.4.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eslint-plugin-jsx-a11y@5.1.1",
      "dependsOn": [
        "pkg:npm/aria-query@0.7.0",
        "pkg:npm/array-includes@3.0.3",
        "pkg:npm/ast-types-flow@0.0.7",
        "pkg:npm/axobject-query@0.1.0",
        "pkg:npm/damerau-levenshtein@1.0.4",
        "pkg:npm/emoji-regex@6.5.1",
        "pkg:npm/jsx-ast-utils@1.4.1"
      ]
    },
    {
      "ref": "pkg:npm/jsx-ast-utils@2.0.1",
      "dependsOn": [
        "pkg:npm/array-includes@3.0.3"
      ]
    },
    {
      "ref": "pkg:npm/eslint-plugin-react@7.4.0",
      "dependsOn": [
        "pkg:npm/doctrine@2.0.0",
        "pkg:npm/has@1.0.1",
        "pkg:npm/jsx-ast-utils@2.0.1",
        "pkg:npm/prop-types@15.6.0"
      ]
    },
    {
      "ref": "pkg:npm/async@2.6.0",
      "dependsOn": [
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/schema-utils@0.3.0",
      "dependsOn": [
        "pkg:npm/ajv@5.3.0"
      ]
    },
    {
      "ref": "pkg:npm/webpack-sources@1.0.2",
      "dependsOn": [
        "pkg:npm/source-list-map@2.0.0",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/extract-text-webpack-plugin@3.0.2",
      "dependsOn": [
        "pkg:npm/async@2.6.0",
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/schema-utils@0.3.0",
        "pkg:npm/webpack-sources@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/file-loader@1.1.5",
      "dependsOn": [
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/schema-utils@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/jsonfile@3.0.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11"
      ]
    },
    {
      "ref": "pkg:npm/universalify@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fs-extra@3.0.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jsonfile@3.0.1",
        "pkg:npm/universalify@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/bluebird@3.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lower-case@1.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/no-case@2.3.2",
      "dependsOn": [
        "pkg:npm/lower-case@1.1.4"
      ]
    },
    {
      "ref": "pkg:npm/upper-case@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camel-case@3.0.0",
      "dependsOn": [
        "pkg:npm/no-case@2.3.2",
        "pkg:npm/upper-case@1.1.3"
      ]
    },
    {
      "ref": "pkg:npm/clean-css@4.1.9",
      "dependsOn": [
        "pkg:npm/source-map@0.5.7"
      ]
    },
    {
      "ref": "pkg:npm/commander@2.11.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xml-char-classes@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ncname@1.0.0",
      "dependsOn": [
        "pkg:npm/xml-char-classes@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/param-case@2.1.1",
      "dependsOn": [
        "pkg:npm/no-case@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/relateurl@0.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/uglify-js@3.1.9",
      "dependsOn": [
        "pkg:npm/commander@2.11.0",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/html-minifier@3.5.6",
      "dependsOn": [
        "pkg:npm/camel-case@3.0.0",
        "pkg:npm/clean-css@4.1.9",
        "pkg:npm/commander@2.11.0",
        "pkg:npm/he@1.1.1",
        "pkg:npm/ncname@1.0.0",
        "pkg:npm/param-case@2.1.1",
        "pkg:npm/relateurl@0.2.7",
        "pkg:npm/uglify-js@3.1.9"
      ]
    },
    {
      "ref": "pkg:npm/loader-utils@0.2.17",
      "dependsOn": [
        "pkg:npm/big.js@3.2.0",
        "pkg:npm/emojis-list@2.1.0",
        "pkg:npm/json5@0.5.1",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/boolbase@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/css-what@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domelementtype@1.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/entities@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dom-serializer@0.1.0",
      "dependsOn": [
        "pkg:npm/domelementtype@1.1.3",
        "pkg:npm/entities@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/domelementtype@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/domutils@1.5.1",
      "dependsOn": [
        "pkg:npm/dom-serializer@0.1.0",
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/nth-check@1.0.1",
      "dependsOn": [
        "pkg:npm/boolbase@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/css-select@1.2.0",
      "dependsOn": [
        "pkg:npm/boolbase@1.0.0",
        "pkg:npm/css-what@2.1.0",
        "pkg:npm/domutils@1.5.1",
        "pkg:npm/nth-check@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/utila@0.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dom-converter@0.1.4",
      "dependsOn": [
        "pkg:npm/utila@0.3.3"
      ]
    },
    {
      "ref": "pkg:npm/domhandler@2.1.0",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/domutils@1.1.6",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/readable-stream@1.0.34",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/isarray@0.0.1",
        "pkg:npm/string_decoder@0.10.31"
      ]
    },
    {
      "ref": "pkg:npm/htmlparser2@3.3.0",
      "dependsOn": [
        "pkg:npm/domelementtype@1.3.0",
        "pkg:npm/domhandler@2.1.0",
        "pkg:npm/domutils@1.1.6",
        "pkg:npm/readable-stream@1.0.34"
      ]
    },
    {
      "ref": "pkg:npm/renderkid@2.0.1",
      "dependsOn": [
        "pkg:npm/css-select@1.2.0",
        "pkg:npm/dom-converter@0.1.4",
        "pkg:npm/htmlparser2@3.3.0",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/utila@0.3.3"
      ]
    },
    {
      "ref": "pkg:npm/utila@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pretty-error@2.1.1",
      "dependsOn": [
        "pkg:npm/renderkid@2.0.1",
        "pkg:npm/utila@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/toposort@1.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/html-webpack-plugin@2.29.0",
      "dependsOn": [
        "pkg:npm/bluebird@3.5.1",
        "pkg:npm/html-minifier@3.5.6",
        "pkg:npm/loader-utils@0.2.17",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/pretty-error@2.1.1",
        "pkg:npm/toposort@1.0.6"
      ]
    },
    {
      "ref": "pkg:npm/ansi-escapes@1.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/callsites@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ci-info@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-ci@1.0.10",
      "dependsOn": [
        "pkg:npm/ci-info@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/fileset@2.0.3",
      "dependsOn": [
        "pkg:npm/glob@7.1.2",
        "pkg:npm/minimatch@3.0.4"
      ]
    },
    {
      "ref": "pkg:npm/default-require-extensions@1.0.0",
      "dependsOn": [
        "pkg:npm/strip-bom@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/append-transform@0.4.0",
      "dependsOn": [
        "pkg:npm/default-require-extensions@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-hook@1.1.0",
      "dependsOn": [
        "pkg:npm/append-transform@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-report@1.1.2",
      "dependsOn": [
        "pkg:npm/istanbul-lib-coverage@1.1.1",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/path-parse@1.0.5",
        "pkg:npm/supports-color@3.2.3"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-lib-source-maps@1.2.2",
      "dependsOn": [
        "pkg:npm/debug@3.1.0",
        "pkg:npm/istanbul-lib-coverage@1.1.1",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/rimraf@2.6.2",
        "pkg:npm/source-map@0.5.7"
      ]
    },
    {
      "ref": "pkg:npm/async@1.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/optimist@0.6.1",
      "dependsOn": [
        "pkg:npm/minimist@0.0.8",
        "pkg:npm/wordwrap@0.0.3"
      ]
    },
    {
      "ref": "pkg:npm/source-map@0.4.4",
      "dependsOn": [
        "pkg:npm/amdefine@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/uglify-to-browserify@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/longest@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/align-text@0.1.4",
      "dependsOn": [
        "pkg:npm/kind-of@3.2.2",
        "pkg:npm/longest@1.0.1",
        "pkg:npm/repeat-string@1.6.1"
      ]
    },
    {
      "ref": "pkg:npm/lazy-cache@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/center-align@0.1.3",
      "dependsOn": [
        "pkg:npm/align-text@0.1.4",
        "pkg:npm/lazy-cache@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/right-align@0.1.3",
      "dependsOn": [
        "pkg:npm/align-text@0.1.4"
      ]
    },
    {
      "ref": "pkg:npm/wordwrap@0.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cliui@2.1.0",
      "dependsOn": [
        "pkg:npm/center-align@0.1.3",
        "pkg:npm/right-align@0.1.3",
        "pkg:npm/wordwrap@0.0.2"
      ]
    },
    {
      "ref": "pkg:npm/window-size@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@3.10.0",
      "dependsOn": [
        "pkg:npm/camelcase@1.2.1",
        "pkg:npm/cliui@2.1.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/window-size@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/uglify-js@2.8.29",
      "dependsOn": [
        "pkg:npm/source-map@0.5.7",
        "pkg:npm/uglify-to-browserify@1.0.2",
        "pkg:npm/yargs@3.10.0"
      ]
    },
    {
      "ref": "pkg:npm/handlebars@4.0.11",
      "dependsOn": [
        "pkg:npm/async@1.5.2",
        "pkg:npm/optimist@0.6.1",
        "pkg:npm/source-map@0.4.4",
        "pkg:npm/uglify-js@2.8.29"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-reports@1.1.3",
      "dependsOn": [
        "pkg:npm/handlebars@4.0.11"
      ]
    },
    {
      "ref": "pkg:npm/istanbul-api@1.2.1",
      "dependsOn": [
        "pkg:npm/async@2.6.0",
        "pkg:npm/fileset@2.0.3",
        "pkg:npm/istanbul-lib-coverage@1.1.1",
        "pkg:npm/istanbul-lib-hook@1.1.0",
        "pkg:npm/istanbul-lib-instrument@1.9.1",
        "pkg:npm/istanbul-lib-report@1.1.2",
        "pkg:npm/istanbul-lib-source-maps@1.2.2",
        "pkg:npm/istanbul-reports@1.1.3",
        "pkg:npm/js-yaml@3.7.0",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-changed-files@20.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-mock@20.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-message-util@20.0.3",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/slash@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pretty-format@20.0.3",
      "dependsOn": [
        "pkg:npm/ansi-regex@2.1.1",
        "pkg:npm/ansi-styles@3.2.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-matcher-utils@20.0.3",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/pretty-format@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/leven@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-validate@20.0.3",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/jest-matcher-utils@20.0.3",
        "pkg:npm/leven@2.1.0",
        "pkg:npm/pretty-format@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/jest-util@20.0.3",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jest-message-util@20.0.3",
        "pkg:npm/jest-mock@20.0.3",
        "pkg:npm/jest-validate@20.0.3",
        "pkg:npm/leven@2.1.0",
        "pkg:npm/mkdirp@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/abab@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/acorn-globals@3.1.0",
      "dependsOn": [
        "pkg:npm/acorn@4.0.13"
      ]
    },
    {
      "ref": "pkg:npm/array-equal@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/content-type-parser@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cssom@0.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cssstyle@0.2.37",
      "dependsOn": [
        "pkg:npm/cssom@0.3.2"
      ]
    },
    {
      "ref": "pkg:npm/esprima@3.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escodegen@1.9.0",
      "dependsOn": [
        "pkg:npm/esprima@3.1.3",
        "pkg:npm/estraverse@4.2.0",
        "pkg:npm/esutils@2.0.2",
        "pkg:npm/optionator@0.8.2",
        "pkg:npm/source-map@0.5.7"
      ]
    },
    {
      "ref": "pkg:npm/whatwg-encoding@1.0.3",
      "dependsOn": [
        "pkg:npm/iconv-lite@0.4.19"
      ]
    },
    {
      "ref": "pkg:npm/html-encoding-sniffer@1.0.2",
      "dependsOn": [
        "pkg:npm/whatwg-encoding@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/nwmatcher@1.4.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse5@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/aws-sign2@0.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/form-data@2.3.1",
      "dependsOn": [
        "pkg:npm/asynckit@0.4.0",
        "pkg:npm/combined-stream@1.0.5",
        "pkg:npm/mime-types@2.1.17"
      ]
    },
    {
      "ref": "pkg:npm/har-schema@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/har-validator@5.0.3",
      "dependsOn": [
        "pkg:npm/ajv@5.3.0",
        "pkg:npm/har-schema@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/hoek@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/boom@4.3.1",
      "dependsOn": [
        "pkg:npm/hoek@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/boom@5.2.0",
      "dependsOn": [
        "pkg:npm/hoek@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/cryptiles@3.1.2",
      "dependsOn": [
        "pkg:npm/boom@5.2.0"
      ]
    },
    {
      "ref": "pkg:npm/sntp@2.1.0",
      "dependsOn": [
        "pkg:npm/hoek@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/hawk@6.0.2",
      "dependsOn": [
        "pkg:npm/boom@4.3.1",
        "pkg:npm/cryptiles@3.1.2",
        "pkg:npm/hoek@4.2.0",
        "pkg:npm/sntp@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/extsprintf@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/verror@1.10.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/core-util-is@1.0.2",
        "pkg:npm/extsprintf@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/jsprim@1.4.1",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/extsprintf@1.3.0",
        "pkg:npm/json-schema@0.2.3",
        "pkg:npm/verror@1.10.0"
      ]
    },
    {
      "ref": "pkg:npm/sshpk@1.13.1",
      "dependsOn": [
        "pkg:npm/asn1@0.2.3",
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/bcrypt-pbkdf@1.0.1",
        "pkg:npm/dashdash@1.14.1",
        "pkg:npm/ecc-jsbn@0.1.1",
        "pkg:npm/getpass@0.1.7",
        "pkg:npm/jsbn@0.1.1",
        "pkg:npm/tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "pkg:npm/http-signature@1.2.0",
      "dependsOn": [
        "pkg:npm/assert-plus@1.0.0",
        "pkg:npm/jsprim@1.4.1",
        "pkg:npm/sshpk@1.13.1"
      ]
    },
    {
      "ref": "pkg:npm/performance-now@2.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tough-cookie@2.3.3",
      "dependsOn": [
        "pkg:npm/punycode@1.4.1"
      ]
    },
    {
      "ref": "pkg:npm/uuid@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/request@2.83.0",
      "dependsOn": [
        "pkg:npm/aws-sign2@0.7.0",
        "pkg:npm/aws4@1.6.0",
        "pkg:npm/caseless@0.12.0",
        "pkg:npm/combined-stream@1.0.5",
        "pkg:npm/extend@3.0.1",
        "pkg:npm/forever-agent@0.6.1",
        "pkg:npm/form-data@2.3.1",
        "pkg:npm/har-validator@5.0.3",
        "pkg:npm/hawk@6.0.2",
        "pkg:npm/http-signature@1.2.0",
        "pkg:npm/is-typedarray@1.0.0",
        "pkg:npm/isstream@0.1.2",
        "pkg:npm/json-stringify-safe@5.0.1",
        "pkg:npm/mime-types@2.1.17",
        "pkg:npm/oauth-sign@0.8.2",
        "pkg:npm/performance-now@2.1.0",
        "pkg:npm/qs@6.5.1",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/stringstream@0.0.5",
        "pkg:npm/tough-cookie@2.3.3",
        "pkg:npm/tunnel-agent@0.6.0",
        "pkg:npm/uuid@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/symbol-tree@3.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webidl-conversions@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tr46@0.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webidl-conversions@3.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/whatwg-url@4.8.0",
      "dependsOn": [
        "pkg:npm/tr46@0.0.3",
        "pkg:npm/webidl-conversions@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/xml-name-validator@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsdom@9.12.0",
      "dependsOn": [
        "pkg:npm/abab@1.0.4",
        "pkg:npm/acorn-globals@3.1.0",
        "pkg:npm/acorn@4.0.13",
        "pkg:npm/array-equal@1.0.0",
        "pkg:npm/content-type-parser@1.0.2",
        "pkg:npm/cssom@0.3.2",
        "pkg:npm/cssstyle@0.2.37",
        "pkg:npm/escodegen@1.9.0",
        "pkg:npm/html-encoding-sniffer@1.0.2",
        "pkg:npm/nwmatcher@1.4.3",
        "pkg:npm/parse5@1.5.1",
        "pkg:npm/request@2.83.0",
        "pkg:npm/sax@1.2.4",
        "pkg:npm/symbol-tree@3.2.2",
        "pkg:npm/tough-cookie@2.3.3",
        "pkg:npm/webidl-conversions@4.0.2",
        "pkg:npm/whatwg-encoding@1.0.3",
        "pkg:npm/whatwg-url@4.8.0",
        "pkg:npm/xml-name-validator@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-environment-jsdom@20.0.3",
      "dependsOn": [
        "pkg:npm/jest-mock@20.0.3",
        "pkg:npm/jest-util@20.0.3",
        "pkg:npm/jsdom@9.12.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-environment-node@20.0.3",
      "dependsOn": [
        "pkg:npm/jest-mock@20.0.3",
        "pkg:npm/jest-util@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/diff@3.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-diff@20.0.3",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/diff@3.4.0",
        "pkg:npm/jest-matcher-utils@20.0.3",
        "pkg:npm/pretty-format@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/jest-regex-util@20.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-matchers@20.0.3",
      "dependsOn": [
        "pkg:npm/jest-diff@20.0.3",
        "pkg:npm/jest-matcher-utils@20.0.3",
        "pkg:npm/jest-message-util@20.0.3",
        "pkg:npm/jest-regex-util@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/jest-snapshot@20.0.3",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/jest-diff@20.0.3",
        "pkg:npm/jest-matcher-utils@20.0.3",
        "pkg:npm/jest-util@20.0.3",
        "pkg:npm/natural-compare@1.4.0",
        "pkg:npm/pretty-format@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/p-map@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-jasmine2@20.0.4",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jest-diff@20.0.3",
        "pkg:npm/jest-matcher-utils@20.0.3",
        "pkg:npm/jest-matchers@20.0.3",
        "pkg:npm/jest-message-util@20.0.3",
        "pkg:npm/jest-snapshot@20.0.3",
        "pkg:npm/once@1.4.0",
        "pkg:npm/p-map@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-resolve@20.0.4",
      "dependsOn": [
        "pkg:npm/browser-resolve@1.11.2",
        "pkg:npm/is-builtin-module@1.0.0",
        "pkg:npm/resolve@1.5.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-config@20.0.4",
      "dependsOn": [
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/jest-environment-jsdom@20.0.3",
        "pkg:npm/jest-environment-node@20.0.3",
        "pkg:npm/jest-jasmine2@20.0.4",
        "pkg:npm/jest-matcher-utils@20.0.3",
        "pkg:npm/jest-regex-util@20.0.3",
        "pkg:npm/jest-resolve@20.0.4",
        "pkg:npm/jest-validate@20.0.3",
        "pkg:npm/pretty-format@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/jest-docblock@20.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-int64@0.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bser@2.0.0",
      "dependsOn": [
        "pkg:npm/node-int64@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/fb-watchman@2.0.0",
      "dependsOn": [
        "pkg:npm/bser@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/merge@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/exec-sh@0.2.1",
      "dependsOn": [
        "pkg:npm/merge@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/bser@1.0.2",
      "dependsOn": [
        "pkg:npm/node-int64@0.4.0"
      ]
    },
    {
      "ref": "pkg:npm/fb-watchman@1.9.2",
      "dependsOn": [
        "pkg:npm/bser@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/tmpl@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/makeerror@1.0.11",
      "dependsOn": [
        "pkg:npm/tmpl@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/walker@1.0.7",
      "dependsOn": [
        "pkg:npm/makeerror@1.0.11"
      ]
    },
    {
      "ref": "pkg:npm/watch@0.10.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sane@1.6.0",
      "dependsOn": [
        "pkg:npm/anymatch@1.3.2",
        "pkg:npm/exec-sh@0.2.1",
        "pkg:npm/fb-watchman@1.9.2",
        "pkg:npm/minimatch@3.0.4",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/walker@1.0.7",
        "pkg:npm/watch@0.10.0"
      ]
    },
    {
      "ref": "pkg:npm/prr@0.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/errno@0.1.4",
      "dependsOn": [
        "pkg:npm/prr@0.0.0"
      ]
    },
    {
      "ref": "pkg:npm/worker-farm@1.5.1",
      "dependsOn": [
        "pkg:npm/errno@0.1.4",
        "pkg:npm/xtend@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-haste-map@20.0.5",
      "dependsOn": [
        "pkg:npm/fb-watchman@2.0.0",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jest-docblock@20.0.3",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/sane@1.6.0",
        "pkg:npm/worker-farm@1.5.1"
      ]
    },
    {
      "ref": "pkg:npm/jest-resolve-dependencies@20.0.3",
      "dependsOn": [
        "pkg:npm/jest-regex-util@20.0.3"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrap-ansi@2.1.0",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/cliui@3.2.0",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/wrap-ansi@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/get-caller-file@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/invert-kv@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lcid@1.0.0",
      "dependsOn": [
        "pkg:npm/invert-kv@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/os-locale@1.4.0",
      "dependsOn": [
        "pkg:npm/lcid@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/require-directory@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/which-module@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/y18n@3.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@5.0.0",
      "dependsOn": [
        "pkg:npm/camelcase@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs@7.1.0",
      "dependsOn": [
        "pkg:npm/camelcase@3.0.0",
        "pkg:npm/cliui@3.2.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/get-caller-file@1.0.2",
        "pkg:npm/os-locale@1.4.0",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/require-main-filename@1.0.1",
        "pkg:npm/set-blocking@2.0.0",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/which-module@1.0.0",
        "pkg:npm/y18n@3.2.1",
        "pkg:npm/yargs-parser@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/jest-runtime@20.0.4",
      "dependsOn": [
        "pkg:npm/babel-core@6.26.0",
        "pkg:npm/babel-jest@20.0.3",
        "pkg:npm/babel-plugin-istanbul@4.1.5",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/convert-source-map@1.5.0",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jest-config@20.0.4",
        "pkg:npm/jest-haste-map@20.0.5",
        "pkg:npm/jest-regex-util@20.0.3",
        "pkg:npm/jest-resolve@20.0.4",
        "pkg:npm/jest-util@20.0.3",
        "pkg:npm/json-stable-stringify@1.0.1",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/strip-bom@3.0.0",
        "pkg:npm/yargs@7.1.0"
      ]
    },
    {
      "ref": "pkg:npm/growly@1.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/shellwords@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-notifier@5.1.2",
      "dependsOn": [
        "pkg:npm/growly@1.3.0",
        "pkg:npm/semver@5.4.1",
        "pkg:npm/shellwords@0.1.1",
        "pkg:npm/which@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/string-length@1.0.1",
      "dependsOn": [
        "pkg:npm/strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "pkg:npm/throat@3.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jest-cli@20.0.4",
      "dependsOn": [
        "pkg:npm/ansi-escapes@1.4.0",
        "pkg:npm/callsites@2.0.0",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/is-ci@1.0.10",
        "pkg:npm/istanbul-api@1.2.1",
        "pkg:npm/istanbul-lib-coverage@1.1.1",
        "pkg:npm/istanbul-lib-instrument@1.9.1",
        "pkg:npm/istanbul-lib-source-maps@1.2.2",
        "pkg:npm/jest-changed-files@20.0.3",
        "pkg:npm/jest-config@20.0.4",
        "pkg:npm/jest-docblock@20.0.3",
        "pkg:npm/jest-environment-jsdom@20.0.3",
        "pkg:npm/jest-haste-map@20.0.5",
        "pkg:npm/jest-jasmine2@20.0.4",
        "pkg:npm/jest-message-util@20.0.3",
        "pkg:npm/jest-regex-util@20.0.3",
        "pkg:npm/jest-resolve-dependencies@20.0.3",
        "pkg:npm/jest-runtime@20.0.4",
        "pkg:npm/jest-snapshot@20.0.3",
        "pkg:npm/jest-util@20.0.3",
        "pkg:npm/micromatch@2.3.11",
        "pkg:npm/node-notifier@5.1.2",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/slash@1.0.0",
        "pkg:npm/string-length@1.0.1",
        "pkg:npm/throat@3.2.0",
        "pkg:npm/which@1.3.0",
        "pkg:npm/worker-farm@1.5.1",
        "pkg:npm/yargs@7.1.0"
      ]
    },
    {
      "ref": "pkg:npm/jest@20.0.4",
      "dependsOn": [
        "pkg:npm/jest-cli@20.0.4"
      ]
    },
    {
      "ref": "pkg:npm/postcss-flexbugs-fixes@3.2.0",
      "dependsOn": [
        "pkg:npm/postcss@6.0.14"
      ]
    },
    {
      "ref": "pkg:npm/is-directory@0.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/require-from-string@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cosmiconfig@2.2.2",
      "dependsOn": [
        "pkg:npm/is-directory@0.3.1",
        "pkg:npm/js-yaml@3.7.0",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/os-homedir@1.0.2",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/require-from-string@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/postcss-load-options@1.2.0",
      "dependsOn": [
        "pkg:npm/cosmiconfig@2.2.2",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/postcss-load-plugins@2.3.0",
      "dependsOn": [
        "pkg:npm/cosmiconfig@2.2.2",
        "pkg:npm/object-assign@4.1.1"
      ]
    },
    {
      "ref": "pkg:npm/postcss-load-config@1.2.0",
      "dependsOn": [
        "pkg:npm/cosmiconfig@2.2.2",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/postcss-load-options@1.2.0",
        "pkg:npm/postcss-load-plugins@2.3.0"
      ]
    },
    {
      "ref": "pkg:npm/postcss-loader@2.0.8",
      "dependsOn": [
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/postcss-load-config@1.2.0",
        "pkg:npm/postcss@6.0.14",
        "pkg:npm/schema-utils@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/promise@8.0.1",
      "dependsOn": [
        "pkg:npm/asap@2.0.6"
      ]
    },
    {
      "ref": "pkg:npm/raf@3.4.0",
      "dependsOn": [
        "pkg:npm/performance-now@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/address@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-port-alt@1.1.3",
      "dependsOn": [
        "pkg:npm/address@1.0.3",
        "pkg:npm/debug@2.6.9"
      ]
    },
    {
      "ref": "pkg:npm/filesize@3.5.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/parse-passwd@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/homedir-polyfill@1.0.1",
      "dependsOn": [
        "pkg:npm/parse-passwd@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/expand-tilde@2.0.2",
      "dependsOn": [
        "pkg:npm/homedir-polyfill@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/is-windows@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/global-prefix@1.0.2",
      "dependsOn": [
        "pkg:npm/expand-tilde@2.0.2",
        "pkg:npm/homedir-polyfill@1.0.1",
        "pkg:npm/ini@1.3.4",
        "pkg:npm/is-windows@1.0.1",
        "pkg:npm/which@1.3.0"
      ]
    },
    {
      "ref": "pkg:npm/resolve-dir@1.0.1",
      "dependsOn": [
        "pkg:npm/expand-tilde@2.0.2",
        "pkg:npm/global-modules@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/global-modules@1.0.0",
      "dependsOn": [
        "pkg:npm/global-prefix@1.0.2",
        "pkg:npm/is-windows@1.0.1",
        "pkg:npm/resolve-dir@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/duplexer@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/gzip-size@3.0.0",
      "dependsOn": [
        "pkg:npm/duplexer@0.1.1"
      ]
    },
    {
      "ref": "pkg:npm/is-root@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-wsl@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/opn@5.1.0",
      "dependsOn": [
        "pkg:npm/is-wsl@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/react-error-overlay@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@3.0.3",
      "dependsOn": [
        "pkg:npm/brace-expansion@1.1.8"
      ]
    },
    {
      "ref": "pkg:npm/recursive-readdir@2.2.1",
      "dependsOn": [
        "pkg:npm/minimatch@3.0.3"
      ]
    },
    {
      "ref": "pkg:npm/querystringify@0.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/requires-port@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url-parse@1.0.5",
      "dependsOn": [
        "pkg:npm/querystringify@0.0.4",
        "pkg:npm/requires-port@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/original@1.0.0",
      "dependsOn": [
        "pkg:npm/url-parse@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/eventsource@0.1.6",
      "dependsOn": [
        "pkg:npm/original@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/http-parser-js@0.4.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/websocket-extensions@0.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/websocket-driver@0.7.0",
      "dependsOn": [
        "pkg:npm/http-parser-js@0.4.9",
        "pkg:npm/websocket-extensions@0.1.3"
      ]
    },
    {
      "ref": "pkg:npm/faye-websocket@0.11.1",
      "dependsOn": [
        "pkg:npm/websocket-driver@0.7.0"
      ]
    },
    {
      "ref": "pkg:npm/json3@3.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/querystringify@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url-parse@1.2.0",
      "dependsOn": [
        "pkg:npm/querystringify@1.0.0",
        "pkg:npm/requires-port@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/sockjs-client@1.1.4",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/eventsource@0.1.6",
        "pkg:npm/faye-websocket@0.11.1",
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/json3@3.3.2",
        "pkg:npm/url-parse@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/react-dev-utils@4.2.1",
      "dependsOn": [
        "pkg:npm/address@1.0.3",
        "pkg:npm/babel-code-frame@6.26.0",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/cross-spawn@5.1.0",
        "pkg:npm/detect-port-alt@1.1.3",
        "pkg:npm/escape-string-regexp@1.0.5",
        "pkg:npm/filesize@3.5.11",
        "pkg:npm/global-modules@1.0.0",
        "pkg:npm/gzip-size@3.0.0",
        "pkg:npm/inquirer@3.3.0",
        "pkg:npm/is-root@1.0.0",
        "pkg:npm/opn@5.1.0",
        "pkg:npm/react-error-overlay@3.0.0",
        "pkg:npm/recursive-readdir@2.2.1",
        "pkg:npm/shell-quote@1.6.1",
        "pkg:npm/sockjs-client@1.1.4",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/text-table@0.2.0"
      ]
    },
    {
      "ref": "pkg:npm/style-loader@0.19.0",
      "dependsOn": [
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/schema-utils@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/urijs@1.19.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dom-urls@1.1.0",
      "dependsOn": [
        "pkg:npm/urijs@1.19.0"
      ]
    },
    {
      "ref": "pkg:npm/es6-promise@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.defaults@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash._reinterpolate@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lodash.templatesettings@4.1.0",
      "dependsOn": [
        "pkg:npm/lodash._reinterpolate@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/lodash.template@4.4.0",
      "dependsOn": [
        "pkg:npm/lodash._reinterpolate@3.0.0",
        "pkg:npm/lodash.templatesettings@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/map-obj@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/camelcase-keys@2.1.0",
      "dependsOn": [
        "pkg:npm/camelcase@2.1.1",
        "pkg:npm/map-obj@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/array-find-index@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/currently-unhandled@0.4.1",
      "dependsOn": [
        "pkg:npm/array-find-index@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/loud-rejection@1.6.0",
      "dependsOn": [
        "pkg:npm/currently-unhandled@0.4.1",
        "pkg:npm/signal-exit@3.0.2"
      ]
    },
    {
      "ref": "pkg:npm/indent-string@2.1.0",
      "dependsOn": [
        "pkg:npm/repeating@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/get-stdin@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-indent@1.0.1",
      "dependsOn": [
        "pkg:npm/get-stdin@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/redent@1.0.0",
      "dependsOn": [
        "pkg:npm/indent-string@2.1.0",
        "pkg:npm/strip-indent@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/trim-newlines@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/meow@3.7.0",
      "dependsOn": [
        "pkg:npm/camelcase-keys@2.1.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/loud-rejection@1.6.0",
        "pkg:npm/map-obj@1.0.1",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/normalize-package-data@2.4.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/redent@1.0.0",
        "pkg:npm/trim-newlines@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/pretty-bytes@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-to-regexp@1.7.0",
      "dependsOn": [
        "pkg:npm/isarray@0.0.1"
      ]
    },
    {
      "ref": "pkg:npm/serviceworker-cache-polyfill@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sw-toolbox@3.6.0",
      "dependsOn": [
        "pkg:npm/path-to-regexp@1.7.0",
        "pkg:npm/serviceworker-cache-polyfill@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/ansi-align@1.1.0",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/cli-boxes@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/filled-array@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/widest-line@1.0.0",
      "dependsOn": [
        "pkg:npm/string-width@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/boxen@0.6.0",
      "dependsOn": [
        "pkg:npm/ansi-align@1.1.0",
        "pkg:npm/camelcase@2.1.1",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/cli-boxes@1.0.0",
        "pkg:npm/filled-array@1.1.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/repeating@2.0.1",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/widest-line@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-obj@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dot-prop@3.0.0",
      "dependsOn": [
        "pkg:npm/is-obj@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/uuid@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/slide@1.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/write-file-atomic@1.3.4",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/imurmurhash@0.1.4",
        "pkg:npm/slide@1.1.6"
      ]
    },
    {
      "ref": "pkg:npm/xdg-basedir@2.0.0",
      "dependsOn": [
        "pkg:npm/os-homedir@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/configstore@2.1.0",
      "dependsOn": [
        "pkg:npm/dot-prop@3.0.0",
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/os-tmpdir@1.0.2",
        "pkg:npm/osenv@0.1.4",
        "pkg:npm/uuid@2.0.3",
        "pkg:npm/write-file-atomic@1.3.4",
        "pkg:npm/xdg-basedir@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-npm@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/capture-stack-trace@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/create-error-class@3.0.2",
      "dependsOn": [
        "pkg:npm/capture-stack-trace@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-redirect@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-retry-allowed@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lowercase-keys@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-status-codes@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/read-all-stream@3.1.0",
      "dependsOn": [
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/readable-stream@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/timed-out@3.1.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unzip-response@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/url-parse-lax@1.0.0",
      "dependsOn": [
        "pkg:npm/prepend-http@1.0.4"
      ]
    },
    {
      "ref": "pkg:npm/got@5.7.1",
      "dependsOn": [
        "pkg:npm/create-error-class@3.0.2",
        "pkg:npm/duplexer2@0.1.4",
        "pkg:npm/is-redirect@1.0.0",
        "pkg:npm/is-retry-allowed@1.1.0",
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/lowercase-keys@1.0.0",
        "pkg:npm/node-status-codes@1.0.0",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/parse-json@2.2.0",
        "pkg:npm/pinkie-promise@2.0.1",
        "pkg:npm/read-all-stream@3.1.0",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/timed-out@3.1.3",
        "pkg:npm/unzip-response@1.0.2",
        "pkg:npm/url-parse-lax@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/rc@1.2.2",
      "dependsOn": [
        "pkg:npm/deep-extend@0.4.2",
        "pkg:npm/ini@1.3.4",
        "pkg:npm/minimist@1.2.0",
        "pkg:npm/strip-json-comments@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/registry-auth-token@3.3.1",
      "dependsOn": [
        "pkg:npm/rc@1.2.2",
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/registry-url@3.1.0",
      "dependsOn": [
        "pkg:npm/rc@1.2.2"
      ]
    },
    {
      "ref": "pkg:npm/package-json@2.4.0",
      "dependsOn": [
        "pkg:npm/got@5.7.1",
        "pkg:npm/registry-auth-token@3.3.1",
        "pkg:npm/registry-url@3.1.0",
        "pkg:npm/semver@5.4.1"
      ]
    },
    {
      "ref": "pkg:npm/latest-version@2.0.0",
      "dependsOn": [
        "pkg:npm/package-json@2.4.0"
      ]
    },
    {
      "ref": "pkg:npm/lazy-req@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver-diff@2.1.0",
      "dependsOn": [
        "pkg:npm/semver@5.4.1"
      ]
    },
    {
      "ref": "pkg:npm/update-notifier@1.0.3",
      "dependsOn": [
        "pkg:npm/boxen@0.6.0",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/configstore@2.1.0",
        "pkg:npm/is-npm@1.0.0",
        "pkg:npm/latest-version@2.0.0",
        "pkg:npm/lazy-req@1.1.0",
        "pkg:npm/semver-diff@2.1.0",
        "pkg:npm/xdg-basedir@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/sw-precache@5.2.0",
      "dependsOn": [
        "pkg:npm/dom-urls@1.1.0",
        "pkg:npm/es6-promise@4.1.1",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/lodash.defaults@4.2.0",
        "pkg:npm/lodash.template@4.4.0",
        "pkg:npm/meow@3.7.0",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/pretty-bytes@4.0.2",
        "pkg:npm/sw-toolbox@3.6.0",
        "pkg:npm/update-notifier@1.0.3"
      ]
    },
    {
      "ref": "pkg:npm/sw-precache-webpack-plugin@0.11.4",
      "dependsOn": [
        "pkg:npm/del@2.2.2",
        "pkg:npm/sw-precache@5.2.0",
        "pkg:npm/uglify-js@3.1.9"
      ]
    },
    {
      "ref": "pkg:npm/url-loader@0.6.2",
      "dependsOn": [
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/mime@1.4.1",
        "pkg:npm/schema-utils@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/acorn-dynamic-import@2.0.2",
      "dependsOn": [
        "pkg:npm/acorn@4.0.13"
      ]
    },
    {
      "ref": "pkg:npm/memory-fs@0.4.1",
      "dependsOn": [
        "pkg:npm/errno@0.1.4",
        "pkg:npm/readable-stream@2.3.3"
      ]
    },
    {
      "ref": "pkg:npm/tapable@0.2.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/enhanced-resolve@3.4.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/memory-fs@0.4.1",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/tapable@0.2.8"
      ]
    },
    {
      "ref": "pkg:npm/es6-symbol@3.1.1",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.35"
      ]
    },
    {
      "ref": "pkg:npm/es6-iterator@2.0.3",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.35",
        "pkg:npm/es6-symbol@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/es5-ext@0.10.35",
      "dependsOn": [
        "pkg:npm/es6-iterator@2.0.3",
        "pkg:npm/es6-symbol@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/d@1.0.0",
      "dependsOn": [
        "pkg:npm/es5-ext@0.10.35"
      ]
    },
    {
      "ref": "pkg:npm/event-emitter@0.3.5",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.35"
      ]
    },
    {
      "ref": "pkg:npm/es6-set@0.1.5",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.35",
        "pkg:npm/es6-iterator@2.0.3",
        "pkg:npm/es6-symbol@3.1.1",
        "pkg:npm/event-emitter@0.3.5"
      ]
    },
    {
      "ref": "pkg:npm/es6-map@0.1.5",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.35",
        "pkg:npm/es6-iterator@2.0.3",
        "pkg:npm/es6-set@0.1.5",
        "pkg:npm/es6-symbol@3.1.1",
        "pkg:npm/event-emitter@0.3.5"
      ]
    },
    {
      "ref": "pkg:npm/es6-weak-map@2.0.2",
      "dependsOn": [
        "pkg:npm/d@1.0.0",
        "pkg:npm/es5-ext@0.10.35",
        "pkg:npm/es6-iterator@2.0.3",
        "pkg:npm/es6-symbol@3.1.1"
      ]
    },
    {
      "ref": "pkg:npm/escope@3.6.0",
      "dependsOn": [
        "pkg:npm/es6-map@0.1.5",
        "pkg:npm/es6-weak-map@2.0.2",
        "pkg:npm/esrecurse@4.2.0",
        "pkg:npm/estraverse@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/interpret@1.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/json-loader@0.5.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loader-runner@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/os-browserify@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/timers-browserify@2.0.4",
      "dependsOn": [
        "pkg:npm/setimmediate@1.0.5"
      ]
    },
    {
      "ref": "pkg:npm/node-libs-browser@2.0.0",
      "dependsOn": [
        "pkg:npm/assert@1.4.1",
        "pkg:npm/browserify-zlib@0.1.4",
        "pkg:npm/buffer@4.9.1",
        "pkg:npm/console-browserify@1.1.0",
        "pkg:npm/constants-browserify@1.0.0",
        "pkg:npm/crypto-browserify@3.12.0",
        "pkg:npm/domain-browser@1.1.7",
        "pkg:npm/events@1.1.1",
        "pkg:npm/https-browserify@0.0.1",
        "pkg:npm/os-browserify@0.2.1",
        "pkg:npm/path-browserify@0.0.0",
        "pkg:npm/process@0.11.10",
        "pkg:npm/punycode@1.4.1",
        "pkg:npm/querystring-es3@0.2.1",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/stream-browserify@2.0.1",
        "pkg:npm/stream-http@2.7.2",
        "pkg:npm/string_decoder@0.10.31",
        "pkg:npm/timers-browserify@2.0.4",
        "pkg:npm/tty-browserify@0.0.0",
        "pkg:npm/url@0.11.0",
        "pkg:npm/util@0.10.3",
        "pkg:npm/vm-browserify@0.0.4"
      ]
    },
    {
      "ref": "pkg:npm/uglifyjs-webpack-plugin@0.4.6",
      "dependsOn": [
        "pkg:npm/source-map@0.5.7",
        "pkg:npm/uglify-js@2.8.29",
        "pkg:npm/webpack-sources@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/binary-extensions@1.10.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/nan@2.7.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/node-pre-gyp@0.6.36",
      "dependsOn": [
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/nopt@4.0.1",
        "pkg:npm/npmlog@4.1.0",
        "pkg:npm/rc@1.2.1",
        "pkg:npm/request@2.81.0",
        "pkg:npm/rimraf@2.6.1",
        "pkg:npm/semver@5.3.0",
        "pkg:npm/tar-pack@3.4.0",
        "pkg:npm/tar@2.2.1"
      ]
    },
    {
      "ref": "pkg:npm/fsevents@1.1.2",
      "dependsOn": [
        "pkg:npm/nan@2.7.0",
        "pkg:npm/node-pre-gyp@0.6.36"
      ]
    },
    {
      "ref": "pkg:npm/watchpack@1.4.0",
      "dependsOn": [
        "pkg:npm/async@2.6.0",
        "pkg:npm/chokidar@1.7.0",
        "pkg:npm/graceful-fs@4.1.11"
      ]
    },
    {
      "ref": "pkg:npm/camelcase@4.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-stream@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/path-key@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/npm-run-path@2.0.2",
      "dependsOn": [
        "pkg:npm/path-key@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/p-finally@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-eof@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/execa@0.7.0",
      "dependsOn": [
        "pkg:npm/cross-spawn@5.1.0",
        "pkg:npm/get-stream@3.0.0",
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/npm-run-path@2.0.2",
        "pkg:npm/p-finally@1.0.0",
        "pkg:npm/signal-exit@3.0.2",
        "pkg:npm/strip-eof@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/mem@1.1.0",
      "dependsOn": [
        "pkg:npm/mimic-fn@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/os-locale@2.1.0",
      "dependsOn": [
        "pkg:npm/execa@0.7.0",
        "pkg:npm/lcid@1.0.0",
        "pkg:npm/mem@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/which-module@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs-parser@7.0.0",
      "dependsOn": [
        "pkg:npm/camelcase@4.1.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs@8.0.2",
      "dependsOn": [
        "pkg:npm/camelcase@4.1.0",
        "pkg:npm/cliui@3.2.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/get-caller-file@1.0.2",
        "pkg:npm/os-locale@2.1.0",
        "pkg:npm/read-pkg-up@2.0.0",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/require-main-filename@1.0.1",
        "pkg:npm/set-blocking@2.0.0",
        "pkg:npm/string-width@2.1.1",
        "pkg:npm/which-module@2.0.0",
        "pkg:npm/y18n@3.2.1",
        "pkg:npm/yargs-parser@7.0.0"
      ]
    },
    {
      "ref": "pkg:npm/webpack@3.8.1",
      "dependsOn": [
        "pkg:npm/acorn-dynamic-import@2.0.2",
        "pkg:npm/acorn@5.2.1",
        "pkg:npm/ajv-keywords@2.1.1",
        "pkg:npm/ajv@5.3.0",
        "pkg:npm/async@2.6.0",
        "pkg:npm/enhanced-resolve@3.4.1",
        "pkg:npm/escope@3.6.0",
        "pkg:npm/interpret@1.0.4",
        "pkg:npm/json-loader@0.5.7",
        "pkg:npm/json5@0.5.1",
        "pkg:npm/loader-runner@2.3.0",
        "pkg:npm/loader-utils@1.1.0",
        "pkg:npm/memory-fs@0.4.1",
        "pkg:npm/mkdirp@0.5.1",
        "pkg:npm/node-libs-browser@2.0.0",
        "pkg:npm/source-map@0.5.7",
        "pkg:npm/supports-color@4.5.0",
        "pkg:npm/tapable@0.2.8",
        "pkg:npm/uglifyjs-webpack-plugin@0.4.6",
        "pkg:npm/watchpack@1.4.0",
        "pkg:npm/webpack-sources@1.0.2",
        "pkg:npm/yargs@8.0.2"
      ]
    },
    {
      "ref": "pkg:npm/ansi-html@0.0.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/array-flatten@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/deep-equal@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dns-equal@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-indexof@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dns-txt@2.0.2",
      "dependsOn": [
        "pkg:npm/buffer-indexof@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/ip@1.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/dns-packet@1.2.2",
      "dependsOn": [
        "pkg:npm/ip@1.1.5",
        "pkg:npm/safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "pkg:npm/thunky@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/multicast-dns@6.1.1",
      "dependsOn": [
        "pkg:npm/dns-packet@1.2.2",
        "pkg:npm/thunky@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/multicast-dns-service-types@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bonjour@3.5.0",
      "dependsOn": [
        "pkg:npm/array-flatten@2.1.1",
        "pkg:npm/deep-equal@1.0.1",
        "pkg:npm/dns-equal@1.0.0",
        "pkg:npm/dns-txt@2.0.2",
        "pkg:npm/multicast-dns-service-types@1.1.0",
        "pkg:npm/multicast-dns@6.1.1"
      ]
    },
    {
      "ref": "pkg:npm/compressible@2.0.12",
      "dependsOn": [
        "pkg:npm/mime-db@1.30.0"
      ]
    },
    {
      "ref": "pkg:npm/on-headers@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/compression@1.7.1",
      "dependsOn": [
        "pkg:npm/accepts@1.3.4",
        "pkg:npm/bytes@3.0.0",
        "pkg:npm/compressible@2.0.12",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/on-headers@1.0.1",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/vary@1.1.2"
      ]
    },
    {
      "ref": "pkg:npm/connect-history-api-fallback@1.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/globby@6.1.0",
      "dependsOn": [
        "pkg:npm/array-union@1.0.2",
        "pkg:npm/glob@7.1.2",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/del@3.0.0",
      "dependsOn": [
        "pkg:npm/globby@6.1.0",
        "pkg:npm/is-path-cwd@1.0.0",
        "pkg:npm/is-path-in-cwd@1.0.0",
        "pkg:npm/p-map@1.2.0",
        "pkg:npm/pify@3.0.0",
        "pkg:npm/rimraf@2.6.2"
      ]
    },
    {
      "ref": "pkg:npm/html-entities@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eventemitter3@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-proxy@1.16.2",
      "dependsOn": [
        "pkg:npm/eventemitter3@1.2.0",
        "pkg:npm/requires-port@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-extglob@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-glob@3.1.0",
      "dependsOn": [
        "pkg:npm/is-extglob@2.1.1"
      ]
    },
    {
      "ref": "pkg:npm/http-proxy-middleware@0.17.4",
      "dependsOn": [
        "pkg:npm/http-proxy@1.16.2",
        "pkg:npm/is-glob@3.1.0",
        "pkg:npm/lodash@4.17.4",
        "pkg:npm/micromatch@2.3.11"
      ]
    },
    {
      "ref": "pkg:npm/resolve-from@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/resolve-cwd@2.0.0",
      "dependsOn": [
        "pkg:npm/resolve-from@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/import-local@0.1.1",
      "dependsOn": [
        "pkg:npm/pkg-dir@2.0.0",
        "pkg:npm/resolve-cwd@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/internal-ip@1.2.0",
      "dependsOn": [
        "pkg:npm/meow@3.7.0"
      ]
    },
    {
      "ref": "pkg:npm/killable@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/loglevel@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/portfinder@1.0.13",
      "dependsOn": [
        "pkg:npm/async@1.5.2",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/mkdirp@0.5.1"
      ]
    },
    {
      "ref": "pkg:npm/node-forge@0.6.33",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/selfsigned@1.10.1",
      "dependsOn": [
        "pkg:npm/node-forge@0.6.33"
      ]
    },
    {
      "ref": "pkg:npm/batch@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/serve-index@1.9.1",
      "dependsOn": [
        "pkg:npm/accepts@1.3.4",
        "pkg:npm/batch@0.6.1",
        "pkg:npm/debug@2.6.9",
        "pkg:npm/escape-html@1.0.3",
        "pkg:npm/http-errors@1.6.2",
        "pkg:npm/mime-types@2.1.17",
        "pkg:npm/parseurl@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/faye-websocket@0.10.0",
      "dependsOn": [
        "pkg:npm/websocket-driver@0.7.0"
      ]
    },
    {
      "ref": "pkg:npm/sockjs@0.3.18",
      "dependsOn": [
        "pkg:npm/faye-websocket@0.10.0",
        "pkg:npm/uuid@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/handle-thing@1.2.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/http-deceiver@1.2.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/select-hose@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/detect-node@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/obuf@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wbuf@1.7.2",
      "dependsOn": [
        "pkg:npm/minimalistic-assert@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/hpack.js@2.1.6",
      "dependsOn": [
        "pkg:npm/inherits@2.0.3",
        "pkg:npm/obuf@1.1.1",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/wbuf@1.7.2"
      ]
    },
    {
      "ref": "pkg:npm/spdy-transport@2.0.20",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/detect-node@2.0.3",
        "pkg:npm/hpack.js@2.1.6",
        "pkg:npm/obuf@1.1.1",
        "pkg:npm/readable-stream@2.3.3",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/wbuf@1.7.2"
      ]
    },
    {
      "ref": "pkg:npm/spdy@3.4.7",
      "dependsOn": [
        "pkg:npm/debug@2.6.9",
        "pkg:npm/handle-thing@1.2.5",
        "pkg:npm/http-deceiver@1.2.7",
        "pkg:npm/safe-buffer@5.1.1",
        "pkg:npm/select-hose@2.0.0",
        "pkg:npm/spdy-transport@2.0.20"
      ]
    },
    {
      "ref": "pkg:npm/time-stamp@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/webpack-dev-middleware@1.12.0",
      "dependsOn": [
        "pkg:npm/memory-fs@0.4.1",
        "pkg:npm/mime@1.4.1",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/range-parser@1.2.0",
        "pkg:npm/time-stamp@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs-parser@4.2.1",
      "dependsOn": [
        "pkg:npm/camelcase@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/yargs@6.6.0",
      "dependsOn": [
        "pkg:npm/camelcase@3.0.0",
        "pkg:npm/cliui@3.2.0",
        "pkg:npm/decamelize@1.2.0",
        "pkg:npm/get-caller-file@1.0.2",
        "pkg:npm/os-locale@1.4.0",
        "pkg:npm/read-pkg-up@1.0.1",
        "pkg:npm/require-directory@2.1.1",
        "pkg:npm/require-main-filename@1.0.1",
        "pkg:npm/set-blocking@2.0.0",
        "pkg:npm/string-width@1.0.2",
        "pkg:npm/which-module@1.0.0",
        "pkg:npm/y18n@3.2.1",
        "pkg:npm/yargs-parser@4.2.1"
      ]
    },
    {
      "ref": "pkg:npm/webpack-dev-server@2.9.4",
      "dependsOn": [
        "pkg:npm/ansi-html@0.0.7",
        "pkg:npm/array-includes@3.0.3",
        "pkg:npm/bonjour@3.5.0",
        "pkg:npm/chokidar@1.7.0",
        "pkg:npm/compression@1.7.1",
        "pkg:npm/connect-history-api-fallback@1.5.0",
        "pkg:npm/debug@3.1.0",
        "pkg:npm/del@3.0.0",
        "pkg:npm/express@4.16.2",
        "pkg:npm/html-entities@1.2.1",
        "pkg:npm/http-proxy-middleware@0.17.4",
        "pkg:npm/import-local@0.1.1",
        "pkg:npm/internal-ip@1.2.0",
        "pkg:npm/ip@1.1.5",
        "pkg:npm/killable@1.0.0",
        "pkg:npm/loglevel@1.5.1",
        "pkg:npm/opn@5.1.0",
        "pkg:npm/portfinder@1.0.13",
        "pkg:npm/selfsigned@1.10.1",
        "pkg:npm/serve-index@1.9.1",
        "pkg:npm/sockjs-client@1.1.4",
        "pkg:npm/sockjs@0.3.18",
        "pkg:npm/spdy@3.4.7",
        "pkg:npm/strip-ansi@3.0.1",
        "pkg:npm/supports-color@4.5.0",
        "pkg:npm/webpack-dev-middleware@1.12.0",
        "pkg:npm/yargs@6.6.0"
      ]
    },
    {
      "ref": "pkg:npm/jsonfile@2.4.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11"
      ]
    },
    {
      "ref": "pkg:npm/klaw@1.3.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11"
      ]
    },
    {
      "ref": "pkg:npm/fs-extra@0.30.0",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.1.11",
        "pkg:npm/jsonfile@2.4.0",
        "pkg:npm/klaw@1.3.1",
        "pkg:npm/path-is-absolute@1.0.1",
        "pkg:npm/rimraf@2.6.2"
      ]
    },
    {
      "ref": "pkg:npm/webpack-manifest-plugin@1.3.2",
      "dependsOn": [
        "pkg:npm/fs-extra@0.30.0",
        "pkg:npm/lodash@4.17.4"
      ]
    },
    {
      "ref": "pkg:npm/react-scripts@1.0.17",
      "dependsOn": [
        "pkg:npm/autoprefixer@7.1.6",
        "pkg:npm/babel-core@6.26.0",
        "pkg:npm/babel-eslint@7.2.3",
        "pkg:npm/babel-jest@20.0.3",
        "pkg:npm/babel-loader@7.1.2",
        "pkg:npm/babel-preset-react-app@3.1.0",
        "pkg:npm/babel-runtime@6.26.0",
        "pkg:npm/case-sensitive-paths-webpack-plugin@2.1.1",
        "pkg:npm/chalk@1.1.3",
        "pkg:npm/css-loader@0.28.7",
        "pkg:npm/dotenv@4.0.0",
        "pkg:npm/eslint-config-react-app@2.0.1",
        "pkg:npm/eslint-loader@1.9.0",
        "pkg:npm/eslint-plugin-flowtype@2.39.1",
        "pkg:npm/eslint-plugin-import@2.8.0",
        "pkg:npm/eslint-plugin-jsx-a11y@5.1.1",
        "pkg:npm/eslint-plugin-react@7.4.0",
        "pkg:npm/eslint@4.10.0",
        "pkg:npm/extract-text-webpack-plugin@3.0.2",
        "pkg:npm/file-loader@1.1.5",
        "pkg:npm/fs-extra@3.0.1",
        "pkg:npm/fsevents@1.1.2",
        "pkg:npm/html-webpack-plugin@2.29.0",
        "pkg:npm/jest@20.0.4",
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/postcss-flexbugs-fixes@3.2.0",
        "pkg:npm/postcss-loader@2.0.8",
        "pkg:npm/promise@8.0.1",
        "pkg:npm/raf@3.4.0",
        "pkg:npm/react-dev-utils@4.2.1",
        "pkg:npm/style-loader@0.19.0",
        "pkg:npm/sw-precache-webpack-plugin@0.11.4",
        "pkg:npm/url-loader@0.6.2",
        "pkg:npm/webpack-dev-server@2.9.4",
        "pkg:npm/webpack-manifest-plugin@1.3.2",
        "pkg:npm/webpack@3.8.1",
        "pkg:npm/whatwg-fetch@2.0.3"
      ]
    },
    {
      "ref": "pkg:npm/react-star-ratings@2.1.0",
      "dependsOn": [
        "pkg:npm/classnames@2.2.5",
        "pkg:npm/prop-types@15.6.0",
        "pkg:npm/react@16.1.0"
      ]
    },
    {
      "ref": "pkg:npm/test@0.1.0",
      "dependsOn": [
        "pkg:npm/react-dom@16.1.0",
        "pkg:npm/react-scripts@1.0.17",
        "pkg:npm/react-star-ratings@2.1.0",
        "pkg:npm/react@16.1.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/react-star-ratings@2.3.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-15T18:49:43Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, September 15, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'react-star-ratings' with version '2.3.0'. The application also has 1 child modules/components."
    }
  ]
}