{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "version": 1,
  "serialNumber": "urn:uuid:674c0ff9-b509-403c-bd19-7708b40e2d14",
  "metadata": {
    "timestamp": "2026-03-23T17:13:17.211Z",
    "tools": {
      "components": [
        {
          "type": "application",
          "name": "npm",
          "version": "11.9.0"
        },
        {
          "type": "application",
          "name": "cyclonedx-npm",
          "group": "@cyclonedx",
          "version": "4.2.1",
          "author": "Jan Kowalleck",
          "description": "Create CycloneDX Software Bill of Materials (SBOM) from NPM projects.",
          "licenses": [
            {
              "license": {
                "id": "Apache-2.0"
              }
            }
          ],
          "externalReferences": [
            {
              "url": "git+https://github.com/CycloneDX/cyclonedx-node-npm.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-node-npm#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-node-npm/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ]
        },
        {
          "type": "library",
          "name": "cyclonedx-library",
          "group": "@cyclonedx",
          "version": "10.0.0",
          "author": "Jan Kowalleck",
          "description": "Core functionality of CycloneDX for JavaScript (Node.js or WebBrowser).",
          "licenses": [
            {
              "license": {
                "id": "Apache-2.0"
              }
            }
          ],
          "externalReferences": [
            {
              "url": "git+https://github.com/CycloneDX/cyclonedx-javascript-library.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-javascript-library#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/CycloneDX/cyclonedx-javascript-library/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ]
        }
      ]
    },
    "component": {
      "type": "application",
      "name": "ssri",
      "version": "5.3.0-tuxcare.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1",
      "author": "Kat Marchán",
      "description": "Standard Subresource Integrity library --  parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ssri@5.3.0-tuxcare.1?vcs_url=git%2Bhttps%3A%2F%2Fgithub.com%2Fzkat%2Fssri.git",
      "externalReferences": [
        {
          "url": "git+https://github.com/zkat/ssri.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zkat/ssri#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zkat/ssri/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": ""
        }
      ]
    }
  },
  "components": [
    {
      "type": "library",
      "name": "nyc",
      "version": "11.4.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1",
      "author": "Ben Coe",
      "description": "the Istanbul command line interface",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/nyc@11.4.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/istanbuljs/nyc.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/istanbuljs/nyc#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/istanbuljs/nyc/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/nyc/-/nyc-11.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e5e099a6f6a4b055633f6aedd6beb471f5e6b77314b6c403c3c6c0ccda8d12be162ef50c2e089510d31ffc1f5b13d6005f498656f686037bfd212f5e90da81d5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/nyc"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "archy",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|archy@1.0.0",
          "author": "James Halliday",
          "description": "render nested hierarchies `npm ls` style with unicode pipes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/archy@1.0.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/substack/node-archy.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/node-archy#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/node-archy/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/archy"
            }
          ]
        },
        {
          "type": "library",
          "name": "arrify",
          "version": "1.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|arrify@1.0.1",
          "author": "Sindre Sorhus",
          "description": "Convert a value to an array",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/arrify@1.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/arrify.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/arrify#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/arrify/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/arrify"
            }
          ]
        },
        {
          "type": "library",
          "name": "caching-transform",
          "version": "1.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|caching-transform@1.0.1",
          "author": "James Talmage",
          "description": "Wraps a transform and provides caching",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/caching-transform@1.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jamestalmage/caching-transform.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jamestalmage/caching-transform#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jamestalmage/caching-transform/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/caching-transform"
            }
          ]
        },
        {
          "type": "library",
          "name": "convert-source-map",
          "version": "1.5.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|convert-source-map@1.5.1",
          "author": "Thorsten Lorenz",
          "description": "Converts a source-map from/to  different formats and allows adding/changing properties.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/convert-source-map@1.5.1",
          "externalReferences": [
            {
              "url": "git://github.com/thlorenz/convert-source-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/thlorenz/convert-source-map",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/thlorenz/convert-source-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/convert-source-map"
            }
          ]
        },
        {
          "type": "library",
          "name": "debug-log",
          "version": "1.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|debug-log@1.0.1",
          "author": "Sindre Sorhus",
          "description": "Node.js 0.12 util.debuglog() ponyfill",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/debug-log@1.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/debug-log.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/debug-log#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/debug-log/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/debug-log"
            }
          ]
        },
        {
          "type": "library",
          "name": "default-require-extensions",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|default-require-extensions@1.0.0",
          "author": "James Talmage",
          "description": "Node's default require extensions as a separate module",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/default-require-extensions@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/jamestalmage/default-require-extensions.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jamestalmage/default-require-extensions#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jamestalmage/default-require-extensions/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/default-require-extensions"
            }
          ]
        },
        {
          "type": "library",
          "name": "find-cache-dir",
          "version": "0.1.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|find-cache-dir@0.1.1",
          "author": "James Talmage",
          "description": "My well-made module",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/find-cache-dir@0.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jamestalmage/find-cache-dir.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jamestalmage/find-cache-dir#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jamestalmage/find-cache-dir/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/find-cache-dir"
            }
          ]
        },
        {
          "type": "library",
          "name": "find-up",
          "version": "2.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|find-up@2.1.0",
          "author": "Sindre Sorhus",
          "description": "Find a file by walking up parent directories",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/find-up@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/find-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/find-up"
            }
          ]
        },
        {
          "type": "library",
          "name": "foreground-child",
          "version": "1.5.6",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|foreground-child@1.5.6",
          "author": "Isaac Z. Schlueter",
          "description": "Run a child as if it's the foreground process.  Give it stdio.  Exit when it exits.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/foreground-child@1.5.6",
          "externalReferences": [
            {
              "url": "git+https://github.com/tapjs/foreground-child.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/tapjs/foreground-child#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/tapjs/foreground-child/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/foreground-child"
            }
          ]
        },
        {
          "type": "library",
          "name": "glob",
          "version": "7.1.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|glob@7.1.2",
          "author": "Isaac Z. Schlueter",
          "description": "a little globber",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/glob@7.1.2",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/node-glob.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/node-glob#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/node-glob/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/glob"
            }
          ]
        },
        {
          "type": "library",
          "name": "istanbul-lib-coverage",
          "version": "1.1.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-coverage@1.1.1",
          "author": "Krishnan Anantheswaran",
          "description": "Data library for istanbul coverage objects",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/istanbul-lib-coverage@1.1.1",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/istanbuljs/istanbuljs",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/istanbuljs/istanbuljs/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/istanbul-lib-coverage"
            }
          ]
        },
        {
          "type": "library",
          "name": "istanbul-lib-hook",
          "version": "1.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-hook@1.1.0",
          "author": "Krishnan Anantheswaran",
          "description": "Hooks for require, vm and script used in istanbul",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/istanbul-lib-hook@1.1.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/istanbuljs/istanbuljs#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/istanbuljs/istanbuljs/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/istanbul-lib-hook"
            }
          ]
        },
        {
          "type": "library",
          "name": "istanbul-lib-instrument",
          "version": "1.9.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-instrument@1.9.1",
          "author": "Krishnan Anantheswaran",
          "description": "Core istanbul API for JS code coverage",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/istanbul-lib-instrument@1.9.1",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/istanbuljs/istanbuljs",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/istanbuljs/istanbuljs/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/istanbul-lib-instrument"
            }
          ]
        },
        {
          "type": "library",
          "name": "istanbul-lib-report",
          "version": "1.1.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-report@1.1.2",
          "author": "Krishnan Anantheswaran",
          "description": "Base reporting library for istanbul",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/istanbul-lib-report@1.1.2",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/istanbuljs/istanbuljs",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/istanbuljs/istanbuljs/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/istanbul-lib-report"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "supports-color",
              "version": "3.2.3",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-report@1.1.2|supports-color@3.2.3",
              "author": "Sindre Sorhus",
              "description": "Detect whether a terminal supports color",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/supports-color@3.2.3",
              "externalReferences": [
                {
                  "url": "git+https://github.com/chalk/supports-color.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/chalk/supports-color#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/chalk/supports-color/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/istanbul-lib-report/node_modules/supports-color"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "istanbul-lib-source-maps",
          "version": "1.2.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-source-maps@1.2.2",
          "author": "Krishnan Anantheswaran",
          "description": "Source maps support for istanbul",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/istanbul-lib-source-maps@1.2.2",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/istanbuljs/istanbuljs#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/istanbuljs/istanbuljs/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/istanbul-lib-source-maps"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "debug",
              "version": "3.1.0",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-source-maps@1.2.2|debug@3.1.0",
              "author": "TJ Holowaychuk",
              "description": "small debugging utility",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/debug@3.1.0",
              "externalReferences": [
                {
                  "url": "git://github.com/visionmedia/debug.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/visionmedia/debug#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/visionmedia/debug/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/istanbul-lib-source-maps/node_modules/debug"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "istanbul-reports",
          "version": "1.1.3",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-reports@1.1.3",
          "author": "Krishnan Anantheswaran",
          "description": "istanbul reports",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/istanbul-reports@1.1.3",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/istanbuljs/istanbuljs",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/istanbuljs/istanbuljs/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/istanbul-reports"
            }
          ]
        },
        {
          "type": "library",
          "name": "md5-hex",
          "version": "1.3.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|md5-hex@1.3.0",
          "author": "Sindre Sorhus",
          "description": "Create a MD5 hash with hex encoding",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/md5-hex@1.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/md5-hex.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/md5-hex#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/md5-hex/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/md5-hex"
            }
          ]
        },
        {
          "type": "library",
          "name": "merge-source-map",
          "version": "1.0.4",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|merge-source-map@1.0.4",
          "author": "keik",
          "description": "Merge old source map and new source map in multi-transform flow",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/merge-source-map@1.0.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/keik/merge-source-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/keik/merge-source-map#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/keik/merge-source-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/merge-source-map"
            }
          ]
        },
        {
          "type": "library",
          "name": "micromatch",
          "version": "2.3.11",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|micromatch@2.3.11",
          "author": "Jon Schlinkert",
          "description": "Glob matching for javascript/node.js. A drop-in replacement and faster alternative to minimatch and multimatch.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/micromatch@2.3.11",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/micromatch.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/micromatch",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/micromatch/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/micromatch"
            }
          ]
        },
        {
          "type": "library",
          "name": "mkdirp",
          "version": "0.5.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|mkdirp@0.5.1",
          "author": "James Halliday",
          "description": "Recursively mkdir, like `mkdir -p`",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/mkdirp@0.5.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/substack/node-mkdirp.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/node-mkdirp#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/node-mkdirp/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/mkdirp"
            }
          ]
        },
        {
          "type": "library",
          "name": "resolve-from",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|resolve-from@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Resolve the path of a module like require.resolve() but from a given path",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/resolve-from@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/resolve-from.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/resolve-from#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/resolve-from/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/resolve-from"
            }
          ]
        },
        {
          "type": "library",
          "name": "rimraf",
          "version": "2.6.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|rimraf@2.6.2",
          "author": "Isaac Z. Schlueter",
          "description": "A deep deletion module for node (like `rm -rf`)",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/rimraf@2.6.2",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/rimraf.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/rimraf#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/rimraf/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/rimraf"
            }
          ]
        },
        {
          "type": "library",
          "name": "signal-exit",
          "version": "3.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|signal-exit@3.0.2",
          "author": "Ben Coe",
          "description": "when you want to fire an event no matter how a process exits.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/signal-exit@3.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/tapjs/signal-exit.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/tapjs/signal-exit",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/tapjs/signal-exit/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/signal-exit"
            }
          ]
        },
        {
          "type": "library",
          "name": "spawn-wrap",
          "version": "1.4.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|spawn-wrap@1.4.2",
          "author": "Isaac Z. Schlueter",
          "description": "Wrap all spawned Node.js child processes by adding environs and arguments ahead of the main JavaScript file argument.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/spawn-wrap@1.4.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/isaacs/spawn-wrap.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/spawn-wrap#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/spawn-wrap/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/spawn-wrap"
            }
          ]
        },
        {
          "type": "library",
          "name": "test-exclude",
          "version": "4.1.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|test-exclude@4.1.1",
          "author": "Ben Coe",
          "description": "test for inclusion or exclusion of paths using pkg-conf and globs",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/test-exclude@4.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/istanbuljs/istanbuljs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/istanbuljs/istanbuljs#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/istanbuljs/istanbuljs/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/test-exclude"
            }
          ]
        },
        {
          "type": "library",
          "name": "yargs-parser",
          "version": "8.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yargs-parser@8.0.0",
          "author": "Ben Coe",
          "description": "the mighty option parser used by yargs",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/yargs-parser@8.0.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/yargs/yargs-parser.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/yargs/yargs-parser#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/yargs-parser/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/yargs-parser"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "camelcase",
              "version": "4.1.0",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yargs-parser@8.0.0|camelcase@4.1.0",
              "author": "Sindre Sorhus",
              "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/camelcase@4.1.0",
              "externalReferences": [
                {
                  "url": "git+https://github.com/sindresorhus/camelcase.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/sindresorhus/camelcase#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/sindresorhus/camelcase/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/yargs-parser/node_modules/camelcase"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "yargs",
          "version": "10.0.3",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yargs@10.0.3",
          "description": "yargs the modern, pirate-themed, successor to optimist.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/yargs@10.0.3",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/yargs/yargs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "http://yargs.js.org/",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/yargs/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/yargs"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "cliui",
              "version": "3.2.0",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yargs@10.0.3|cliui@3.2.0",
              "author": "Ben Coe",
              "description": "easily create complex multi-column command-line-interfaces",
              "licenses": [
                {
                  "license": {
                    "id": "ISC",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/cliui@3.2.0",
              "externalReferences": [
                {
                  "url": "git+ssh://git@github.com/yargs/cliui.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/yargs/cliui#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/yargs/cliui/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/yargs/node_modules/cliui"
                }
              ],
              "components": [
                {
                  "type": "library",
                  "name": "string-width",
                  "version": "1.0.2",
                  "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yargs@10.0.3|cliui@3.2.0|string-width@1.0.2",
                  "author": "Sindre Sorhus",
                  "description": "Get the visual width of a string - the number of columns required to display it",
                  "licenses": [
                    {
                      "license": {
                        "id": "MIT",
                        "acknowledgement": "declared"
                      }
                    }
                  ],
                  "purl": "pkg:npm/string-width@1.0.2",
                  "externalReferences": [
                    {
                      "url": "git+https://github.com/sindresorhus/string-width.git",
                      "type": "vcs",
                      "comment": "as detected from PackageJson property \"repository.url\""
                    },
                    {
                      "url": "https://github.com/sindresorhus/string-width#readme",
                      "type": "website",
                      "comment": "as detected from PackageJson property \"homepage\""
                    },
                    {
                      "url": "https://github.com/sindresorhus/string-width/issues",
                      "type": "issue-tracker",
                      "comment": "as detected from PackageJson property \"bugs.url\""
                    }
                  ],
                  "properties": [
                    {
                      "name": "cdx:npm:package:development",
                      "value": "true"
                    },
                    {
                      "name": "cdx:npm:package:bundled",
                      "value": "true"
                    },
                    {
                      "name": "cdx:npm:package:path",
                      "value": "node_modules/nyc/node_modules/yargs/node_modules/cliui/node_modules/string-width"
                    }
                  ]
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "write-file-atomic",
          "version": "1.3.4",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|write-file-atomic@1.3.4",
          "author": "Rebecca Turner",
          "description": "Write files in an atomic fashion w/configurable ownership",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/write-file-atomic@1.3.4",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/iarna/write-file-atomic.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/iarna/write-file-atomic",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/iarna/write-file-atomic/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/write-file-atomic"
            }
          ]
        },
        {
          "type": "library",
          "name": "strip-bom",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|strip-bom@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Strip UTF-8 byte order mark (BOM) from a string/buffer",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-bom@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/strip-bom.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-bom#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-bom/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/strip-bom"
            }
          ]
        },
        {
          "type": "library",
          "name": "commondir",
          "version": "1.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|commondir@1.0.1",
          "author": "James Halliday",
          "description": "compute the closest common parent for file paths",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/commondir@1.0.1",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/substack/node-commondir.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/node-commondir#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/node-commondir/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/commondir"
            }
          ]
        },
        {
          "type": "library",
          "name": "pkg-dir",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pkg-dir@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Find the root directory of a npm package",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/pkg-dir@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/pkg-dir.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/pkg-dir#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/pkg-dir/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/pkg-dir"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "find-up",
              "version": "1.1.2",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pkg-dir@1.0.0|find-up@1.1.2",
              "author": "Sindre Sorhus",
              "description": "Find a file by walking up parent directories",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/find-up@1.1.2",
              "externalReferences": [
                {
                  "url": "git+https://github.com/sindresorhus/find-up.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/sindresorhus/find-up#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/sindresorhus/find-up/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/pkg-dir/node_modules/find-up"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "locate-path",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|locate-path@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Get the first path that exists on disk of multiple paths",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/locate-path@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/locate-path.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/locate-path#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/locate-path/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/locate-path"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "path-exists",
              "version": "3.0.0",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|locate-path@2.0.0|path-exists@3.0.0",
              "author": "Sindre Sorhus",
              "description": "Check if a path exists",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/path-exists@3.0.0",
              "externalReferences": [
                {
                  "url": "git+https://github.com/sindresorhus/path-exists.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/sindresorhus/path-exists#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/sindresorhus/path-exists/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/locate-path/node_modules/path-exists"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "cross-spawn",
          "version": "4.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|cross-spawn@4.0.2",
          "author": "IndigoUnited",
          "description": "Cross platform child_process#spawn and child_process#spawnSync",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cross-spawn@4.0.2",
          "externalReferences": [
            {
              "url": "git://github.com/IndigoUnited/node-cross-spawn.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/IndigoUnited/node-cross-spawn#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/IndigoUnited/node-cross-spawn/issues/",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/cross-spawn"
            }
          ]
        },
        {
          "type": "library",
          "name": "fs.realpath",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|fs.realpath@1.0.0",
          "author": "Isaac Z. Schlueter",
          "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/fs.realpath@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/isaacs/fs.realpath.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/fs.realpath#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/fs.realpath/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/fs.realpath"
            }
          ]
        },
        {
          "type": "library",
          "name": "inflight",
          "version": "1.0.6",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|inflight@1.0.6",
          "author": "Isaac Z. Schlueter",
          "description": "Add callbacks to requests in flight to avoid async duplication",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/inflight@1.0.6",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/inflight.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/inflight",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/inflight/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/inflight"
            }
          ]
        },
        {
          "type": "library",
          "name": "inherits",
          "version": "2.0.3",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|inherits@2.0.3",
          "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/inherits@2.0.3",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/inherits.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/inherits#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/inherits/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/inherits"
            }
          ]
        },
        {
          "type": "library",
          "name": "minimatch",
          "version": "3.0.4",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|minimatch@3.0.4",
          "author": "Isaac Z. Schlueter",
          "description": "a glob matcher in javascript",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/minimatch@3.0.4",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/minimatch.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/minimatch#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/minimatch/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/minimatch"
            }
          ]
        },
        {
          "type": "library",
          "name": "once",
          "version": "1.4.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|once@1.4.0",
          "author": "Isaac Z. Schlueter",
          "description": "Run a function exactly one time",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/once@1.4.0",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/once.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/once#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/once/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/once"
            }
          ]
        },
        {
          "type": "library",
          "name": "path-is-absolute",
          "version": "1.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|path-is-absolute@1.0.1",
          "author": "Sindre Sorhus",
          "description": "Node.js 0.12 path.isAbsolute() ponyfill",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/path-is-absolute@1.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/path-is-absolute.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/path-is-absolute#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/path-is-absolute/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/path-is-absolute"
            }
          ]
        },
        {
          "type": "library",
          "name": "append-transform",
          "version": "0.4.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|append-transform@0.4.0",
          "author": "James Talmage",
          "description": "Install a transform to `require.extensions` that always runs last, even if additional extensions are added later.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/append-transform@0.4.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/jamestalmage/append-transform.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jamestalmage/append-transform#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jamestalmage/append-transform/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/append-transform"
            }
          ]
        },
        {
          "type": "library",
          "name": "babel-generator",
          "version": "6.26.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-generator@6.26.0",
          "author": "Sebastian McKenzie",
          "description": "Turns an AST into code.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/babel-generator@6.26.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/babel/babel.git#master",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://babeljs.io/",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/babel/babel/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/babel-generator"
            }
          ]
        },
        {
          "type": "library",
          "name": "babel-template",
          "version": "6.26.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-template@6.26.0",
          "author": "Sebastian McKenzie",
          "description": "Generate an AST from a string template.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/babel-template@6.26.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/babel/babel.git#master",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://babeljs.io/",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/babel/babel/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/babel-template"
            }
          ]
        },
        {
          "type": "library",
          "name": "babel-traverse",
          "version": "6.26.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-traverse@6.26.0",
          "author": "Sebastian McKenzie",
          "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/babel-traverse@6.26.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/babel/babel.git#master",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://babeljs.io/",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/babel/babel/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/babel-traverse"
            }
          ]
        },
        {
          "type": "library",
          "name": "babel-types",
          "version": "6.26.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-types@6.26.0",
          "author": "Sebastian McKenzie",
          "description": "Babel Types is a Lodash-esque utility library for AST nodes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/babel-types@6.26.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/babel/babel.git#master",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://babeljs.io/",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/babel/babel/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/babel-types"
            }
          ]
        },
        {
          "type": "library",
          "name": "babylon",
          "version": "6.18.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babylon@6.18.0",
          "author": "Sebastian McKenzie",
          "description": "A JavaScript parser",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/babylon@6.18.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/babel/babylon.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://babeljs.io/",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/babel/babylon/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/babylon"
            }
          ]
        },
        {
          "type": "library",
          "name": "semver",
          "version": "5.4.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|semver@5.4.1",
          "description": "The semantic version parser used by npm.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/semver@5.4.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/node-semver.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/node-semver#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/node-semver/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/semver"
            }
          ]
        },
        {
          "type": "library",
          "name": "path-parse",
          "version": "1.0.5",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|path-parse@1.0.5",
          "author": "Javier Blanco",
          "description": "Node.js path.parse() ponyfill",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/path-parse@1.0.5",
          "externalReferences": [
            {
              "url": "git+https://github.com/jbgutierrez/path-parse.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jbgutierrez/path-parse#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jbgutierrez/path-parse/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/path-parse"
            }
          ]
        },
        {
          "type": "library",
          "name": "source-map",
          "version": "0.5.7",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|source-map@0.5.7",
          "author": "Nick Fitzgerald",
          "description": "Generates and consumes source maps",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/source-map@0.5.7",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/mozilla/source-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mozilla/source-map",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mozilla/source-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/source-map"
            }
          ]
        },
        {
          "type": "library",
          "name": "handlebars",
          "version": "4.0.11",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|handlebars@4.0.11",
          "author": "Yehuda Katz",
          "description": "Handlebars provides the power necessary to let you build semantic templates effectively with no frustration",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/handlebars@4.0.11",
          "externalReferences": [
            {
              "url": "git+https://github.com/wycats/handlebars.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "http://www.handlebarsjs.com/",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/wycats/handlebars.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/handlebars"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "source-map",
              "version": "0.4.4",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|handlebars@4.0.11|source-map@0.4.4",
              "author": "Nick Fitzgerald",
              "description": "Generates and consumes source maps",
              "licenses": [
                {
                  "license": {
                    "id": "BSD-3-Clause",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/source-map@0.4.4",
              "externalReferences": [
                {
                  "url": "git+ssh://git@github.com/mozilla/source-map.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/mozilla/source-map",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/mozilla/source-map/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/handlebars/node_modules/source-map"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "md5-o-matic",
          "version": "0.1.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|md5-o-matic@0.1.1",
          "author": "Trent Millar",
          "description": "Fast and simple MD5 hashing utility with zero module dependencies. View MD5 Shootout results, http://jsperf.com/md5-shootout/39",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared",
                "url": "https://github.com/trentmillar/md5-o-matic/blob/master/LICENSE"
              }
            }
          ],
          "purl": "pkg:npm/md5-o-matic@0.1.1",
          "externalReferences": [
            {
              "url": "git://github.com/trentmillar/md5-o-matic.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/trentmillar/md5-o-matic",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/trentmillar/md5-o-matic/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/md5-o-matic"
            }
          ]
        },
        {
          "type": "library",
          "name": "arr-diff",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|arr-diff@2.0.0",
          "author": "Jon Schlinkert",
          "description": "Returns an array with only the unique values from the first array, by excluding all values from additional arrays using strict equality for comparisons.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/arr-diff@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/arr-diff.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/arr-diff",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/arr-diff/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/arr-diff"
            }
          ]
        },
        {
          "type": "library",
          "name": "array-unique",
          "version": "0.2.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|array-unique@0.2.1",
          "author": "Jon Schlinkert",
          "description": "Return an array free of duplicate values. Fastest ES5 implementation.",
          "purl": "pkg:npm/array-unique@0.2.1",
          "externalReferences": [
            {
              "url": "git://github.com/jonschlinkert/array-unique.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/array-unique",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/array-unique/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/array-unique"
            }
          ]
        },
        {
          "type": "library",
          "name": "braces",
          "version": "1.8.5",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|braces@1.8.5",
          "author": "Jon Schlinkert",
          "description": "Fastest brace expansion for node.js, with the most complete support for the Bash 4.3 braces specification.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/braces@1.8.5",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/braces.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/braces",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/braces/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/braces"
            }
          ]
        },
        {
          "type": "library",
          "name": "expand-brackets",
          "version": "0.1.5",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|expand-brackets@0.1.5",
          "author": "Jon Schlinkert",
          "description": "Expand POSIX bracket expressions (character classes) in glob patterns.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/expand-brackets@0.1.5",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/expand-brackets.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/expand-brackets",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/expand-brackets/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/expand-brackets"
            }
          ]
        },
        {
          "type": "library",
          "name": "extglob",
          "version": "0.3.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|extglob@0.3.2",
          "author": "Jon Schlinkert",
          "description": "Convert extended globs to regex-compatible strings. Add (almost) the expressive power of regular expressions to glob patterns.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/extglob@0.3.2",
          "externalReferences": [
            {
              "url": "git://github.com/jonschlinkert/extglob.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/extglob",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/extglob/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/extglob"
            }
          ]
        },
        {
          "type": "library",
          "name": "filename-regex",
          "version": "2.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|filename-regex@2.0.1",
          "author": "Jon Schlinkert",
          "description": "Regular expression for matching file names, with or without extension.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/filename-regex@2.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/regexhq/filename-regex.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/regexhq/filename-regex",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/regexhq/filename-regex/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/filename-regex"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-extglob",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-extglob@1.0.0",
          "author": "Jon Schlinkert",
          "description": "Returns true if a string has an extglob.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-extglob@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/is-extglob.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extglob",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extglob/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/is-extglob"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-glob",
          "version": "2.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-glob@2.0.1",
          "author": "Jon Schlinkert",
          "description": "Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-glob@2.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/is-glob.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-glob",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-glob/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/is-glob"
            }
          ]
        },
        {
          "type": "library",
          "name": "kind-of",
          "version": "3.2.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|kind-of@3.2.2",
          "author": "Jon Schlinkert",
          "description": "Get the native type of a value.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/kind-of@3.2.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/kind-of.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/kind-of",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/kind-of/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/kind-of"
            }
          ]
        },
        {
          "type": "library",
          "name": "normalize-path",
          "version": "2.1.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|normalize-path@2.1.1",
          "author": "Jon Schlinkert",
          "description": "Normalize file path slashes to be unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes unless disabled.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/normalize-path@2.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/normalize-path.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/normalize-path",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/normalize-path/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/normalize-path"
            }
          ]
        },
        {
          "type": "library",
          "name": "object.omit",
          "version": "2.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|object.omit@2.0.1",
          "author": "Jon Schlinkert",
          "description": "Return a copy of an object excluding the given key, or array of keys. Also accepts an optional filter function as the last argument.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/object.omit@2.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/object.omit.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/object.omit",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/object.omit/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/object.omit"
            }
          ]
        },
        {
          "type": "library",
          "name": "parse-glob",
          "version": "3.0.4",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|parse-glob@3.0.4",
          "author": "Jon Schlinkert",
          "description": "Parse a glob pattern into an object of tokens.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/parse-glob@3.0.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/parse-glob.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/parse-glob",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/parse-glob/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/parse-glob"
            }
          ]
        },
        {
          "type": "library",
          "name": "regex-cache",
          "version": "0.4.4",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|regex-cache@0.4.4",
          "author": "Jon Schlinkert",
          "description": "Memoize the results of a call to the RegExp constructor, avoiding repetitious runtime compilation of the same string and options, resulting in surprising performance improvements.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/regex-cache@0.4.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/regex-cache.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/regex-cache",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/regex-cache/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/regex-cache"
            }
          ]
        },
        {
          "type": "library",
          "name": "minimist",
          "version": "0.0.8",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|minimist@0.0.8",
          "author": "James Halliday",
          "description": "parse argument options",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/minimist@0.0.8",
          "externalReferences": [
            {
              "url": "git://github.com/substack/minimist.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/minimist",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/minimist/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/minimist"
            }
          ]
        },
        {
          "type": "library",
          "name": "os-homedir",
          "version": "1.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|os-homedir@1.0.2",
          "author": "Sindre Sorhus",
          "description": "Node.js 4 `os.homedir()` ponyfill",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/os-homedir@1.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/os-homedir.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/os-homedir#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/os-homedir/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/os-homedir"
            }
          ]
        },
        {
          "type": "library",
          "name": "which",
          "version": "1.3.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|which@1.3.0",
          "author": "Isaac Z. Schlueter",
          "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/which@1.3.0",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/node-which.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/node-which#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/node-which/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/which"
            }
          ]
        },
        {
          "type": "library",
          "name": "object-assign",
          "version": "4.1.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|object-assign@4.1.1",
          "author": "Sindre Sorhus",
          "description": "ES2015 `Object.assign()` ponyfill",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/object-assign@4.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/object-assign.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/object-assign#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/object-assign/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/object-assign"
            }
          ]
        },
        {
          "type": "library",
          "name": "read-pkg-up",
          "version": "1.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|read-pkg-up@1.0.1",
          "author": "Sindre Sorhus",
          "description": "Read the closest package.json file",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/read-pkg-up@1.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/read-pkg-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/read-pkg-up"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "find-up",
              "version": "1.1.2",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|read-pkg-up@1.0.1|find-up@1.1.2",
              "author": "Sindre Sorhus",
              "description": "Find a file by walking up parent directories",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/find-up@1.1.2",
              "externalReferences": [
                {
                  "url": "git+https://github.com/sindresorhus/find-up.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/sindresorhus/find-up#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/sindresorhus/find-up/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/read-pkg-up/node_modules/find-up"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "require-main-filename",
          "version": "1.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|require-main-filename@1.0.1",
          "author": "Ben Coe",
          "description": "shim for require.main.filename() that works in as many environments as possible",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/require-main-filename@1.0.1",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/yargs/require-main-filename.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/yargs/require-main-filename#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/require-main-filename/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/require-main-filename"
            }
          ]
        },
        {
          "type": "library",
          "name": "decamelize",
          "version": "1.2.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|decamelize@1.2.0",
          "author": "Sindre Sorhus",
          "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/decamelize@1.2.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/decamelize.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/decamelize#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/decamelize/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/decamelize"
            }
          ]
        },
        {
          "type": "library",
          "name": "get-caller-file",
          "version": "1.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|get-caller-file@1.0.2",
          "author": "Stefan Penner",
          "description": "[![Build Status](https://travis-ci.org/ember-cli/ember-cli.svg?branch=master)](https://travis-ci.org/ember-cli/ember-cli) [![Build status](https://ci.appveyor.com/api/projects/status/ol2q94g1932cy14a/branch/master?svg=true)](https://ci.appveyor.com/project/embercli/get-caller-file/branch/master)",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/get-caller-file@1.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/stefanpenner/get-caller-file.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/stefanpenner/get-caller-file#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/stefanpenner/get-caller-file/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/get-caller-file"
            }
          ]
        },
        {
          "type": "library",
          "name": "os-locale",
          "version": "2.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|os-locale@2.1.0",
          "author": "Sindre Sorhus",
          "description": "Get the system locale",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/os-locale@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/os-locale.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/os-locale#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/os-locale/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/os-locale"
            }
          ]
        },
        {
          "type": "library",
          "name": "require-directory",
          "version": "2.1.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|require-directory@2.1.1",
          "author": "Troy Goode",
          "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/require-directory@2.1.1",
          "externalReferences": [
            {
              "url": "git://github.com/troygoode/node-require-directory.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/troygoode/node-require-directory/",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "http://github.com/troygoode/node-require-directory/issues/",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/require-directory"
            }
          ]
        },
        {
          "type": "library",
          "name": "set-blocking",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|set-blocking@2.0.0",
          "author": "Ben Coe",
          "description": "set blocking stdio and stderr ensuring that terminal output does not truncate",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/set-blocking@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/yargs/set-blocking.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/yargs/set-blocking#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/set-blocking/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/set-blocking"
            }
          ]
        },
        {
          "type": "library",
          "name": "string-width",
          "version": "2.1.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|string-width@2.1.1",
          "author": "Sindre Sorhus",
          "description": "Get the visual width of a string - the number of columns required to display it",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string-width@2.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/string-width.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/string-width#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/string-width/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/string-width"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "is-fullwidth-code-point",
              "version": "2.0.0",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|string-width@2.1.1|is-fullwidth-code-point@2.0.0",
              "author": "Sindre Sorhus",
              "description": "Check if the character represented by a given Unicode code point is fullwidth",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/is-fullwidth-code-point@2.0.0",
              "externalReferences": [
                {
                  "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/string-width/node_modules/is-fullwidth-code-point"
                }
              ]
            },
            {
              "type": "library",
              "name": "strip-ansi",
              "version": "4.0.0",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|string-width@2.1.1|strip-ansi@4.0.0",
              "author": "Sindre Sorhus",
              "description": "Strip ANSI escape codes",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/strip-ansi@4.0.0",
              "externalReferences": [
                {
                  "url": "git+https://github.com/chalk/strip-ansi.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/chalk/strip-ansi#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/chalk/strip-ansi/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/string-width/node_modules/strip-ansi"
                }
              ]
            },
            {
              "type": "library",
              "name": "ansi-regex",
              "version": "3.0.0",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|string-width@2.1.1|ansi-regex@3.0.0",
              "author": "Sindre Sorhus",
              "description": "Regular expression for matching ANSI escape codes",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/ansi-regex@3.0.0",
              "externalReferences": [
                {
                  "url": "git+https://github.com/chalk/ansi-regex.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/chalk/ansi-regex#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/chalk/ansi-regex/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/string-width/node_modules/ansi-regex"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "which-module",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|which-module@2.0.0",
          "author": "nexdrew",
          "description": "Find the module object for something that was require()d",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/which-module@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/nexdrew/which-module.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nexdrew/which-module#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nexdrew/which-module/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/which-module"
            }
          ]
        },
        {
          "type": "library",
          "name": "y18n",
          "version": "3.2.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|y18n@3.2.1",
          "author": "Ben Coe",
          "description": "the bare-bones internationalization library used by yargs",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/y18n@3.2.1",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/yargs/y18n.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/yargs/y18n",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/y18n/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/y18n"
            }
          ]
        },
        {
          "type": "library",
          "name": "graceful-fs",
          "version": "4.1.11",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|graceful-fs@4.1.11",
          "description": "A drop-in replacement for fs, making various improvements.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/graceful-fs@4.1.11",
          "externalReferences": [
            {
              "url": "git+https://github.com/isaacs/node-graceful-fs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/node-graceful-fs#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/node-graceful-fs/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/graceful-fs"
            }
          ]
        },
        {
          "type": "library",
          "name": "imurmurhash",
          "version": "0.1.4",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|imurmurhash@0.1.4",
          "author": "Jens Taylor",
          "description": "An incremental implementation of MurmurHash3",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/imurmurhash@0.1.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/jensyt/imurmurhash-js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jensyt/imurmurhash-js",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jensyt/imurmurhash-js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/imurmurhash"
            }
          ]
        },
        {
          "type": "library",
          "name": "slide",
          "version": "1.1.6",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|slide@1.1.6",
          "author": "Isaac Z. Schlueter",
          "description": "A flow control lib small enough to fit on in a slide presentation. Derived live at Oak.JS",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/slide@1.1.6",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/slide-flow-control.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/slide-flow-control#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/slide-flow-control/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/slide"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-utf8",
          "version": "0.2.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-utf8@0.2.1",
          "author": "wayfind",
          "description": "Detect if a buffer is utf8 encoded.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-utf8@0.2.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/wayfind/is-utf8.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/wayfind/is-utf8#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/wayfind/is-utf8/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/is-utf8"
            }
          ]
        },
        {
          "type": "library",
          "name": "p-locate",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|p-locate@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Get the first fulfilled promise that satisfies the provided testing function",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-locate@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-locate.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-locate#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-locate/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/p-locate"
            }
          ]
        },
        {
          "type": "library",
          "name": "lru-cache",
          "version": "4.1.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|lru-cache@4.1.1",
          "author": "Isaac Z. Schlueter",
          "description": "A cache object that deletes the least-recently-used items.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/lru-cache@4.1.1",
          "externalReferences": [
            {
              "url": "git://github.com/isaacs/node-lru-cache.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/node-lru-cache#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/node-lru-cache/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/lru-cache"
            }
          ]
        },
        {
          "type": "library",
          "name": "wrappy",
          "version": "1.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|wrappy@1.0.2",
          "author": "Isaac Z. Schlueter",
          "description": "Callback wrapping utility",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/wrappy@1.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/wrappy.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/wrappy",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/wrappy/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/wrappy"
            }
          ]
        },
        {
          "type": "library",
          "name": "brace-expansion",
          "version": "1.1.8",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|brace-expansion@1.1.8",
          "author": "Julian Gruber",
          "description": "Brace expansion as known from sh/bash",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/brace-expansion@1.1.8",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/brace-expansion.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/brace-expansion",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/brace-expansion/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/brace-expansion"
            }
          ]
        },
        {
          "type": "library",
          "name": "babel-messages",
          "version": "6.23.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-messages@6.23.0",
          "author": "Sebastian McKenzie",
          "description": "Collection of debug messages used by Babel.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/babel-messages@6.23.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/babel/babel.git#master",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://babeljs.io/",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/babel/babel/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/babel-messages"
            }
          ]
        },
        {
          "type": "library",
          "name": "babel-runtime",
          "version": "6.26.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-runtime@6.26.0",
          "author": "Sebastian McKenzie",
          "description": "babel selfContained runtime",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/babel-runtime@6.26.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/babel/babel.git#master",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/babel/babel/tree/master#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/babel/babel/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/babel-runtime"
            }
          ]
        },
        {
          "type": "library",
          "name": "detect-indent",
          "version": "4.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|detect-indent@4.0.0",
          "author": "Sindre Sorhus",
          "description": "Detect the indentation of code",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/detect-indent@4.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/detect-indent.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/detect-indent#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/detect-indent/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/detect-indent"
            }
          ]
        },
        {
          "type": "library",
          "name": "jsesc",
          "version": "1.3.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|jsesc@1.3.0",
          "author": "Mathias Bynens",
          "description": "A JavaScript library for escaping JavaScript strings while generating the shortest possible valid output.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/jsesc@1.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/mathiasbynens/jsesc.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://mths.be/jsesc",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mathiasbynens/jsesc/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/jsesc"
            }
          ]
        },
        {
          "type": "library",
          "name": "lodash",
          "version": "4.17.4",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|lodash@4.17.4",
          "author": "John-David Dalton",
          "description": "Lodash modular utilities.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/lodash@4.17.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/lodash/lodash.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://lodash.com/",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/lodash/lodash/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/lodash"
            }
          ]
        },
        {
          "type": "library",
          "name": "trim-right",
          "version": "1.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|trim-right@1.0.1",
          "author": "Sindre Sorhus",
          "description": "Similar to String#trim() but removes only whitespace on the right",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/trim-right@1.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/trim-right.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/trim-right#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/trim-right/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/trim-right"
            }
          ]
        },
        {
          "type": "library",
          "name": "babel-code-frame",
          "version": "6.26.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-code-frame@6.26.0",
          "author": "Sebastian McKenzie",
          "description": "Generate errors that contain a code frame that point to source locations.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/babel-code-frame@6.26.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/babel/babel.git#master",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://babeljs.io/",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/babel/babel/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/babel-code-frame"
            }
          ]
        },
        {
          "type": "library",
          "name": "debug",
          "version": "2.6.9",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|debug@2.6.9",
          "author": "TJ Holowaychuk",
          "description": "small debugging utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/debug@2.6.9",
          "externalReferences": [
            {
              "url": "git://github.com/visionmedia/debug.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/visionmedia/debug#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/visionmedia/debug/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/debug"
            }
          ]
        },
        {
          "type": "library",
          "name": "globals",
          "version": "9.18.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|globals@9.18.0",
          "author": "Sindre Sorhus",
          "description": "Global identifiers from different JavaScript environments",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/globals@9.18.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/globals.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/globals#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/globals/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/globals"
            }
          ]
        },
        {
          "type": "library",
          "name": "invariant",
          "version": "2.2.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|invariant@2.2.2",
          "author": "Andres Suarez",
          "description": "invariant",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/invariant@2.2.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/zertosh/invariant.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zertosh/invariant#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zertosh/invariant/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/invariant"
            }
          ]
        },
        {
          "type": "library",
          "name": "esutils",
          "version": "2.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|esutils@2.0.2",
          "description": "utility box for ECMAScript language tools",
          "licenses": [
            {
              "license": {
                "name": "BSD",
                "acknowledgement": "declared",
                "url": "http://github.com/estools/esutils/raw/master/LICENSE.BSD"
              }
            }
          ],
          "purl": "pkg:npm/esutils@2.0.2",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/estools/esutils.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/estools/esutils",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/estools/esutils/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/esutils"
            }
          ]
        },
        {
          "type": "library",
          "name": "to-fast-properties",
          "version": "1.0.3",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|to-fast-properties@1.0.3",
          "author": "Sindre Sorhus",
          "description": "Force V8 to use fast properties for an object",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/to-fast-properties@1.0.3",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/to-fast-properties.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/to-fast-properties#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/to-fast-properties/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/to-fast-properties"
            }
          ]
        },
        {
          "type": "library",
          "name": "has-flag",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|has-flag@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Check if argv has a specific flag",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/has-flag@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/has-flag.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/has-flag#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/has-flag/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/has-flag"
            }
          ]
        },
        {
          "type": "library",
          "name": "ms",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|ms@2.0.0",
          "description": "Tiny milisecond conversion utility",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ms@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/zeit/ms.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zeit/ms#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zeit/ms/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/ms"
            }
          ]
        },
        {
          "type": "library",
          "name": "async",
          "version": "1.5.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|async@1.5.2",
          "author": "Caolan McMahon",
          "description": "Higher-order functions and common patterns for asynchronous code",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/async@1.5.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/caolan/async.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/caolan/async#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/caolan/async/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/async"
            }
          ]
        },
        {
          "type": "library",
          "name": "optimist",
          "version": "0.6.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|optimist@0.6.1",
          "author": "James Halliday",
          "description": "Light-weight option parsing with an argv hash. No optstrings attached.",
          "licenses": [
            {
              "license": {
                "name": "MIT/X11",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/optimist@0.6.1",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/substack/node-optimist.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/node-optimist#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/node-optimist/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/optimist"
            }
          ]
        },
        {
          "type": "library",
          "name": "uglify-js",
          "version": "2.8.29",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|uglify-js@2.8.29",
          "author": "Mihai Bazon",
          "description": "JavaScript parser, mangler/compressor and beautifier toolkit",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "BSD-2-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/uglify-js@2.8.29",
          "externalReferences": [
            {
              "url": "git+https://github.com/mishoo/UglifyJS2.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "http://lisperator.net/uglifyjs",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mishoo/UglifyJS2/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/uglify-js"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "yargs",
              "version": "3.10.0",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|uglify-js@2.8.29|yargs@3.10.0",
              "author": "Alex Ford",
              "description": "Light-weight option parsing with an argv hash. No optstrings attached.",
              "scope": "optional",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/yargs@3.10.0",
              "externalReferences": [
                {
                  "url": "git+ssh://git@github.com/bcoe/yargs.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/bcoe/yargs#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/bcoe/yargs/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/uglify-js/node_modules/yargs"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "arr-flatten",
          "version": "1.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|arr-flatten@1.1.0",
          "author": "Jon Schlinkert",
          "description": "Recursively flatten an array or arrays.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/arr-flatten@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/arr-flatten.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/arr-flatten",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/arr-flatten/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/arr-flatten"
            }
          ]
        },
        {
          "type": "library",
          "name": "expand-range",
          "version": "1.8.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|expand-range@1.8.2",
          "author": "Jon Schlinkert",
          "description": "Fast, bash-like range expansion. Expand a range of numbers or letters, uppercase or lowercase. See the benchmarks. Used by micromatch.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/expand-range@1.8.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/expand-range.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/expand-range",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/expand-range/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/expand-range"
            }
          ]
        },
        {
          "type": "library",
          "name": "preserve",
          "version": "0.2.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|preserve@0.2.0",
          "author": "Jon Schlinkert",
          "description": "Temporarily substitute tokens in the given `string` with placeholders, then put them back after transforming the string.",
          "purl": "pkg:npm/preserve@0.2.0",
          "externalReferences": [
            {
              "url": "git://github.com/jonschlinkert/preserve.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/preserve",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/preserve/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/preserve"
            }
          ]
        },
        {
          "type": "library",
          "name": "repeat-element",
          "version": "1.1.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|repeat-element@1.1.2",
          "author": "Jon Schlinkert",
          "description": "Create an array by repeating the given value n times.",
          "purl": "pkg:npm/repeat-element@1.1.2",
          "externalReferences": [
            {
              "url": "git://github.com/jonschlinkert/repeat-element.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/repeat-element",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/repeat-element/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/repeat-element"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-posix-bracket",
          "version": "0.1.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-posix-bracket@0.1.1",
          "author": "Jon Schlinkert",
          "description": "Returns true if the given string is a POSIX bracket expression (POSIX character class).",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-posix-bracket@0.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/is-posix-bracket.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-posix-bracket",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-posix-bracket/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/is-posix-bracket"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-buffer",
          "version": "1.1.6",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-buffer@1.1.6",
          "author": "Feross Aboukhadijeh",
          "description": "Determine if an object is a Buffer",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-buffer@1.1.6",
          "externalReferences": [
            {
              "url": "git://github.com/feross/is-buffer.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/feross/is-buffer#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/feross/is-buffer/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/is-buffer"
            }
          ]
        },
        {
          "type": "library",
          "name": "remove-trailing-separator",
          "version": "1.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|remove-trailing-separator@1.1.0",
          "author": "darsain",
          "description": "Removes separators from the end of the string.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/remove-trailing-separator@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/darsain/remove-trailing-separator.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/darsain/remove-trailing-separator#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/darsain/remove-trailing-separator/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/remove-trailing-separator"
            }
          ]
        },
        {
          "type": "library",
          "name": "for-own",
          "version": "0.1.5",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|for-own@0.1.5",
          "author": "Jon Schlinkert",
          "description": "Iterate over the own enumerable properties of an object, and return an object with properties that evaluate to true from the callback. Exit early by returning `false`. JavaScript/Node.js.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/for-own@0.1.5",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/for-own.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/for-own",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/for-own/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/for-own"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-extendable",
          "version": "0.1.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-extendable@0.1.1",
          "author": "Jon Schlinkert",
          "description": "Returns true if a value is any of the object types: array, regexp, plain object, function or date. This is useful for determining if a value can be extended, e.g. \"can the value have keys?\"",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-extendable@0.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/is-extendable.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extendable",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-extendable/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/is-extendable"
            }
          ]
        },
        {
          "type": "library",
          "name": "glob-base",
          "version": "0.3.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|glob-base@0.3.0",
          "author": "Jon Schlinkert",
          "description": "Returns an object with the (non-glob) base path and the actual pattern.",
          "purl": "pkg:npm/glob-base@0.3.0",
          "externalReferences": [
            {
              "url": "git://github.com/jonschlinkert/glob-base.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/glob-base",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/glob-base/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/glob-base"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-dotfile",
          "version": "1.0.3",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-dotfile@1.0.3",
          "author": "Jon Schlinkert",
          "description": "Return true if a file path is (or has) a dotfile. Returns false if the path is a dot directory.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-dotfile@1.0.3",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/is-dotfile.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-dotfile",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-dotfile/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/is-dotfile"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-equal-shallow",
          "version": "0.1.3",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-equal-shallow@0.1.3",
          "author": "Jon Schlinkert",
          "description": "Does a shallow comparison of two objects, returning false if the keys or values differ.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-equal-shallow@0.1.3",
          "externalReferences": [
            {
              "url": "git://github.com/jonschlinkert/is-equal-shallow.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-equal-shallow",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-equal-shallow/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/is-equal-shallow"
            }
          ]
        },
        {
          "type": "library",
          "name": "isexe",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|isexe@2.0.0",
          "author": "Isaac Z. Schlueter",
          "description": "Minimal module to check if a file is executable.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isexe@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/isaacs/isexe.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/isexe#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/isexe/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/isexe"
            }
          ]
        },
        {
          "type": "library",
          "name": "read-pkg",
          "version": "1.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|read-pkg@1.1.0",
          "author": "Sindre Sorhus",
          "description": "Read a package.json file",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/read-pkg@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/read-pkg.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/read-pkg"
            }
          ]
        },
        {
          "type": "library",
          "name": "strip-ansi",
          "version": "3.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|strip-ansi@3.0.1",
          "author": "Sindre Sorhus",
          "description": "Strip ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-ansi@3.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/strip-ansi.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/strip-ansi#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/strip-ansi/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/strip-ansi"
            }
          ]
        },
        {
          "type": "library",
          "name": "wrap-ansi",
          "version": "2.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|wrap-ansi@2.1.0",
          "author": "Sindre Sorhus",
          "description": "Wordwrap a string with ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/wrap-ansi@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/wrap-ansi.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/wrap-ansi#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/wrap-ansi/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/wrap-ansi"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "string-width",
              "version": "1.0.2",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|wrap-ansi@2.1.0|string-width@1.0.2",
              "author": "Sindre Sorhus",
              "description": "Get the visual width of a string - the number of columns required to display it",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/string-width@1.0.2",
              "externalReferences": [
                {
                  "url": "git+https://github.com/sindresorhus/string-width.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/sindresorhus/string-width#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/sindresorhus/string-width/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/wrap-ansi/node_modules/string-width"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "execa",
          "version": "0.7.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|execa@0.7.0",
          "author": "Sindre Sorhus",
          "description": "A better `child_process`",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/execa@0.7.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/execa.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/execa#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/execa/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/execa"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "cross-spawn",
              "version": "5.1.0",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|execa@0.7.0|cross-spawn@5.1.0",
              "author": "IndigoUnited",
              "description": "Cross platform child_process#spawn and child_process#spawnSync",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/cross-spawn@5.1.0",
              "externalReferences": [
                {
                  "url": "git://github.com/IndigoUnited/node-cross-spawn.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/IndigoUnited/node-cross-spawn#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/IndigoUnited/node-cross-spawn/issues/",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/execa/node_modules/cross-spawn"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "lcid",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|lcid@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Mapping between standard locale identifiers and Windows locale identifiers (LCID)",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/lcid@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/lcid.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/lcid#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/lcid/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/lcid"
            }
          ]
        },
        {
          "type": "library",
          "name": "mem",
          "version": "1.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|mem@1.1.0",
          "author": "Sindre Sorhus",
          "description": "Memoize functions - An optimization used to speed up consecutive function calls by caching the result of calls with identical input",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/mem@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/mem.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/mem#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/mem/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/mem"
            }
          ]
        },
        {
          "type": "library",
          "name": "path-exists",
          "version": "2.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|path-exists@2.1.0",
          "author": "Sindre Sorhus",
          "description": "Check if a path exists",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/path-exists@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/path-exists.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/path-exists#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/path-exists/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/path-exists"
            }
          ]
        },
        {
          "type": "library",
          "name": "pinkie-promise",
          "version": "2.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pinkie-promise@2.0.1",
          "author": "Vsevolod Strukchinsky",
          "description": "ES2015 Promise ponyfill",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/pinkie-promise@2.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/floatdrop/pinkie-promise.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/floatdrop/pinkie-promise#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/floatdrop/pinkie-promise/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/pinkie-promise"
            }
          ]
        },
        {
          "type": "library",
          "name": "p-limit",
          "version": "1.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|p-limit@1.1.0",
          "author": "Sindre Sorhus",
          "description": "Run multiple promise-returning & async functions with limited concurrency",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-limit@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-limit.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-limit#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-limit/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/p-limit"
            }
          ]
        },
        {
          "type": "library",
          "name": "pseudomap",
          "version": "1.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pseudomap@1.0.2",
          "author": "Isaac Z. Schlueter",
          "description": "A thing that is a lot like ES6 `Map`, but without iterators, for use in environments where `for..of` syntax and `Map` are not available.",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/pseudomap@1.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/isaacs/pseudomap.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/pseudomap#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/pseudomap/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/pseudomap"
            }
          ]
        },
        {
          "type": "library",
          "name": "yallist",
          "version": "2.1.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yallist@2.1.2",
          "author": "Isaac Z. Schlueter",
          "description": "Yet Another Linked List",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/yallist@2.1.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/isaacs/yallist.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/yallist#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/yallist/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/yallist"
            }
          ]
        },
        {
          "type": "library",
          "name": "balanced-match",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|balanced-match@1.0.0",
          "author": "Julian Gruber",
          "description": "Match balanced character pairs, like \"{\" and \"}\"",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/balanced-match@1.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/balanced-match.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/balanced-match",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/balanced-match/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/balanced-match"
            }
          ]
        },
        {
          "type": "library",
          "name": "concat-map",
          "version": "0.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|concat-map@0.0.1",
          "author": "James Halliday",
          "description": "concatenative mapdashery",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/concat-map@0.0.1",
          "externalReferences": [
            {
              "url": "git://github.com/substack/node-concat-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/node-concat-map#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/node-concat-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/concat-map"
            }
          ]
        },
        {
          "type": "library",
          "name": "core-js",
          "version": "2.5.3",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|core-js@2.5.3",
          "description": "Standard library",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/core-js@2.5.3",
          "externalReferences": [
            {
              "url": "git+https://github.com/zloirock/core-js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zloirock/core-js#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zloirock/core-js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/core-js"
            }
          ]
        },
        {
          "type": "library",
          "name": "regenerator-runtime",
          "version": "0.11.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|regenerator-runtime@0.11.1",
          "author": "Ben Newman",
          "description": "Runtime for Regenerator-compiled generator and async functions.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/regenerator-runtime@0.11.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/facebook/regenerator.git#master",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/facebook/regenerator/tree/master#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/facebook/regenerator/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/regenerator-runtime"
            }
          ]
        },
        {
          "type": "library",
          "name": "repeating",
          "version": "2.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|repeating@2.0.1",
          "author": "Sindre Sorhus",
          "description": "Repeat a string - fast",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/repeating@2.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/repeating.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/repeating#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/repeating/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/repeating"
            }
          ]
        },
        {
          "type": "library",
          "name": "chalk",
          "version": "1.1.3",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|chalk@1.1.3",
          "description": "Terminal string styling done right. Much color.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/chalk@1.1.3",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/chalk.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/chalk#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/chalk/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/chalk"
            }
          ]
        },
        {
          "type": "library",
          "name": "js-tokens",
          "version": "3.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|js-tokens@3.0.2",
          "author": "Simon Lydell",
          "description": "A regex that tokenizes JavaScript.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/js-tokens@3.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/lydell/js-tokens.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/lydell/js-tokens#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/lydell/js-tokens/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/js-tokens"
            }
          ]
        },
        {
          "type": "library",
          "name": "loose-envify",
          "version": "1.3.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|loose-envify@1.3.1",
          "author": "Andres Suarez",
          "description": "Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/loose-envify@1.3.1",
          "externalReferences": [
            {
              "url": "git://github.com/zertosh/loose-envify.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/zertosh/loose-envify",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/zertosh/loose-envify/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/loose-envify"
            }
          ]
        },
        {
          "type": "library",
          "name": "wordwrap",
          "version": "0.0.3",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|wordwrap@0.0.3",
          "author": "James Halliday",
          "description": "Wrap those words. Show them at what columns to start and stop.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/wordwrap@0.0.3",
          "externalReferences": [
            {
              "url": "git://github.com/substack/node-wordwrap.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/node-wordwrap#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/node-wordwrap/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/wordwrap"
            }
          ]
        },
        {
          "type": "library",
          "name": "amdefine",
          "version": "1.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|amdefine@1.0.1",
          "author": "James Burke",
          "description": "Provide AMD's define() API for declaring modules in the AMD format",
          "licenses": [
            {
              "expression": "BSD-3-Clause OR MIT",
              "acknowledgement": "declared"
            }
          ],
          "purl": "pkg:npm/amdefine@1.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jrburke/amdefine.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "http://github.com/jrburke/amdefine",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jrburke/amdefine/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/amdefine"
            }
          ]
        },
        {
          "type": "library",
          "name": "uglify-to-browserify",
          "version": "1.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|uglify-to-browserify@1.0.2",
          "author": "ForbesLindesay",
          "description": "A transform to make UglifyJS work in browserify.",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/uglify-to-browserify@1.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/ForbesLindesay/uglify-to-browserify.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/ForbesLindesay/uglify-to-browserify#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/ForbesLindesay/uglify-to-browserify/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/uglify-to-browserify"
            }
          ]
        },
        {
          "type": "library",
          "name": "fill-range",
          "version": "2.2.3",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|fill-range@2.2.3",
          "author": "Jon Schlinkert",
          "description": "Fill in a range of numbers or letters, optionally passing an increment or multiplier to use.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/fill-range@2.2.3",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/fill-range.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/fill-range",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/fill-range/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/fill-range"
            }
          ]
        },
        {
          "type": "library",
          "name": "for-in",
          "version": "1.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|for-in@1.0.2",
          "author": "Jon Schlinkert",
          "description": "Iterate over the own and inherited enumerable properties of an object, and return an object with properties that evaluate to true from the callback. Exit early by returning `false`. JavaScript/Node.js",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/for-in@1.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/for-in.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/for-in",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/for-in/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/for-in"
            }
          ]
        },
        {
          "type": "library",
          "name": "glob-parent",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|glob-parent@2.0.0",
          "author": "Elan Shanker",
          "description": "Strips glob magic from a string to provide the parent path",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/glob-parent@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/es128/glob-parent.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/es128/glob-parent",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/es128/glob-parent/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/glob-parent"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-primitive",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-primitive@2.0.0",
          "author": "Jon Schlinkert",
          "description": "Returns `true` if the value is a primitive. ",
          "purl": "pkg:npm/is-primitive@2.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/jonschlinkert/is-primitive.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-primitive",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-primitive/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/is-primitive"
            }
          ]
        },
        {
          "type": "library",
          "name": "load-json-file",
          "version": "1.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|load-json-file@1.1.0",
          "author": "Sindre Sorhus",
          "description": "Read and parse a JSON file",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/load-json-file@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/load-json-file.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/load-json-file#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/load-json-file/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/load-json-file"
            }
          ]
        },
        {
          "type": "library",
          "name": "normalize-package-data",
          "version": "2.4.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|normalize-package-data@2.4.0",
          "author": "Meryn Stol",
          "description": "Normalizes data that can be found in package.json files.",
          "licenses": [
            {
              "license": {
                "id": "BSD-2-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/normalize-package-data@2.4.0",
          "externalReferences": [
            {
              "url": "git://github.com/npm/normalize-package-data.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/normalize-package-data#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/normalize-package-data/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/normalize-package-data"
            }
          ]
        },
        {
          "type": "library",
          "name": "path-type",
          "version": "1.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|path-type@1.1.0",
          "author": "Sindre Sorhus",
          "description": "Check if a path is a file, directory, or symlink",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/path-type@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/path-type.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/path-type#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/path-type/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/path-type"
            }
          ]
        },
        {
          "type": "library",
          "name": "code-point-at",
          "version": "1.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|code-point-at@1.1.0",
          "author": "Sindre Sorhus",
          "description": "ES2015 `String#codePointAt()` ponyfill",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/code-point-at@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/code-point-at.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/code-point-at#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/code-point-at/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/code-point-at"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-fullwidth-code-point",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-fullwidth-code-point@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Check if the character represented by a given Unicode code point is fullwidth",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/is-fullwidth-code-point"
            }
          ]
        },
        {
          "type": "library",
          "name": "ansi-regex",
          "version": "2.1.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|ansi-regex@2.1.1",
          "author": "Sindre Sorhus",
          "description": "Regular expression for matching ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ansi-regex@2.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/ansi-regex.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/ansi-regex"
            }
          ]
        },
        {
          "type": "library",
          "name": "get-stream",
          "version": "3.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|get-stream@3.0.0",
          "author": "Sindre Sorhus",
          "description": "Get a stream as a string, buffer, or array",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/get-stream@3.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/get-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/get-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/get-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/get-stream"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-stream",
          "version": "1.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-stream@1.1.0",
          "author": "Sindre Sorhus",
          "description": "Check if something is a Node.js stream",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-stream@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/is-stream.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/is-stream#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/is-stream/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/is-stream"
            }
          ]
        },
        {
          "type": "library",
          "name": "npm-run-path",
          "version": "2.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|npm-run-path@2.0.2",
          "author": "Sindre Sorhus",
          "description": "Get your PATH prepended with locally installed binaries",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/npm-run-path@2.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/npm-run-path.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/npm-run-path#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/npm-run-path/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/npm-run-path"
            }
          ]
        },
        {
          "type": "library",
          "name": "p-finally",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|p-finally@1.0.0",
          "author": "Sindre Sorhus",
          "description": "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/p-finally@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/p-finally.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/p-finally#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/p-finally/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/p-finally"
            }
          ]
        },
        {
          "type": "library",
          "name": "strip-eof",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|strip-eof@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Strip the End-Of-File (EOF) character from a string/buffer",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-eof@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/strip-eof.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-eof#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-eof/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/strip-eof"
            }
          ]
        },
        {
          "type": "library",
          "name": "invert-kv",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|invert-kv@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Invert the key/value of an object. Example: {foo: 'bar'} → {bar: 'foo'}",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/invert-kv@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/invert-kv.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/invert-kv#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/invert-kv/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/invert-kv"
            }
          ]
        },
        {
          "type": "library",
          "name": "mimic-fn",
          "version": "1.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|mimic-fn@1.1.0",
          "author": "Sindre Sorhus",
          "description": "Make a function mimic another one",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/mimic-fn@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/mimic-fn.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/mimic-fn#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/mimic-fn/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/mimic-fn"
            }
          ]
        },
        {
          "type": "library",
          "name": "pinkie",
          "version": "2.0.4",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pinkie@2.0.4",
          "author": "Vsevolod Strukchinsky",
          "description": "Itty bitty little widdle twinkie pinkie ES2015 Promise implementation",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/pinkie@2.0.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/floatdrop/pinkie.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/floatdrop/pinkie#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/floatdrop/pinkie/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/pinkie"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-finite",
          "version": "1.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-finite@1.0.2",
          "author": "Sindre Sorhus",
          "description": "ES2015 Number.isFinite() ponyfill",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-finite@1.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/is-finite.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/is-finite#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/is-finite/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/is-finite"
            }
          ]
        },
        {
          "type": "library",
          "name": "ansi-styles",
          "version": "2.2.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|ansi-styles@2.2.1",
          "author": "Sindre Sorhus",
          "description": "ANSI escape codes for styling strings in the terminal",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ansi-styles@2.2.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/ansi-styles.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/ansi-styles#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/ansi-styles/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/ansi-styles"
            }
          ]
        },
        {
          "type": "library",
          "name": "escape-string-regexp",
          "version": "1.0.5",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|escape-string-regexp@1.0.5",
          "author": "Sindre Sorhus",
          "description": "Escape RegExp special characters",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/escape-string-regexp@1.0.5",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/escape-string-regexp.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/escape-string-regexp#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/escape-string-regexp/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/escape-string-regexp"
            }
          ]
        },
        {
          "type": "library",
          "name": "has-ansi",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|has-ansi@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Check if a string has ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/has-ansi@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/has-ansi.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/has-ansi#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/has-ansi/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/has-ansi"
            }
          ]
        },
        {
          "type": "library",
          "name": "supports-color",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|supports-color@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Detect whether a terminal supports color",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/supports-color@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/supports-color.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/supports-color#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/supports-color/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/supports-color"
            }
          ]
        },
        {
          "type": "library",
          "name": "camelcase",
          "version": "1.2.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|camelcase@1.2.1",
          "author": "Sindre Sorhus",
          "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase@1.2.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/camelcase"
            }
          ]
        },
        {
          "type": "library",
          "name": "cliui",
          "version": "2.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|cliui@2.1.0",
          "author": "Ben Coe",
          "description": "easily create complex multi-column command-line-interfaces",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cliui@2.1.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/bcoe/cliui.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/bcoe/cliui#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/bcoe/cliui/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/cliui"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "wordwrap",
              "version": "0.0.2",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|cliui@2.1.0|wordwrap@0.0.2",
              "author": "James Halliday",
              "description": "Wrap those words. Show them at what columns to start and stop.",
              "scope": "optional",
              "licenses": [
                {
                  "license": {
                    "name": "MIT/X11",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/wordwrap@0.0.2",
              "externalReferences": [
                {
                  "url": "git://github.com/substack/node-wordwrap.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/substack/node-wordwrap#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/substack/node-wordwrap/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/cliui/node_modules/wordwrap"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "window-size",
          "version": "0.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|window-size@0.1.0",
          "author": "Jon Schlinkert",
          "description": "Reliable way to to get the height and width of the terminal/console in a node.js environment.",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared",
                "url": "https://github.com/jonschlinkert/window-size/blob/master/LICENSE-MIT"
              }
            }
          ],
          "purl": "pkg:npm/window-size@0.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/window-size.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/window-size",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/window-size/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/window-size"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-number",
          "version": "2.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-number@2.1.0",
          "author": "Jon Schlinkert",
          "description": "Returns true if the value is a number. comprehensive tests.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-number@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/is-number.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-number",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/is-number/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/is-number"
            }
          ]
        },
        {
          "type": "library",
          "name": "isobject",
          "version": "2.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|isobject@2.1.0",
          "author": "Jon Schlinkert",
          "description": "Returns true if the value is an object and not an array or null.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isobject@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/isobject.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/isobject",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/isobject/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/isobject"
            }
          ]
        },
        {
          "type": "library",
          "name": "randomatic",
          "version": "1.1.7",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|randomatic@1.1.7",
          "author": "Jon Schlinkert",
          "description": "Generate randomized strings of a specified length, fast. Only the length is necessary, but you can optionally generate patterns using any combination of numeric, alpha-numeric, alphabetical, special or custom characters.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/randomatic@1.1.7",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/randomatic.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/randomatic",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/randomatic/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/randomatic"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "is-number",
              "version": "3.0.0",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|randomatic@1.1.7|is-number@3.0.0",
              "author": "Jon Schlinkert",
              "description": "Returns true if the value is a number. comprehensive tests.",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/is-number@3.0.0",
              "externalReferences": [
                {
                  "url": "git+https://github.com/jonschlinkert/is-number.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/jonschlinkert/is-number",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/jonschlinkert/is-number/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/randomatic/node_modules/is-number"
                }
              ],
              "components": [
                {
                  "type": "library",
                  "name": "kind-of",
                  "version": "3.2.2",
                  "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|randomatic@1.1.7|is-number@3.0.0|kind-of@3.2.2",
                  "author": "Jon Schlinkert",
                  "description": "Get the native type of a value.",
                  "licenses": [
                    {
                      "license": {
                        "id": "MIT",
                        "acknowledgement": "declared"
                      }
                    }
                  ],
                  "purl": "pkg:npm/kind-of@3.2.2",
                  "externalReferences": [
                    {
                      "url": "git+https://github.com/jonschlinkert/kind-of.git",
                      "type": "vcs",
                      "comment": "as detected from PackageJson property \"repository.url\""
                    },
                    {
                      "url": "https://github.com/jonschlinkert/kind-of",
                      "type": "website",
                      "comment": "as detected from PackageJson property \"homepage\""
                    },
                    {
                      "url": "https://github.com/jonschlinkert/kind-of/issues",
                      "type": "issue-tracker",
                      "comment": "as detected from PackageJson property \"bugs.url\""
                    }
                  ],
                  "properties": [
                    {
                      "name": "cdx:npm:package:development",
                      "value": "true"
                    },
                    {
                      "name": "cdx:npm:package:bundled",
                      "value": "true"
                    },
                    {
                      "name": "cdx:npm:package:path",
                      "value": "node_modules/nyc/node_modules/randomatic/node_modules/is-number/node_modules/kind-of"
                    }
                  ]
                }
              ]
            },
            {
              "type": "library",
              "name": "kind-of",
              "version": "4.0.0",
              "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|randomatic@1.1.7|kind-of@4.0.0",
              "author": "Jon Schlinkert",
              "description": "Get the native type of a value.",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/kind-of@4.0.0",
              "externalReferences": [
                {
                  "url": "git+https://github.com/jonschlinkert/kind-of.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/jonschlinkert/kind-of",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/jonschlinkert/kind-of/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:bundled",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/nyc/node_modules/randomatic/node_modules/kind-of"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "repeat-string",
          "version": "1.6.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|repeat-string@1.6.1",
          "author": "Jon Schlinkert",
          "description": "Repeat the given string n times. Fastest implementation for repeating a string.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/repeat-string@1.6.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/repeat-string.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/repeat-string",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/repeat-string/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/repeat-string"
            }
          ]
        },
        {
          "type": "library",
          "name": "parse-json",
          "version": "2.2.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|parse-json@2.2.0",
          "author": "Sindre Sorhus",
          "description": "Parse JSON with more helpful errors",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/parse-json@2.2.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/parse-json.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/parse-json#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/parse-json/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/parse-json"
            }
          ]
        },
        {
          "type": "library",
          "name": "pify",
          "version": "2.3.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pify@2.3.0",
          "author": "Sindre Sorhus",
          "description": "Promisify a callback-style function",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/pify@2.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/pify.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/pify#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/pify/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/pify"
            }
          ]
        },
        {
          "type": "library",
          "name": "hosted-git-info",
          "version": "2.5.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|hosted-git-info@2.5.0",
          "author": "Rebecca Turner",
          "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/hosted-git-info@2.5.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/npm/hosted-git-info.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/npm/hosted-git-info",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/npm/hosted-git-info/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/hosted-git-info"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-builtin-module",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-builtin-module@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Check if a string matches the name of a Node.js builtin module",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-builtin-module@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/is-builtin-module.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/is-builtin-module#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/is-builtin-module/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/is-builtin-module"
            }
          ]
        },
        {
          "type": "library",
          "name": "validate-npm-package-license",
          "version": "3.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|validate-npm-package-license@3.0.1",
          "author": "Kyle E. Mitchell",
          "description": "Give me a string and I'll tell you if it's a valid npm package license string",
          "licenses": [
            {
              "license": {
                "id": "Apache-2.0",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/validate-npm-package-license@3.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/kemitchell/validate-npm-package-license.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/kemitchell/validate-npm-package-license.js#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/kemitchell/validate-npm-package-license.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/validate-npm-package-license"
            }
          ]
        },
        {
          "type": "library",
          "name": "number-is-nan",
          "version": "1.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|number-is-nan@1.0.1",
          "author": "Sindre Sorhus",
          "description": "ES2015 Number.isNaN() ponyfill",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/number-is-nan@1.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/number-is-nan.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/number-is-nan#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/number-is-nan/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/number-is-nan"
            }
          ]
        },
        {
          "type": "library",
          "name": "shebang-command",
          "version": "1.2.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|shebang-command@1.2.0",
          "author": "Kevin Martensson",
          "description": "Get the command from a shebang",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/shebang-command@1.2.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/kevva/shebang-command.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/kevva/shebang-command#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/kevva/shebang-command/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/shebang-command"
            }
          ]
        },
        {
          "type": "library",
          "name": "path-key",
          "version": "2.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|path-key@2.0.1",
          "author": "Sindre Sorhus",
          "description": "Get the PATH environment variable key cross-platform",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/path-key@2.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/path-key.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/path-key#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/path-key/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/path-key"
            }
          ]
        },
        {
          "type": "library",
          "name": "center-align",
          "version": "0.1.3",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|center-align@0.1.3",
          "author": "Jon Schlinkert",
          "description": "Center-align the text in a string.",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/center-align@0.1.3",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/center-align.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/center-align",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/center-align/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/center-align"
            }
          ]
        },
        {
          "type": "library",
          "name": "right-align",
          "version": "0.1.3",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|right-align@0.1.3",
          "author": "Jon Schlinkert",
          "description": "Right-align the text in a string.",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/right-align@0.1.3",
          "externalReferences": [
            {
              "url": "git://github.com/jonschlinkert/right-align.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/right-align",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/right-align/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/right-align"
            }
          ]
        },
        {
          "type": "library",
          "name": "isarray",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|isarray@1.0.0",
          "author": "Julian Gruber",
          "description": "Array#isArray for older browsers",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/isarray@1.0.0",
          "externalReferences": [
            {
              "url": "git://github.com/juliangruber/isarray.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/juliangruber/isarray",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/juliangruber/isarray/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/isarray"
            }
          ]
        },
        {
          "type": "library",
          "name": "error-ex",
          "version": "1.3.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|error-ex@1.3.1",
          "description": "Easy error subclassing and stack customization",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/error-ex@1.3.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/qix-/node-error-ex.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/qix-/node-error-ex#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/qix-/node-error-ex/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/error-ex"
            }
          ]
        },
        {
          "type": "library",
          "name": "builtin-modules",
          "version": "1.1.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|builtin-modules@1.1.1",
          "author": "Sindre Sorhus",
          "description": "List of the Node.js builtin modules",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/builtin-modules@1.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/builtin-modules.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/builtin-modules#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/builtin-modules/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/builtin-modules"
            }
          ]
        },
        {
          "type": "library",
          "name": "spdx-correct",
          "version": "1.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|spdx-correct@1.0.2",
          "author": "Kyle E. Mitchell",
          "description": "correct invalid SPDX identifiers",
          "licenses": [
            {
              "license": {
                "id": "Apache-2.0",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/spdx-correct@1.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/kemitchell/spdx-correct.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/kemitchell/spdx-correct.js#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/kemitchell/spdx-correct.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/spdx-correct"
            }
          ]
        },
        {
          "type": "library",
          "name": "spdx-expression-parse",
          "version": "1.0.4",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|spdx-expression-parse@1.0.4",
          "author": "Kyle E. Mitchell",
          "description": "parse SPDX license expressions",
          "licenses": [
            {
              "expression": "(MIT AND CC-BY-3.0)",
              "acknowledgement": "declared"
            }
          ],
          "purl": "pkg:npm/spdx-expression-parse@1.0.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/kemitchell/spdx-expression-parse.js.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/kemitchell/spdx-expression-parse.js#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/kemitchell/spdx-expression-parse.js/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/spdx-expression-parse"
            }
          ]
        },
        {
          "type": "library",
          "name": "shebang-regex",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|shebang-regex@1.0.0",
          "author": "Sindre Sorhus",
          "description": "Regular expression for matching a shebang",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/shebang-regex@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/shebang-regex.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/shebang-regex#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/shebang-regex/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/shebang-regex"
            }
          ]
        },
        {
          "type": "library",
          "name": "align-text",
          "version": "0.1.4",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|align-text@0.1.4",
          "author": "Jon Schlinkert",
          "description": "Align the text in a string.",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/align-text@0.1.4",
          "externalReferences": [
            {
              "url": "git://github.com/jonschlinkert/align-text.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/align-text",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/align-text/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/align-text"
            }
          ]
        },
        {
          "type": "library",
          "name": "lazy-cache",
          "version": "1.0.4",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|lazy-cache@1.0.4",
          "author": "Jon Schlinkert",
          "description": "Cache requires to be lazy-loaded when needed.",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/lazy-cache@1.0.4",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/lazy-cache.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/lazy-cache",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/lazy-cache/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/lazy-cache"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-arrayish",
          "version": "0.2.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-arrayish@0.2.1",
          "author": "Qix",
          "description": "Determines if an object can be used as an array",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-arrayish@0.2.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/qix-/node-is-arrayish.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/qix-/node-is-arrayish#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/qix-/node-is-arrayish/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/is-arrayish"
            }
          ]
        },
        {
          "type": "library",
          "name": "spdx-license-ids",
          "version": "1.2.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|spdx-license-ids@1.2.2",
          "author": "Shinnosuke Watanabe",
          "description": "A list of SPDX license identifiers",
          "licenses": [
            {
              "license": {
                "id": "Unlicense",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/spdx-license-ids@1.2.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/shinnn/spdx-license-ids.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/shinnn/spdx-license-ids#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/shinnn/spdx-license-ids/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/spdx-license-ids"
            }
          ]
        },
        {
          "type": "library",
          "name": "longest",
          "version": "1.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|longest@1.0.1",
          "author": "Jon Schlinkert",
          "description": "Get the longest item in an array.",
          "scope": "optional",
          "purl": "pkg:npm/longest@1.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/jonschlinkert/longest.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/jonschlinkert/longest",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jonschlinkert/longest/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:bundled",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/nyc/node_modules/longest"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "safe-buffer",
      "version": "5.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|safe-buffer@5.1.1",
      "author": "Feross Aboukhadijeh",
      "description": "Safer Node.js Buffer API",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/feross/safe-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/safe-buffer",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/safe-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "90abcd267e8c9bdde001ccd654983bc07fb019858dac31dd5afa54987c84b200ad230c28ddba8fb55e2d479b6e3da5214cea3f92f855c1df17c303a59466246e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/safe-buffer"
        }
      ]
    },
    {
      "type": "library",
      "name": "standard-version",
      "version": "4.3.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0",
      "author": "Ben Coe",
      "description": "replacement for `npm version` with automatic CHANGELOG generation",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/standard-version@4.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/standard-version.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/standard-version#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/standard-version/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/standard-version/-/standard-version-4.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d9427604850d6bbfb8d4f1f816f6227124040f62c2b764578e63458acf89665c59b70ccd9c69f8bae2fc58152a1e80bd6fe6c9d001c8017fdb8a5ce6fa918f78"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/standard-version"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "yargs",
          "version": "8.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|yargs@8.0.2",
          "description": "yargs the modern, pirate-themed, successor to optimist.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/yargs@8.0.2",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/yargs/yargs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "http://yargs.js.org/",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/yargs/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/yargs/-/yargs-8.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "6299a9055b1cefc969ff7e79c1d918dceb22c360"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/standard-version/node_modules/yargs"
            }
          ]
        },
        {
          "type": "library",
          "name": "camelcase",
          "version": "4.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|camelcase@4.1.0",
          "author": "Sindre Sorhus",
          "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase@4.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/camelcase/-/camelcase-4.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "d545635be1e33c542649c69173e5de6acfae34dd"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/standard-version/node_modules/camelcase"
            }
          ]
        },
        {
          "type": "library",
          "name": "cliui",
          "version": "3.2.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|cliui@3.2.0",
          "author": "Ben Coe",
          "description": "easily create complex multi-column command-line-interfaces",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cliui@3.2.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/yargs/cliui.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/yargs/cliui#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/cliui/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cliui/-/cliui-3.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "120601537a916d29940f934da3b48d585a39213d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/standard-version/node_modules/cliui"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "string-width",
              "version": "1.0.2",
              "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|cliui@3.2.0|string-width@1.0.2",
              "author": "Sindre Sorhus",
              "description": "Get the visual width of a string - the number of columns required to display it",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/string-width@1.0.2",
              "externalReferences": [
                {
                  "url": "git+https://github.com/sindresorhus/string-width.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/sindresorhus/string-width#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/sindresorhus/string-width/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz",
                  "type": "distribution",
                  "hashes": [
                    {
                      "alg": "SHA-1",
                      "content": "118bdf5b8cdc51a2a7e70d211e07e2b0b9b107d3"
                    }
                  ],
                  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/standard-version/node_modules/cliui/node_modules/string-width"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "os-locale",
          "version": "2.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|os-locale@2.1.0",
          "author": "Sindre Sorhus",
          "description": "Get the system locale",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/os-locale@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/os-locale.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/os-locale#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/os-locale/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/os-locale/-/os-locale-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "decb251b7cc96c461c682e18540bc3a2b8c6c5ceedbfa2950139cb3d938d8a58ec52772f8a17bd050a15084b34459d6499fe0793d381aa565f259588e066a728"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/standard-version/node_modules/os-locale"
            }
          ]
        },
        {
          "type": "library",
          "name": "read-pkg-up",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|read-pkg-up@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Read the closest package.json file",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/read-pkg-up@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/read-pkg-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "6b72a8048984e0c41e79510fd5e9fa99b3b549be"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/standard-version/node_modules/read-pkg-up"
            }
          ]
        },
        {
          "type": "library",
          "name": "string-width",
          "version": "2.1.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|string-width@2.1.1",
          "author": "Sindre Sorhus",
          "description": "Get the visual width of a string - the number of columns required to display it",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string-width@2.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/string-width.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/string-width#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/string-width/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "9cea87e7d75e0aaf52447971ab5030f39267b78c3a2af2caa9656293aa00f599255cb3483a5aa0e05db2ad3d4c55a4e302abd5c1d7de67bc3b682bc90fbba093"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/standard-version/node_modules/string-width"
            }
          ],
          "components": [
            {
              "type": "library",
              "name": "is-fullwidth-code-point",
              "version": "2.0.0",
              "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|string-width@2.1.1|is-fullwidth-code-point@2.0.0",
              "author": "Sindre Sorhus",
              "description": "Check if the character represented by a given Unicode code point is fullwidth",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/is-fullwidth-code-point@2.0.0",
              "externalReferences": [
                {
                  "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz",
                  "type": "distribution",
                  "hashes": [
                    {
                      "alg": "SHA-1",
                      "content": "a3b30a5c4f199183167aaab93beefae3ddfb654f"
                    }
                  ],
                  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/standard-version/node_modules/string-width/node_modules/is-fullwidth-code-point"
                }
              ]
            },
            {
              "type": "library",
              "name": "strip-ansi",
              "version": "4.0.0",
              "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|string-width@2.1.1|strip-ansi@4.0.0",
              "author": "Sindre Sorhus",
              "description": "Strip ANSI escape codes",
              "licenses": [
                {
                  "license": {
                    "id": "MIT",
                    "acknowledgement": "declared"
                  }
                }
              ],
              "purl": "pkg:npm/strip-ansi@4.0.0",
              "externalReferences": [
                {
                  "url": "git+https://github.com/chalk/strip-ansi.git",
                  "type": "vcs",
                  "comment": "as detected from PackageJson property \"repository.url\""
                },
                {
                  "url": "https://github.com/chalk/strip-ansi#readme",
                  "type": "website",
                  "comment": "as detected from PackageJson property \"homepage\""
                },
                {
                  "url": "https://github.com/chalk/strip-ansi/issues",
                  "type": "issue-tracker",
                  "comment": "as detected from PackageJson property \"bugs.url\""
                },
                {
                  "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz",
                  "type": "distribution",
                  "hashes": [
                    {
                      "alg": "SHA-1",
                      "content": "a8479022eb1ac368a871389b635262c505ee368f"
                    }
                  ],
                  "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
                }
              ],
              "properties": [
                {
                  "name": "cdx:npm:package:development",
                  "value": "true"
                },
                {
                  "name": "cdx:npm:package:path",
                  "value": "node_modules/standard-version/node_modules/string-width/node_modules/strip-ansi"
                }
              ]
            }
          ]
        },
        {
          "type": "library",
          "name": "which-module",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|which-module@2.0.0",
          "author": "nexdrew",
          "description": "Find the module object for something that was require()d",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/which-module@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/nexdrew/which-module.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nexdrew/which-module#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nexdrew/which-module/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/which-module/-/which-module-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "d9ef07dce77b9902b8a3a8fa4b31c3e3f7e6e87a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/standard-version/node_modules/which-module"
            }
          ]
        },
        {
          "type": "library",
          "name": "yargs-parser",
          "version": "7.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|yargs-parser@7.0.0",
          "author": "Ben Coe",
          "description": "the mighty option parser used by yargs",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/yargs-parser@7.0.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/yargs/yargs-parser.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/yargs/yargs-parser#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/yargs-parser/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-7.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "8d0ac42f16ea55debd332caf4c4038b3e3f5dfd9"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/standard-version/node_modules/yargs-parser"
            }
          ]
        },
        {
          "type": "library",
          "name": "find-up",
          "version": "2.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|find-up@2.1.0",
          "author": "Sindre Sorhus",
          "description": "Find a file by walking up parent directories",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/find-up@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/find-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/find-up/-/find-up-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "45d1b7e506c717ddd482775a2b77920a3c0c57a7"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/standard-version/node_modules/find-up"
            }
          ]
        },
        {
          "type": "library",
          "name": "read-pkg",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|read-pkg@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Read a package.json file",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/read-pkg@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/read-pkg.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/read-pkg/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/read-pkg/-/read-pkg-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "8ef1c0623c6a6db0dc6713c4bfac46332b2368f8"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/standard-version/node_modules/read-pkg"
            }
          ]
        },
        {
          "type": "library",
          "name": "load-json-file",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|load-json-file@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Read and parse a JSON file",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/load-json-file@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/load-json-file.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/load-json-file#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/load-json-file/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/load-json-file/-/load-json-file-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "7947e42149af80d696cbf797bcaabcfe1fe29ca8"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/standard-version/node_modules/load-json-file"
            }
          ]
        },
        {
          "type": "library",
          "name": "path-type",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|path-type@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Check if a path is a file, directory, or symlink",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/path-type@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/path-type.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/path-type#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/path-type/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/path-type/-/path-type-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "f012ccb8415b7096fc2daa1054c3d72389594c73"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/standard-version/node_modules/path-type"
            }
          ]
        },
        {
          "type": "library",
          "name": "ansi-regex",
          "version": "3.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|ansi-regex@3.0.0",
          "author": "Sindre Sorhus",
          "description": "Regular expression for matching ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ansi-regex@3.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/ansi-regex.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "ed0317c322064f79466c02966bddb605ab37d998"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/standard-version/node_modules/ansi-regex"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "standard",
      "version": "10.0.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|standard@10.0.3",
      "author": "Feross Aboukhadijeh",
      "description": "JavaScript Standard Style",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/standard@10.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/standard/standard.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://standardjs.com",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/standard/standard/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/standard/-/standard-10.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "254459fbce44c4a2d050b7240c58a3757e561f337a442edf82264d495e23150568fb7b4fa10187c81ac67a4c9eff27f468e7dbe36d7410ce6a3cd95cd9c461e3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/standard"
        }
      ]
    },
    {
      "type": "library",
      "name": "tap",
      "version": "11.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|tap@11.1.0",
      "author": "Isaac Z. Schlueter",
      "description": "A Test-Anything-Protocol library",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tap@11.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/tapjs/node-tap.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://node-tap.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tapjs/node-tap/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tap/-/tap-11.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c9aeef97d831f971509f92be55aff8005cf953c212006db693aa3e5286409d7dc1c7ab82c0db6bb04cd5bd78e138ad89f95c9b14769178e1744c84c3a022924d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tap"
        }
      ]
    },
    {
      "type": "library",
      "name": "weallbehave",
      "version": "1.2.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|weallbehave@1.2.0",
      "author": "Kat Marchán",
      "description": "CODE_OF_CONDUCT.md generator",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/weallbehave@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/wealljs/weallbehave.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/wealljs/weallbehave#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/wealljs/weallbehave/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/weallbehave/-/weallbehave-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "851efd554025a34e8ef2499e4780c4407732161b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/weallbehave"
        }
      ]
    },
    {
      "type": "library",
      "name": "weallcontribute",
      "version": "1.0.8",
      "bom-ref": "ssri@5.3.0-tuxcare.1|weallcontribute@1.0.8",
      "author": "Kat Marchán",
      "description": "CONTRIBUTING.md generator",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/weallcontribute@1.0.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/wealljs/weallcontribute.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/wealljs/weallcontribute#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/wealljs/weallcontribute/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/weallcontribute/-/weallcontribute-1.0.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "91801eeb2b100678e844b720bdd87543c31cd90a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/weallcontribute"
        }
      ]
    },
    {
      "type": "library",
      "name": "chalk",
      "version": "1.1.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|chalk@1.1.3",
      "description": "Terminal string styling done right. Much color.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/chalk@1.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/chalk.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/chalk#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/chalk/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a8115c55e4a702fe4d150abd3872822a7e09fc98"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/chalk"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-changelog",
      "version": "1.1.11",
      "bom-ref": "ssri@5.3.0-tuxcare.1|conventional-changelog@1.1.11",
      "description": "Generate a changelog from git metadata",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog@1.1.11",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/conventional-changelog.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-changelog/-/conventional-changelog-1.1.11.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "19081c68186e4ca4cd18064ce664204ceefa1bd1494cfc1dad3d40785b9742943dbfe15b6962918d6c93f70bc260d342427a6248906c83edb9dfb8ae1b86e741"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-changelog"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-recommended-bump",
      "version": "1.2.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|conventional-recommended-bump@1.2.1",
      "author": "Steve Mao",
      "description": "Get a recommended version bump based on conventional commits",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-recommended-bump@1.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/conventional-recommended-bump.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-recommended-bump",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-recommended-bump/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-recommended-bump/-/conventional-recommended-bump-1.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a098c6e8391182d9ebfedfd5acf77399fe1766ff1ce3129526b553e33ad21ddf762842fe118c526d8a0aabc950ed4e722ccc3bd77d30adc4132d18ccfd3f9de3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-recommended-bump"
        }
      ]
    },
    {
      "type": "library",
      "name": "dotgitignore",
      "version": "1.0.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|dotgitignore@1.0.3",
      "author": "Ben Coe",
      "description": "find the closest .gitignore file, parse it, and apply ignore rules",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/dotgitignore@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/bcoe/dotgitignore.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/bcoe/dotgitignore#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/bcoe/dotgitignore/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/dotgitignore/-/dotgitignore-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7aee578d2b2d9b459742c011828ea43e39083586653945becff2ad0002018c76b9994a4c3ebc49cad6cf227756cfa1ae6c1baeb87e658ed55c5ca9d59c7e6af3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/dotgitignore"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "find-up",
          "version": "2.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|dotgitignore@1.0.3|find-up@2.1.0",
          "author": "Sindre Sorhus",
          "description": "Find a file by walking up parent directories",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/find-up@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/find-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/find-up/-/find-up-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "45d1b7e506c717ddd482775a2b77920a3c0c57a7"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/dotgitignore/node_modules/find-up"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "figures",
      "version": "1.7.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|figures@1.7.0",
      "author": "Sindre Sorhus",
      "description": "Unicode symbols with Windows CMD fallbacks",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/figures@1.7.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/figures.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/figures#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/figures/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/figures/-/figures-1.7.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cbe1e3affcf1cd44b80cadfed28dc793a9701d2e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/figures"
        }
      ]
    },
    {
      "type": "library",
      "name": "fs-access",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|fs-access@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Node.js 0.12 fs.access() & fs.accessSync() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fs-access@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/fs-access.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/fs-access#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/fs-access/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fs-access/-/fs-access-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d6a87f262271cefebec30c553407fb995da8777a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fs-access"
        }
      ]
    },
    {
      "type": "library",
      "name": "semver",
      "version": "5.3.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|semver@5.3.0",
      "description": "The semantic version parser used by npm.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/semver@5.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/node-semver.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/node-semver#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/node-semver/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/semver/-/semver-5.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9b2ce5d3de02d17c6012ad326aa6b4d0cf54f94f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/semver"
        }
      ]
    },
    {
      "type": "library",
      "name": "eslint-config-standard-jsx",
      "version": "4.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|eslint-config-standard-jsx@4.0.2",
      "author": "Feross Aboukhadijeh",
      "description": "JavaScript Standard Style JSX support - ESLint Shareable Config",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/eslint-config-standard-jsx@4.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/feross/eslint-config-standard-jsx.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/eslint-config-standard-jsx",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/eslint-config-standard-jsx/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/eslint-config-standard-jsx/-/eslint-config-standard-jsx-4.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "17c7d18765859d37a4edd647f59684d0f081c1d5469305566668b395afc30cd3a683b4f1e81fc894ae7ea18a625f6f63a6eef72eccde263e62d5ac4466fe9533"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/eslint-config-standard-jsx"
        }
      ]
    },
    {
      "type": "library",
      "name": "eslint-config-standard",
      "version": "10.2.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|eslint-config-standard@10.2.1",
      "author": "Feross Aboukhadijeh",
      "description": "JavaScript Standard Style - ESLint Shareable Config",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/eslint-config-standard@10.2.1",
      "externalReferences": [
        {
          "url": "git://github.com/feross/eslint-config-standard.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/eslint-config-standard",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/eslint-config-standard/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/eslint-config-standard/-/eslint-config-standard-10.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c061e4d066f379dc17cd562c64e819b4dd454591"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/eslint-config-standard"
        }
      ]
    },
    {
      "type": "library",
      "name": "eslint-plugin-import",
      "version": "2.2.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|eslint-plugin-import@2.2.0",
      "author": "Ben Mosher",
      "description": "Import with sanity.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-import@2.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/benmosher/eslint-plugin-import.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/benmosher/eslint-plugin-import",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/benmosher/eslint-plugin-import/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/eslint-plugin-import/-/eslint-plugin-import-2.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "72ba306fad305d67c4816348a4699a4229ac8b4e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/eslint-plugin-import"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "doctrine",
          "version": "1.5.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|eslint-plugin-import@2.2.0|doctrine@1.5.0",
          "description": "JSDoc parser",
          "licenses": [
            {
              "license": {
                "name": "BSD",
                "acknowledgement": "declared",
                "url": "http://github.com/eslint/doctrine/raw/master/LICENSE.BSD"
              }
            }
          ],
          "purl": "pkg:npm/doctrine@1.5.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/eslint/doctrine.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/eslint/doctrine",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/eslint/doctrine/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/doctrine/-/doctrine-1.5.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "379dce730f6166f76cefa4e6707a159b02c5a6fa"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/eslint-plugin-import/node_modules/doctrine"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "eslint-plugin-node",
      "version": "4.2.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|eslint-plugin-node@4.2.3",
      "author": "Toru Nagashima",
      "description": "Additional ESLint's rules for Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-node@4.2.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/mysticatea/eslint-plugin-node.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mysticatea/eslint-plugin-node#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mysticatea/eslint-plugin-node/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/eslint-plugin-node/-/eslint-plugin-node-4.2.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bc85103eec1b558773fc26279532ec26b472ee25c74237447b9c33d17861753ca6dc822733fcd92e53dff6767699386c1f441cb22782396b36bce782cbfdb62d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/eslint-plugin-node"
        }
      ]
    },
    {
      "type": "library",
      "name": "eslint-plugin-promise",
      "version": "3.5.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|eslint-plugin-promise@3.5.0",
      "author": "jden",
      "description": "Enforce best practices for JavaScript promises",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-promise@3.5.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/xjamundx/eslint-plugin-promise.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/xjamundx/eslint-plugin-promise#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/xjamundx/eslint-plugin-promise/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/eslint-plugin-promise/-/eslint-plugin-promise-3.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "78fbb6ffe047201627569e85a6c5373af2a68fca"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/eslint-plugin-promise"
        }
      ]
    },
    {
      "type": "library",
      "name": "eslint-plugin-react",
      "version": "6.10.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|eslint-plugin-react@6.10.3",
      "author": "Yannick Croissant",
      "description": "React specific linting rules for ESLint",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-react@6.10.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/yannickcr/eslint-plugin-react.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yannickcr/eslint-plugin-react",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yannickcr/eslint-plugin-react/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/eslint-plugin-react/-/eslint-plugin-react-6.10.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c5435beb06774e12c7db2f6abaddcbf900cd3f78"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/eslint-plugin-react"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "doctrine",
          "version": "1.5.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|eslint-plugin-react@6.10.3|doctrine@1.5.0",
          "description": "JSDoc parser",
          "licenses": [
            {
              "license": {
                "name": "BSD",
                "acknowledgement": "declared",
                "url": "http://github.com/eslint/doctrine/raw/master/LICENSE.BSD"
              }
            }
          ],
          "purl": "pkg:npm/doctrine@1.5.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/eslint/doctrine.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/eslint/doctrine",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/eslint/doctrine/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/doctrine/-/doctrine-1.5.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "379dce730f6166f76cefa4e6707a159b02c5a6fa"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/eslint-plugin-react/node_modules/doctrine"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "eslint-plugin-standard",
      "version": "3.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|eslint-plugin-standard@3.0.1",
      "author": "Jamund Ferguson",
      "description": "ESlint Plugin for the Standard Linter",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-standard@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/xjamundx/eslint-plugin-standard.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/xjamundx/eslint-plugin-standard#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/xjamundx/eslint-plugin-standard/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/eslint-plugin-standard/-/eslint-plugin-standard-3.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "34d0c915b45edc6f010393c7eef3823b08565cf2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/eslint-plugin-standard"
        }
      ]
    },
    {
      "type": "library",
      "name": "eslint",
      "version": "3.19.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|eslint@3.19.0",
      "author": "Nicholas C. Zakas",
      "description": "An AST-based pattern checker for JavaScript.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/eslint@3.19.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/eslint/eslint.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://eslint.org",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/eslint/eslint/issues/",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/eslint/-/eslint-3.19.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c8fc6201c7f40dd08941b87c085767386a679acc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/eslint"
        }
      ]
    },
    {
      "type": "library",
      "name": "standard-engine",
      "version": "7.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|standard-engine@7.0.0",
      "author": "Dan Flettre",
      "description": "Wrap your standards in a tortilla and cover it in special sauce.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/standard-engine@7.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/flet/standard-engine.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/flet/standard-engine",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/flet/standard-engine/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/standard-engine/-/standard-engine-7.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ebb77b9c8fc2c8165ffa353bd91ba0dff41af690"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/standard-engine"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "minimist",
          "version": "1.2.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|standard-engine@7.0.0|minimist@1.2.0",
          "author": "James Halliday",
          "description": "parse argument options",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/minimist@1.2.0",
          "externalReferences": [
            {
              "url": "git://github.com/substack/minimist.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/minimist",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/minimist/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "a35008b20f41383eec1fb914f4cd5df79a264284"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/standard-engine/node_modules/minimist"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "bind-obj-methods",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|bind-obj-methods@1.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "Bind methods to an object from that object or some other source. Optionally specify a set of methods to skip over.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/bind-obj-methods@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/bind-obj-methods.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/bind-obj-methods#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/bind-obj-methods/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/bind-obj-methods/-/bind-obj-methods-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4f5979cac15793adf70e488161e463e209ca509c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/bind-obj-methods"
        }
      ]
    },
    {
      "type": "library",
      "name": "bluebird",
      "version": "3.5.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|bluebird@3.5.1",
      "author": "Petka Antonov",
      "description": "Full featured Promises/A+ implementation with exceptionally good performance",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/bluebird@3.5.1",
      "externalReferences": [
        {
          "url": "git://github.com/petkaantonov/bluebird.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/petkaantonov/bluebird",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/petkaantonov/bluebird/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/bluebird/-/bluebird-3.5.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "30a88b895f88d40039f7ab7dc35b1027c8e4892af9f992a2d162ab606527e9dd45c7e223e2d223fa6d96310486733b398d9571577dfd72113c8b093a17ae308c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/bluebird"
        }
      ]
    },
    {
      "type": "library",
      "name": "clean-yaml-object",
      "version": "0.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|clean-yaml-object@0.1.0",
      "author": "James Talmage",
      "description": "Clean up an object prior to serialization",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/clean-yaml-object@0.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/tapjs/clean-yaml-object.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tapjs/clean-yaml-object#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tapjs/clean-yaml-object/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/clean-yaml-object/-/clean-yaml-object-0.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63fb110dc2ce1a84dc21f6d9334876d010ae8b68"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/clean-yaml-object"
        }
      ]
    },
    {
      "type": "library",
      "name": "color-support",
      "version": "1.1.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|color-support@1.1.3",
      "author": "Isaac Z. Schlueter",
      "description": "A module which will endeavor to guess your terminal's level of color support.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/color-support@1.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/color-support.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/color-support#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/color-support/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/color-support/-/color-support-1.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "aa20639296cc2cefc72faf32fa5878ab4fced4c6458f6457e97fca98c6b7fa0243df3f96c08d59cc31f2b2fa87192de63fa9b39cf724a579b0d6723d7098f246"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/color-support"
        }
      ]
    },
    {
      "type": "library",
      "name": "coveralls",
      "version": "2.13.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|coveralls@2.13.3",
      "author": "Gregg Caines",
      "description": "takes json-cov output into stdin and POSTs to coveralls.io",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/coveralls@2.13.3",
      "externalReferences": [
        {
          "url": "git://github.com/nickmerwin/node-coveralls.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nickmerwin/node-coveralls#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nickmerwin/node-coveralls/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/coveralls/-/coveralls-2.13.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8a20269fe9755ea47034b5e15bc46ce6a1d9445318a7d6483e310e551a42fdce2ca3a63f7f8fe5162d057d1e41f5c0aa83286427971999bbdc5517cff0c1dc87"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/coveralls"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "js-yaml",
          "version": "3.6.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|coveralls@2.13.3|js-yaml@3.6.1",
          "author": "Vladimir Zapparov",
          "description": "YAML 1.2 parser and serializer",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/js-yaml@3.6.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/nodeca/js-yaml.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/nodeca/js-yaml",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/nodeca/js-yaml/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.6.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "6e5fe67d8b205ce4d22fad05b7781e8dadcc4b30"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/coveralls/node_modules/js-yaml"
            }
          ]
        },
        {
          "type": "library",
          "name": "minimist",
          "version": "1.2.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|coveralls@2.13.3|minimist@1.2.0",
          "author": "James Halliday",
          "description": "parse argument options",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/minimist@1.2.0",
          "externalReferences": [
            {
              "url": "git://github.com/substack/minimist.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/minimist",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/minimist/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "a35008b20f41383eec1fb914f4cd5df79a264284"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/coveralls/node_modules/minimist"
            }
          ]
        },
        {
          "type": "library",
          "name": "esprima",
          "version": "2.7.3",
          "bom-ref": "ssri@5.3.0-tuxcare.1|coveralls@2.13.3|esprima@2.7.3",
          "author": "Ariya Hidayat",
          "description": "ECMAScript parsing infrastructure for multipurpose analysis",
          "licenses": [
            {
              "license": {
                "id": "BSD-2-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/esprima@2.7.3",
          "externalReferences": [
            {
              "url": "git+https://github.com/jquery/esprima.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "http://esprima.org",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/jquery/esprima/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/esprima/-/esprima-2.7.3.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "96e3b70d5779f6ad49cd032673d1c312767ba581"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/coveralls/node_modules/esprima"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "foreground-child",
      "version": "1.5.6",
      "bom-ref": "ssri@5.3.0-tuxcare.1|foreground-child@1.5.6",
      "author": "Isaac Z. Schlueter",
      "description": "Run a child as if it's the foreground process.  Give it stdio.  Exit when it exits.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/foreground-child@1.5.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/tapjs/foreground-child.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tapjs/foreground-child#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tapjs/foreground-child/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/foreground-child/-/foreground-child-1.5.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4fd71ad2dfde96789b980a5c0a295937cb2f5ce9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/foreground-child"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "cross-spawn",
          "version": "4.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|foreground-child@1.5.6|cross-spawn@4.0.2",
          "author": "IndigoUnited",
          "description": "Cross platform child_process#spawn and child_process#spawnSync",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cross-spawn@4.0.2",
          "externalReferences": [
            {
              "url": "git://github.com/IndigoUnited/node-cross-spawn.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/IndigoUnited/node-cross-spawn#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/IndigoUnited/node-cross-spawn/issues/",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-4.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "7b9247621c23adfdd3856004a823cbe397424d41"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/foreground-child/node_modules/cross-spawn"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "fs-exists-cached",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|fs-exists-cached@1.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "Just like `fs.exists` and `fs.existsSync`, but cached",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fs-exists-cached@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/fs-exists-cached.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/fs-exists-cached#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/fs-exists-cached/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fs-exists-cached/-/fs-exists-cached-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cf25554ca050dc49ae6656b41de42258989dcbce"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fs-exists-cached"
        }
      ]
    },
    {
      "type": "library",
      "name": "function-loop",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|function-loop@1.0.1",
      "author": "Isaac Z. Schlueter",
      "description": "Run a list of functions in order in a given object context.  The functions can be callback-taking or promise-returning.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/function-loop@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/function-loop.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/function-loop#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/function-loop/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/function-loop/-/function-loop-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8076bb305e8e6a3cceee2920765f330d190f340c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/function-loop"
        }
      ]
    },
    {
      "type": "library",
      "name": "glob",
      "version": "7.1.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|glob@7.1.2",
      "author": "Isaac Z. Schlueter",
      "description": "a little globber",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/glob@7.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-glob.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/node-glob#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/node-glob/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/glob/-/glob-7.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3094d4835923b8b790089f9c704e15a5aea42955e43d827698e090c94b8a2dc2d0b1dacc0a904f522f2a544ebe62e689928cde03d36eb13030de12ebf177b911"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/glob"
        }
      ]
    },
    {
      "type": "library",
      "name": "isexe",
      "version": "2.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|isexe@2.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "Minimal module to check if a file is executable.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/isexe.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/isexe#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/isexe/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e8fbf374dc556ff8947a10dcb0572d633f2cfa10"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/isexe"
        }
      ]
    },
    {
      "type": "library",
      "name": "js-yaml",
      "version": "3.10.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|js-yaml@3.10.0",
      "author": "Vladimir Zapparov",
      "description": "YAML 1.2 parser and serializer",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/js-yaml@3.10.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/nodeca/js-yaml.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodeca/js-yaml",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodeca/js-yaml/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/js-yaml/-/js-yaml-3.10.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "3b6bf9d9f7e32daf5578ce372785e871913ffd64fd374222c036b72921c7ed3bbc0ad1fed6a33c48866f9ec4e1eaffb8c85cb9294637047515c23a5f016b2320"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/js-yaml"
        }
      ]
    },
    {
      "type": "library",
      "name": "minipass",
      "version": "2.2.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|minipass@2.2.1",
      "author": "Isaac Z. Schlueter",
      "description": "minimal implementation of a PassThrough stream",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minipass@2.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/minipass.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/minipass#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/minipass/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minipass/-/minipass-2.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "bb5694965c4f254234edc3aacd1eeb786990c660aa947f3cb8822c7fa5d91445a0c3b8172a925d47ee51f58dca103996624748cfdc1766cdc2d2338fc5e8e4fd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minipass"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "yallist",
          "version": "3.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|minipass@2.2.1|yallist@3.0.2",
          "author": "Isaac Z. Schlueter",
          "description": "Yet Another Linked List",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/yallist@3.0.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/isaacs/yallist.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/isaacs/yallist#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/isaacs/yallist/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/yallist/-/yallist-3.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "8452b4bb7e83c7c188d8041c1a837c773d6d8bb9"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/minipass/node_modules/yallist"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "mkdirp",
      "version": "0.5.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|mkdirp@0.5.1",
      "author": "James Halliday",
      "description": "Recursively mkdir, like `mkdir -p`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/substack/node-mkdirp.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-mkdirp#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-mkdirp/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "30057438eac6cf7f8c4767f38648d6697d75c903"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mkdirp"
        }
      ]
    },
    {
      "type": "library",
      "name": "opener",
      "version": "1.4.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|opener@1.4.3",
      "author": "Domenic Denicola",
      "description": "Opens stuff, like webpages and files and executables, cross-platform",
      "licenses": [
        {
          "expression": "(WTFPL OR MIT)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/opener@1.4.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/domenic/opener.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/domenic/opener#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/domenic/opener/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/opener/-/opener-1.4.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5c6da2c5d7e5831e8ffa3964950f8d6674ac90b8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/opener"
        }
      ]
    },
    {
      "type": "library",
      "name": "os-homedir",
      "version": "1.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|os-homedir@1.0.2",
      "author": "Sindre Sorhus",
      "description": "Node.js 4 `os.homedir()` ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/os-homedir@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/os-homedir.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/os-homedir#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/os-homedir/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ffbc4988336e0e833de0c168c7ef152121aa7fb3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/os-homedir"
        }
      ]
    },
    {
      "type": "library",
      "name": "own-or-env",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|own-or-env@1.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "Use an objects own property, or an environment variable.  Optionally treat as a boolean if the env should be set to 1 or 0.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/own-or-env@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/own-or-env.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/own-or-env#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/own-or-env/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/own-or-env/-/own-or-env-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9ef920fc81e2e63cf59d41101258368cf4fca4fb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/own-or-env"
        }
      ]
    },
    {
      "type": "library",
      "name": "own-or",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|own-or@1.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "Either use the object's own property, or a fallback",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/own-or@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/own-or.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/own-or#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/own-or/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/own-or/-/own-or-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4e877fbeda9a2ec8000fbc0bcae39645ee8bf8dc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/own-or"
        }
      ]
    },
    {
      "type": "library",
      "name": "rimraf",
      "version": "2.6.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|rimraf@2.6.2",
      "author": "Isaac Z. Schlueter",
      "description": "A deep deletion module for node (like `rm -rf`)",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/rimraf@2.6.2",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/rimraf.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/rimraf#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/rimraf/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/rimraf/-/rimraf-2.6.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "96b79ec0b2bf0658219b1b5f1f7e986158358bc20071ee1323ba1aa3be48d60db8e7ee8172da935508813f761427d0ba0d039726691847d5fd7c22ed08e25ce7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/rimraf"
        }
      ]
    },
    {
      "type": "library",
      "name": "signal-exit",
      "version": "3.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|signal-exit@3.0.2",
      "author": "Ben Coe",
      "description": "when you want to fire an event no matter how a process exits.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/tapjs/signal-exit.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tapjs/signal-exit",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tapjs/signal-exit/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b5fdc08f1287ea1178628e415e25132b73646c6d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/signal-exit"
        }
      ]
    },
    {
      "type": "library",
      "name": "source-map-support",
      "version": "0.4.18",
      "bom-ref": "ssri@5.3.0-tuxcare.1|source-map-support@0.4.18",
      "description": "Fixes stack traces for files with source maps",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/source-map-support@0.4.18",
      "externalReferences": [
        {
          "url": "git+https://github.com/evanw/node-source-map-support.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/evanw/node-source-map-support#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/evanw/node-source-map-support/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.4.18.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b6bcb4fc9ab13cb17d9ce8ef4ad6bbb55a277643f97708322c38d5a323039668ee813da5459d4e7ecad84e409dda19039c94ca45b3bf465de8ae6f2f96c5336c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/source-map-support"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "source-map",
          "version": "0.5.7",
          "bom-ref": "ssri@5.3.0-tuxcare.1|source-map-support@0.4.18|source-map@0.5.7",
          "author": "Nick Fitzgerald",
          "description": "Generates and consumes source maps",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/source-map@0.5.7",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/mozilla/source-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mozilla/source-map",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mozilla/source-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "8a039d2d1021d22d1ea14c80d8ea468ba2ef3fcc"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/source-map-support/node_modules/source-map"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "stack-utils",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|stack-utils@1.0.1",
      "author": "James Talmage",
      "description": "Captures and cleans stack traces",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stack-utils@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/tapjs/stack-utils.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tapjs/stack-utils#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tapjs/stack-utils/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stack-utils/-/stack-utils-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d4f33ab54e8e38778b0ca5cfd3b3afb12db68620"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stack-utils"
        }
      ]
    },
    {
      "type": "library",
      "name": "tap-mocha-reporter",
      "version": "3.0.6",
      "bom-ref": "ssri@5.3.0-tuxcare.1|tap-mocha-reporter@3.0.6",
      "author": "Isaac Z. Schlueter",
      "description": "Format a TAP stream using Mocha's set of reporters",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tap-mocha-reporter@3.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/tap-mocha-reporter.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/tap-mocha-reporter",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/tap-mocha-reporter/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tap-mocha-reporter/-/tap-mocha-reporter-3.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5089a0c377ad7240d00a8a9920020a7100edd30d492d5b37bf4cb12e59b0bc62d997a30617117b24c1393c49578c0a03925543538d8fdef56ee6382bdfb3f862"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tap-mocha-reporter"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "tap-parser",
          "version": "5.4.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|tap-mocha-reporter@3.0.6|tap-parser@5.4.0",
          "author": "James Halliday",
          "description": "parse the test anything protocol",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/tap-parser@5.4.0",
          "externalReferences": [
            {
              "url": "git://github.com/substack/tap-parser.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/tap-parser",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/tap-parser/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/tap-parser/-/tap-parser-5.4.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "048b08686aafeee4d08135b528b4cc34f48441fe330c33e060e05176039fb81f8914e2d105f12ee9c2dafcabccbe6aa082ed452970df8ad8cbc2cab8f36ed1bc"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/tap-mocha-reporter/node_modules/tap-parser"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "tap-parser",
      "version": "7.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|tap-parser@7.0.0",
      "author": "James Halliday",
      "description": "parse the test anything protocol",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tap-parser@7.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/tap-parser.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/tap-parser",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/tap-parser/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tap-parser/-/tap-parser-7.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "d391bcfcbaf3a8e385bd9861024df6c2c1a23d9d657d4ae5fa257bf8e90a81fa1f67189c79958c1e42a6a30ef562cc9543c22f1813f61237088c4e602f897994"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tap-parser"
        }
      ]
    },
    {
      "type": "library",
      "name": "tmatch",
      "version": "3.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|tmatch@3.1.0",
      "author": "Isaac Z. Schlueter",
      "description": "This module exists to facilitate the `t.match()` method in [`tap`](http://npm.im/tap).",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tmatch@3.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/tmatch.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/tmatch#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/tmatch/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tmatch/-/tmatch-3.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5b7312013382378a55bb6a85c6624b200ad289f792385aa77f1f6189469580e99e46823635b53b44d81afba1be2fca2394579081ef993c27255b252943c51e35"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tmatch"
        }
      ]
    },
    {
      "type": "library",
      "name": "trivial-deferred",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|trivial-deferred@1.0.1",
      "author": "Isaac Z. Schlueter",
      "description": "The most dead-simple trivial Deferred implementation",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/trivial-deferred@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/trivial-deferred.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/trivial-deferred#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/trivial-deferred/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/trivial-deferred/-/trivial-deferred-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "376d4d29d951d6368a6f7a0ae85c2f4d5e0658f3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/trivial-deferred"
        }
      ]
    },
    {
      "type": "library",
      "name": "tsame",
      "version": "1.1.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|tsame@1.1.2",
      "description": "the logic behind tap's t.same() and t.strictSame()",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tsame@1.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/tapjs/tsame.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tapjs/tsame#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tapjs/tsame/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tsame/-/tsame-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a2f0acdb83c68e607254fafdb5220eb3fca3517f6c265d20ac498eb23f5d640fd492742480f38a714a8cf386920afb7d6b01ee85cfdba0ccd383704715a9715b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tsame"
        }
      ]
    },
    {
      "type": "library",
      "name": "write-file-atomic",
      "version": "2.3.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|write-file-atomic@2.3.0",
      "author": "Rebecca Turner",
      "description": "Write files in an atomic fashion w/configurable ownership",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/write-file-atomic@2.3.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/iarna/write-file-atomic.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/iarna/write-file-atomic",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/iarna/write-file-atomic/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-2.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c6e3de2b839d8d6aad7e2e7dca5bd52f4627df9485df381c01cbfbac13c51d56846a9683af819d1a09b78fb7244f01fdc072fb7c69a07c09dbd3e4c7ac76fcb4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/write-file-atomic"
        }
      ]
    },
    {
      "type": "library",
      "name": "yapool",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|yapool@1.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "Yet Another object pool in JavaScript",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/yapool@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yapool.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/yapool#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/yapool/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/yapool/-/yapool-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f693f29a315b50d9a9da2646a7a6645c96985b6a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/yapool"
        }
      ]
    },
    {
      "type": "library",
      "name": "yargs",
      "version": "6.6.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|yargs@6.6.0",
      "description": "yargs the modern, pirate-themed, successor to optimist.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/yargs@6.6.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/yargs/yargs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://yargs.js.org/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/yargs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/yargs/-/yargs-6.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "782ec21ef403345f830a808ca3d513af56065208"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/yargs"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "camelcase",
          "version": "3.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|yargs@6.6.0|camelcase@3.0.0",
          "author": "Sindre Sorhus",
          "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase@3.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/camelcase/-/camelcase-3.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "32fc4b9fcdaf845fcdf7e73bb97cac2261f0ab0a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/yargs/node_modules/camelcase"
            }
          ]
        },
        {
          "type": "library",
          "name": "cliui",
          "version": "3.2.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|yargs@6.6.0|cliui@3.2.0",
          "author": "Ben Coe",
          "description": "easily create complex multi-column command-line-interfaces",
          "licenses": [
            {
              "license": {
                "id": "ISC",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/cliui@3.2.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/yargs/cliui.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/yargs/cliui#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/yargs/cliui/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/cliui/-/cliui-3.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "120601537a916d29940f934da3b48d585a39213d"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/yargs/node_modules/cliui"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "hosted-git-info",
      "version": "2.4.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|hosted-git-info@2.4.2",
      "author": "Rebecca Turner",
      "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hosted-git-info@2.4.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/hosted-git-info.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/hosted-git-info",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/hosted-git-info/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.4.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0076b9f46a270506ddbaaea56496897460612a67"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hosted-git-info"
        }
      ]
    },
    {
      "type": "library",
      "name": "ansi-styles",
      "version": "2.2.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|ansi-styles@2.2.1",
      "author": "Sindre Sorhus",
      "description": "ANSI escape codes for styling strings in the terminal",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@2.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/ansi-styles.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/ansi-styles#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/ansi-styles/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b432dd3358b634cf75e1e4664368240533c1ddbe"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ansi-styles"
        }
      ]
    },
    {
      "type": "library",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "bom-ref": "ssri@5.3.0-tuxcare.1|escape-string-regexp@1.0.5",
      "author": "Sindre Sorhus",
      "description": "Escape RegExp special characters",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/escape-string-regexp.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/escape-string-regexp#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/escape-string-regexp/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/escape-string-regexp"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-ansi",
      "version": "2.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|has-ansi@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Check if a string has ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-ansi@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/has-ansi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/has-ansi#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/has-ansi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "34f5049ce1ecdf2b0649af3ef24e45ed35416d91"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-ansi"
        }
      ]
    },
    {
      "type": "library",
      "name": "strip-ansi",
      "version": "3.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|strip-ansi@3.0.1",
      "author": "Sindre Sorhus",
      "description": "Strip ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/strip-ansi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/strip-ansi#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/strip-ansi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6a385fb8853d952d5ff05d0e8aaf94278dc63dcf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/strip-ansi"
        }
      ]
    },
    {
      "type": "library",
      "name": "supports-color",
      "version": "2.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|supports-color@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Detect whether a terminal supports color",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/supports-color@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/supports-color.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/supports-color#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/supports-color/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "535d045ce6b6363fa40117084629995e9df324c7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/supports-color"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-changelog-angular",
      "version": "1.6.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-angular@1.6.2",
      "author": "Steve Mao",
      "description": "conventional-changelog angular preset",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-angular@1.6.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/conventional-changelog-angular.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog-angular#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog-angular/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-changelog-angular/-/conventional-changelog-angular-1.6.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "2e219990c24e08914b3730e5668ddff83a5b95c0d2cec6981d45a10be933b2aabe9e8e2ac033f7b96d075481ee7974f88c90e160d684f6dfd7083eefbbbc51d6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-changelog-angular"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-changelog-atom",
      "version": "0.2.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-atom@0.2.0",
      "author": "Steve Mao",
      "description": "conventional-changelog atom preset",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-atom@0.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/conventional-changelog-atom.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/conventional-changelog-atom#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/conventional-changelog-atom/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-changelog-atom/-/conventional-changelog-atom-0.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "72f18e5c74e3d8807411252fe013818ddffa7157"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-changelog-atom"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-changelog-codemirror",
      "version": "0.3.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-codemirror@0.3.0",
      "author": "Steve Mao",
      "description": "conventional-changelog CodeMirror preset",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-codemirror@0.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/conventional-changelog-codemirror.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/conventional-changelog-codemirror#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/conventional-changelog-codemirror/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-changelog-codemirror/-/conventional-changelog-codemirror-0.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4dd8abb9f521a638cab49f683496c26b8a5c6d31"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-changelog-codemirror"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-changelog-core",
      "version": "2.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-core@2.0.1",
      "description": "conventional-changelog core",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-core@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/conventional-changelog-core.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog-core#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog-core/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-changelog-core/-/conventional-changelog-core-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5f18120ec0941974f88f7b95a58933d7b0f50285b33bc04e0b454ed5f4b0bef5c9079437db384f19739bbeeeef4dbd06134392d7978383360ddf67d4de63b360"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-changelog-core"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-changelog-ember",
      "version": "0.3.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-ember@0.3.2",
      "author": "Steve Mao",
      "description": "conventional-changelog ember preset",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-ember@0.3.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/conventional-changelog-ember.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/conventional-changelog-ember#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/conventional-changelog-ember/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-changelog-ember/-/conventional-changelog-ember-0.3.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "662802edccfaacbcc79386079e17ddf399b10b2450aa223c08cc1a942542f2322ca65c6cc26faedc5d7a748c7967f3ff03955816dbf81f89dd85c713292d778f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-changelog-ember"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-changelog-eslint",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-eslint@1.0.0",
      "author": "Steve Mao",
      "description": "conventional-changelog eslint preset",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-eslint@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/conventional-changelog-eslint.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/conventional-changelog-eslint#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/conventional-changelog-eslint/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-changelog-eslint/-/conventional-changelog-eslint-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c63cd9d6f09d4e204530ae7369d7a20a167bc6bc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-changelog-eslint"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-changelog-express",
      "version": "0.3.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-express@0.3.0",
      "author": "Steve Mao",
      "description": "conventional-changelog express preset",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-express@0.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/conventional-changelog-express.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/conventional-changelog-express#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/conventional-changelog-express/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-changelog-express/-/conventional-changelog-express-0.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5ed006f48682d8615ee0ab5f53cacb26fbd3e1c8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-changelog-express"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-changelog-jquery",
      "version": "0.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-jquery@0.1.0",
      "author": "Steve Mao",
      "description": "conventional-changelog jquery preset",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-jquery@0.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/conventional-changelog-jquery.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/conventional-changelog-jquery#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/conventional-changelog-jquery/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-changelog-jquery/-/conventional-changelog-jquery-0.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0208397162e3846986e71273b6c79c5b5f80f510"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-changelog-jquery"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-changelog-jscs",
      "version": "0.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-jscs@0.1.0",
      "author": "Steve Mao",
      "description": "conventional-changelog jscs preset",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-jscs@0.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/conventional-changelog-jscs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/conventional-changelog-jscs#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/conventional-changelog-jscs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-changelog-jscs/-/conventional-changelog-jscs-0.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0479eb443cc7d72c58bf0bcf0ef1d444a92f0e5c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-changelog-jscs"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-changelog-jshint",
      "version": "0.3.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-jshint@0.3.0",
      "author": "Steve Mao",
      "description": "conventional-changelog jshint preset",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-jshint@0.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/conventional-changelog-jshint.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/conventional-changelog-jshint#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/conventional-changelog-jshint/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-changelog-jshint/-/conventional-changelog-jshint-0.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0393fd468113baf73cba911d17c5826423366a28"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-changelog-jshint"
        }
      ]
    },
    {
      "type": "library",
      "name": "concat-stream",
      "version": "1.6.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|concat-stream@1.6.0",
      "author": "Max Ogden",
      "description": "writable stream that concatenates strings or binary data and calls a callback with the result",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/concat-stream@1.6.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/maxogden/concat-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/maxogden/concat-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/maxogden/concat-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0aac662fd52be78964d5532f694784e70110acf7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/concat-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-commits-filter",
      "version": "1.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|conventional-commits-filter@1.1.1",
      "author": "Steve Mao",
      "description": "Filter out reverted commits parsed by conventional-commits-parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-commits-filter@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/conventional-commits-filter.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/conventional-commits-filter",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/conventional-commits-filter/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-commits-filter/-/conventional-commits-filter-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6d0c9ab7248d28785c69e295afdbc5c58580d56d53773eb26d53180e6bf8fc584e5d8d7e7dc8625b4ed3cd16c84198556b872f070ac468451005b0a770549d25"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-commits-filter"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-commits-parser",
      "version": "2.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|conventional-commits-parser@2.1.1",
      "author": "Steve Mao",
      "description": "Parse raw conventional commits",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-commits-parser@2.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/conventional-commits-parser.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-commits-parser",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-commits-parser/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-commits-parser/-/conventional-commits-parser-2.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "42ac5aba5ed310b3e74eb9bb2a15868d54c54eced3f7251b9735ee82d5c47dfd82dae5c52b84b4b951aab325fb7de419ce815b5e727529d12cf883264b119ba9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-commits-parser"
        }
      ]
    },
    {
      "type": "library",
      "name": "git-raw-commits",
      "version": "1.3.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|git-raw-commits@1.3.0",
      "author": "Steve Mao",
      "description": "Get raw git commits out of your repository using git-log(1)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/git-raw-commits@1.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/git-raw-commits.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/git-latest-tag",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/git-raw-commits/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/git-raw-commits/-/git-raw-commits-1.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0bc8596e90d5ffe736f7f5546bd2d12f73abaac6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/git-raw-commits"
        }
      ]
    },
    {
      "type": "library",
      "name": "git-semver-tags",
      "version": "1.3.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|git-semver-tags@1.3.0",
      "author": "Steve Mao",
      "description": "Get all git semver tags of your repository in reverse chronological order",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/git-semver-tags@1.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/git-semver-tags.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/git-semver-tags",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/git-semver-tags/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/git-semver-tags/-/git-semver-tags-1.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b154833a6ab5c360c0ad3b1aa9b8f12ea06de919"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/git-semver-tags"
        }
      ]
    },
    {
      "type": "library",
      "name": "meow",
      "version": "3.7.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|meow@3.7.0",
      "author": "Sindre Sorhus",
      "description": "CLI app helper",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/meow@3.7.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/meow.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/meow#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/meow/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/meow/-/meow-3.7.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "72cb668b425228290abbfa856892587308a801fb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/meow"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "minimist",
          "version": "1.2.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|meow@3.7.0|minimist@1.2.0",
          "author": "James Halliday",
          "description": "parse argument options",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/minimist@1.2.0",
          "externalReferences": [
            {
              "url": "git://github.com/substack/minimist.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/minimist",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/minimist/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "a35008b20f41383eec1fb914f4cd5df79a264284"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/meow/node_modules/minimist"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "object-assign",
      "version": "4.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|object-assign@4.1.1",
      "author": "Sindre Sorhus",
      "description": "ES2015 `Object.assign()` ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/object-assign.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/object-assign#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/object-assign/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2109adc7965887cfc05cbbd442cac8bfbb360863"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/object-assign"
        }
      ]
    },
    {
      "type": "library",
      "name": "minimatch",
      "version": "3.0.4",
      "bom-ref": "ssri@5.3.0-tuxcare.1|minimatch@3.0.4",
      "author": "Isaac Z. Schlueter",
      "description": "a glob matcher in javascript",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minimatch@3.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/minimatch.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/minimatch#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/minimatch/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c891d5404872a8f2d44e0b7d07cdcf5eee96debc7832fbc7bd252f4e8a20a70a060ce510fb20eb4741d1a2dfb23827423bbbb8857de959fb7a91604172a87450"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minimatch"
        }
      ]
    },
    {
      "type": "library",
      "name": "null-check",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|null-check@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Ensure a path doesn't contain null bytes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/null-check@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/null-check.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/null-check#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/null-check/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/null-check/-/null-check-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "977dffd7176012b9ec30d2a39db5cf72a0439edd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/null-check"
        }
      ]
    },
    {
      "type": "library",
      "name": "decamelize",
      "version": "1.2.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|decamelize@1.2.0",
      "author": "Sindre Sorhus",
      "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/decamelize@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/decamelize.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/decamelize#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/decamelize/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f6534d15148269b20352e7bee26f501f9a191290"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/decamelize"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-caller-file",
      "version": "1.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|get-caller-file@1.0.2",
      "author": "Stefan Penner",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-caller-file@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/stefanpenner/get-caller-file.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stefanpenner/get-caller-file#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stefanpenner/get-caller-file/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f702e63127e7e231c160a80c1554acb70d5047e5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-caller-file"
        }
      ]
    },
    {
      "type": "library",
      "name": "require-directory",
      "version": "2.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|require-directory@2.1.1",
      "author": "Troy Goode",
      "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/require-directory@2.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/troygoode/node-require-directory.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/troygoode/node-require-directory/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/troygoode/node-require-directory/issues/",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8c64ad5fd30dab1c976e2344ffe7f792a6a6df42"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/require-directory"
        }
      ]
    },
    {
      "type": "library",
      "name": "require-main-filename",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|require-main-filename@1.0.1",
      "author": "Ben Coe",
      "description": "shim for require.main.filename() that works in as many environments as possible",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/require-main-filename@1.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/yargs/require-main-filename.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yargs/require-main-filename#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/require-main-filename/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "97f717b69d48784f5f526a6c5aa8ffdda055a4d1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/require-main-filename"
        }
      ]
    },
    {
      "type": "library",
      "name": "set-blocking",
      "version": "2.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|set-blocking@2.0.0",
      "author": "Ben Coe",
      "description": "set blocking stdio and stderr ensuring that terminal output does not truncate",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/set-blocking@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/yargs/set-blocking.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yargs/set-blocking#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/set-blocking/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "045f9782d011ae9a6803ddd382b24392b3d890f7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/set-blocking"
        }
      ]
    },
    {
      "type": "library",
      "name": "y18n",
      "version": "3.2.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|y18n@3.2.1",
      "author": "Ben Coe",
      "description": "the bare-bones internationalization library used by yargs",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/y18n@3.2.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/yargs/y18n.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yargs/y18n",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/y18n/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/y18n/-/y18n-3.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6d15fba884c08679c0d77e88e7759e811e07fa41"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/y18n"
        }
      ]
    },
    {
      "type": "library",
      "name": "builtin-modules",
      "version": "1.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|builtin-modules@1.1.1",
      "author": "Sindre Sorhus",
      "description": "List of the Node.js builtin modules",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/builtin-modules@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/builtin-modules.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/builtin-modules#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/builtin-modules/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "270f076c5a72c02f5b65a47df94c5fe3a278892f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/builtin-modules"
        }
      ]
    },
    {
      "type": "library",
      "name": "contains-path",
      "version": "0.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|contains-path@0.1.0",
      "author": "Jon Schlinkert",
      "description": "Return true if a file path contains the given path.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/contains-path@0.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/contains-path.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/contains-path",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/contains-path/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/contains-path/-/contains-path-0.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fe8cf184ff6670b6baef01a9d4861a5cbec4120a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/contains-path"
        }
      ]
    },
    {
      "type": "library",
      "name": "debug",
      "version": "2.6.9",
      "bom-ref": "ssri@5.3.0-tuxcare.1|debug@2.6.9",
      "author": "TJ Holowaychuk",
      "description": "small debugging utility",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/debug@2.6.9",
      "externalReferences": [
        {
          "url": "git://github.com/visionmedia/debug.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/visionmedia/debug#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/visionmedia/debug/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6c2ec496b7496899cf6c03fed44a2d62fa99b1bdde725e708ba05f8ba0494d470da30a7a72fb298348d7ce74532838e6fc4ec076014155e00f54c35c286b0730"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/debug"
        }
      ]
    },
    {
      "type": "library",
      "name": "eslint-import-resolver-node",
      "version": "0.2.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|eslint-import-resolver-node@0.2.3",
      "author": "Ben Mosher",
      "description": "Node default behavior import resolution plugin for eslint-plugin-import.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/eslint-import-resolver-node@0.2.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/benmosher/eslint-plugin-import.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/benmosher/eslint-plugin-import",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/benmosher/eslint-plugin-import/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/eslint-import-resolver-node/-/eslint-import-resolver-node-0.2.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5add8106e8c928db2cba232bcd9efa846e3da16c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/eslint-import-resolver-node"
        }
      ]
    },
    {
      "type": "library",
      "name": "eslint-module-utils",
      "version": "2.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|eslint-module-utils@2.1.1",
      "author": "Ben Mosher",
      "description": "Core utilities to support eslint-plugin-import and other module-related plugins.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/eslint-module-utils@2.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/benmosher/eslint-plugin-import.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/benmosher/eslint-plugin-import#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/benmosher/eslint-plugin-import/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/eslint-module-utils/-/eslint-module-utils-2.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8c323f5f997fe83d6b443ff74f8deaf1081b96cda7ab9926e4a4aa8b097251b1a8e7ed387d784c29d08f863c1ba806ba1d759a3318fc4388500c887b21a74943"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/eslint-module-utils"
        }
      ]
    },
    {
      "type": "library",
      "name": "has",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|has@1.0.1",
      "author": "Thiago de Arruda",
      "description": "Object.prototype.hasOwnProperty.call shortcut",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/tarruda/has/blob/master/LICENSE-MIT"
          }
        }
      ],
      "purl": "pkg:npm/has@1.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/tarruda/has.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tarruda/has",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tarruda/has/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has/-/has-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8461733f538b0837c9361e39a9ab9e9704dc2f28"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.cond",
      "version": "4.5.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|lodash.cond@4.5.2",
      "author": "John-David Dalton",
      "description": "The lodash method `_.cond` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.cond@4.5.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.cond/-/lodash.cond-4.5.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f471a1da486be60f6ab955d17115523dd1d255d5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.cond"
        }
      ]
    },
    {
      "type": "library",
      "name": "pkg-up",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|pkg-up@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Find the closest package.json file",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pkg-up@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/pkg-up.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/pkg-up#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/pkg-up/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pkg-up/-/pkg-up-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3e08fb461525c4421624a33b9f7e6d0af5b05a26"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pkg-up"
        }
      ]
    },
    {
      "type": "library",
      "name": "ignore",
      "version": "3.3.7",
      "bom-ref": "ssri@5.3.0-tuxcare.1|ignore@3.3.7",
      "author": "kael",
      "description": "Ignore is a manager and filter for .gitignore rules.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ignore@3.3.7",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/kaelzhang/node-ignore.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kaelzhang/node-ignore#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kaelzhang/node-ignore/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ignore/-/ignore-3.3.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "6061b77a3bc134746abb4e79f443b1c4d162843d008e9bc7942fe974629ddd7de87def82a099186b3c0d2584cd79baa93ca37e55541b8786459f50e2bcc36e1c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ignore"
        }
      ]
    },
    {
      "type": "library",
      "name": "resolve",
      "version": "1.5.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|resolve@1.5.0",
      "author": "James Halliday",
      "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/resolve@1.5.0",
      "externalReferences": [
        {
          "url": "git://github.com/browserify/node-resolve.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/browserify/node-resolve#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/browserify/node-resolve/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/resolve/-/resolve-1.5.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "860a121ab737a63cc03c734183e2a715c2b61f09474ecfd8ac0194afaaa04d5519997bf55045d79746d934128c03d7ee77a95160574f1b3d315f1c9c3f39a68b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/resolve"
        }
      ]
    },
    {
      "type": "library",
      "name": "array.prototype.find",
      "version": "2.0.4",
      "bom-ref": "ssri@5.3.0-tuxcare.1|array.prototype.find@2.0.4",
      "author": "Paul Miller",
      "description": "Array.prototype.find ES6 polyfill.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/array.prototype.find@2.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/paulmillr/Array.prototype.find.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/paulmillr/Array.prototype.find#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/paulmillr/Array.prototype.find/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/array.prototype.find/-/array.prototype.find-2.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "556a5c5362c08648323ddaeb9de9d14bc1864c90"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/array.prototype.find"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsx-ast-utils",
      "version": "1.4.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|jsx-ast-utils@1.4.1",
      "author": "Ethan Cohen",
      "description": "AST utility module for statically analyzing JSX",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsx-ast-utils@1.4.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/evcohen/jsx-ast-utils.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/evcohen/jsx-ast-utils#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/evcohen/jsx-ast-utils/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsx-ast-utils/-/jsx-ast-utils-1.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3867213e8dd79bf1e8f2300c0cfc1efb182c0df1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsx-ast-utils"
        }
      ]
    },
    {
      "type": "library",
      "name": "object.assign",
      "version": "4.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|object.assign@4.1.0",
      "author": "Jordan Harband",
      "description": "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/object.assign@4.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/object.assign.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/object.assign#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/object.assign/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/object.assign/-/object.assign-4.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "7b11c97aaea404a8f9f26a86c9343d0c5beb642fde47a3b0c73a0cf58468181aab5d8a27685c8688532e73d559ad77fb0daaeb784c0ca6eac6ddd77e08dc96e7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/object.assign"
        }
      ]
    },
    {
      "type": "library",
      "name": "babel-code-frame",
      "version": "6.26.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|babel-code-frame@6.26.0",
      "author": "Sebastian McKenzie",
      "description": "Generate errors that contain a code frame that point to source locations.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/babel-code-frame@6.26.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/babel/babel.git#master",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://babeljs.io/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/babel/babel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/babel-code-frame/-/babel-code-frame-6.26.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63fd43f7dc1e3bb7ce35947db8fe369a3f58c74b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/babel-code-frame"
        }
      ]
    },
    {
      "type": "library",
      "name": "doctrine",
      "version": "2.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|doctrine@2.1.0",
      "description": "JSDoc parser",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/doctrine@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/eslint/doctrine.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/eslint/doctrine",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/eslint/doctrine/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/doctrine/-/doctrine-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "df999292ee195cad2f7c2b87103030b79e5d8368cd6a31d9d6876f17ef124abf3612c658e109977ee5aca3ca0477ccd185539b48dd7c68cd028d2768057ef323"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/doctrine"
        }
      ]
    },
    {
      "type": "library",
      "name": "escope",
      "version": "3.6.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|escope@3.6.0",
      "description": "ECMAScript scope analyzer",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/escope@3.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/estools/escope.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/estools/escope",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/estools/escope/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/escope/-/escope-3.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e01975e812781a163a6dadfdd80398dc64c889c3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/escope"
        }
      ]
    },
    {
      "type": "library",
      "name": "espree",
      "version": "3.5.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|espree@3.5.3",
      "author": "Nicholas C. Zakas",
      "description": "An Esprima-compatible JavaScript parser built on Acorn",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/espree@3.5.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/eslint/espree.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/eslint/espree",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/eslint/espree.git",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/espree/-/espree-3.5.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "672ded0090ce4714192e5d9b6a0ba2454d6cc8f1110088342fe241d8c5a8ace4604eefc2a65cefc52f56580ed7878f90f9e3908a136cff5a355dea7c72f0b159"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/espree"
        }
      ]
    },
    {
      "type": "library",
      "name": "esquery",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|esquery@1.0.0",
      "author": "Joel Feenstra",
      "description": "A query library for ECMAScript AST using a CSS selector like query language.",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/esquery@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jrfeenst/esquery.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jrfeenst/esquery#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jrfeenst/esquery/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/esquery/-/esquery-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cfba8b57d7fba93f17298a8a006a04cda13d80fa"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/esquery"
        }
      ]
    },
    {
      "type": "library",
      "name": "estraverse",
      "version": "4.2.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|estraverse@4.2.0",
      "description": "ECMAScript JS AST traversal functions",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/estraverse@4.2.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/estools/estraverse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/estools/estraverse",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/estools/estraverse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/estraverse/-/estraverse-4.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0dee3fed31fcd469618ce7342099fc1afa0bdb13"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/estraverse"
        }
      ]
    },
    {
      "type": "library",
      "name": "esutils",
      "version": "2.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|esutils@2.0.2",
      "description": "utility box for ECMAScript language tools",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "acknowledgement": "declared",
            "url": "http://github.com/estools/esutils/raw/master/LICENSE.BSD"
          }
        }
      ],
      "purl": "pkg:npm/esutils@2.0.2",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/estools/esutils.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/estools/esutils",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/estools/esutils/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/esutils/-/esutils-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0abf4f1caa5bcb1f7a9d8acc6dea4faaa04bac9b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/esutils"
        }
      ]
    },
    {
      "type": "library",
      "name": "file-entry-cache",
      "version": "2.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|file-entry-cache@2.0.0",
      "author": "Roy Riojas",
      "description": "Super simple cache for file metadata, useful for process that work o a given series of files and that only need to repeat the job on the changed ones since the previous run of the process",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/file-entry-cache@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/royriojas/file-entry-cache.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/royriojas/file-entry-cache#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/royriojas/file-entry-cache/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/file-entry-cache/-/file-entry-cache-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c392990c3e684783d838b8c84a45d8a048458361"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/file-entry-cache"
        }
      ]
    },
    {
      "type": "library",
      "name": "globals",
      "version": "9.18.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|globals@9.18.0",
      "author": "Sindre Sorhus",
      "description": "Global identifiers from different JavaScript environments",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/globals@9.18.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/globals.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/globals#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/globals/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/globals/-/globals-9.18.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4b49c6dc22c442263f20bc6ab73b53587ff789145dc812f0e8a303c6728c721aed6e3d8e1667a1561d165027d6dc352b220c7fa85ac93c80abab8678b1347d51"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/globals"
        }
      ]
    },
    {
      "type": "library",
      "name": "imurmurhash",
      "version": "0.1.4",
      "bom-ref": "ssri@5.3.0-tuxcare.1|imurmurhash@0.1.4",
      "author": "Jens Taylor",
      "description": "An incremental implementation of MurmurHash3",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/jensyt/imurmurhash-js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jensyt/imurmurhash-js",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jensyt/imurmurhash-js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9218b9b2b928a238b13dc4fb6b6d576f231453ea"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/imurmurhash"
        }
      ]
    },
    {
      "type": "library",
      "name": "inquirer",
      "version": "0.12.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|inquirer@0.12.0",
      "author": "Simon Boudrias",
      "description": "A collection of common interactive command line user interfaces.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/inquirer@0.12.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/SBoudrias/Inquirer.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/SBoudrias/Inquirer.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/SBoudrias/Inquirer.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/inquirer/-/inquirer-0.12.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1ef2bfd63504df0bc75785fff8c2c41df12f077e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/inquirer"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-my-json-valid",
      "version": "2.17.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-my-json-valid@2.17.1",
      "author": "Mathias Buus",
      "description": "A JSONSchema validator that uses code generation to be extremely fast",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-my-json-valid@2.17.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/mafintosh/is-my-json-valid.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mafintosh/is-my-json-valid",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mafintosh/is-my-json-valid/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-my-json-valid/-/is-my-json-valid-2.17.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "436921370fa80655ae698bc4107b4a4b0fe90b10f62f945cd42f944267bd5fa25d44387b9b90fb1e4a33034a9adc352443a5730a7126f2654840fc88464239b1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-my-json-valid"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-resolvable",
      "version": "1.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-resolvable@1.1.0",
      "author": "Shinnosuke Watanabe",
      "description": "Check if a module ID is resolvable with require()",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-resolvable@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/shinnn/is-resolvable.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/shinnn/is-resolvable#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/shinnn/is-resolvable/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-resolvable/-/is-resolvable-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "aa00d85c5491e56bc47ee4b974c8faa133046ebad268cd02ac5936622abf8179c1bc3f6931ada3197c728462dfbe1669b8c65ed7c089a45c40b77091b38d8d32"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-resolvable"
        }
      ]
    },
    {
      "type": "library",
      "name": "json-stable-stringify",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|json-stable-stringify@1.0.1",
      "author": "James Halliday",
      "description": "deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/json-stable-stringify@1.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/substack/json-stable-stringify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/json-stable-stringify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/json-stable-stringify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9a759d39c5f2ff503fd5300646ed445f88c4f9af"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/json-stable-stringify"
        }
      ]
    },
    {
      "type": "library",
      "name": "levn",
      "version": "0.3.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|levn@0.3.0",
      "author": "George Zahariev",
      "description": "Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/levn@0.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/gkz/levn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/gkz/levn",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/gkz/levn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/levn/-/levn-0.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3b09924edf9f083c0490fdd4c0bc4421e04764ee"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/levn"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash",
      "version": "4.17.5",
      "bom-ref": "ssri@5.3.0-tuxcare.1|lodash@4.17.5",
      "author": "John-David Dalton",
      "description": "Lodash modular utilities.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash@4.17.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash/-/lodash-4.17.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "b2f2f7ba265fd51c211fe716adf667dc0e3e539f306cfd2d1954cb40f6e3a6567167c44e0fd54bb8d82c46789394b7bb3a54aa47bf5151e857829056fecd0843"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash"
        }
      ]
    },
    {
      "type": "library",
      "name": "natural-compare",
      "version": "1.4.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|natural-compare@1.4.0",
      "author": "Lauri Rooden",
      "description": "Compare strings containing a mix of letters and numbers in the way a human being would in sort order.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/natural-compare@1.4.0",
      "externalReferences": [
        {
          "url": "git://github.com/litejs/natural-compare-lite.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/litejs/natural-compare-lite#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/litejs/natural-compare-lite/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4abebfeed7541f2c27acfb29bdbbd15c8d5ba4f7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/natural-compare"
        }
      ]
    },
    {
      "type": "library",
      "name": "optionator",
      "version": "0.8.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|optionator@0.8.2",
      "author": "George Zahariev",
      "description": "option parsing and help generation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/optionator@0.8.2",
      "externalReferences": [
        {
          "url": "git://github.com/gkz/optionator.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/gkz/optionator",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/gkz/optionator/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/optionator/-/optionator-0.8.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "364c5e409d3f4d6301d6c0b4c05bba50180aeb64"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/optionator"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-is-inside",
      "version": "1.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|path-is-inside@1.0.2",
      "author": "Domenic Denicola",
      "description": "Tests whether one path is inside another path",
      "licenses": [
        {
          "expression": "(WTFPL OR MIT)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/path-is-inside@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/domenic/path-is-inside.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/domenic/path-is-inside#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/domenic/path-is-inside/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "365417dede44430d1c11af61027facf074bdfc53"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-is-inside"
        }
      ]
    },
    {
      "type": "library",
      "name": "pluralize",
      "version": "1.2.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|pluralize@1.2.1",
      "author": "Blake Embrey",
      "description": "Pluralize and singularize any word",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pluralize@1.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/blakeembrey/pluralize.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/blakeembrey/pluralize#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/blakeembrey/pluralize/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pluralize/-/pluralize-1.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d1a21483fd22bb41e58a12fa3421823140897c45"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pluralize"
        }
      ]
    },
    {
      "type": "library",
      "name": "progress",
      "version": "1.1.8",
      "bom-ref": "ssri@5.3.0-tuxcare.1|progress@1.1.8",
      "author": "TJ Holowaychuk",
      "description": "Flexible ascii progress bar",
      "purl": "pkg:npm/progress@1.1.8",
      "externalReferences": [
        {
          "url": "git://github.com/visionmedia/node-progress.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/visionmedia/node-progress#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/visionmedia/node-progress/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/progress/-/progress-1.1.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e260c78f6161cdd9b0e56cc3e0a85de17c7a57be"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/progress"
        }
      ]
    },
    {
      "type": "library",
      "name": "require-uncached",
      "version": "1.0.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|require-uncached@1.0.3",
      "author": "Sindre Sorhus",
      "description": "Require a module bypassing the cache",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/require-uncached@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/require-uncached.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/require-uncached#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/require-uncached/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/require-uncached/-/require-uncached-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4e0d56d6c9662fd31e43011c4b95aa49955421d3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/require-uncached"
        }
      ]
    },
    {
      "type": "library",
      "name": "shelljs",
      "version": "0.7.8",
      "bom-ref": "ssri@5.3.0-tuxcare.1|shelljs@0.7.8",
      "description": "Portable Unix shell commands for Node.js",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/shelljs@0.7.8",
      "externalReferences": [
        {
          "url": "git://github.com/shelljs/shelljs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/shelljs/shelljs",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/shelljs/shelljs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/shelljs/-/shelljs-0.7.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "decbcf874b0d1e5fb72e14b164a9683048e9acb3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/shelljs"
        }
      ]
    },
    {
      "type": "library",
      "name": "strip-bom",
      "version": "3.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|strip-bom@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Strip UTF-8 byte order mark (BOM) from a string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/strip-bom@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/strip-bom.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-bom#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-bom/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2334c18e9c759f7bdd56fdef7e9ae3d588e68ed3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/strip-bom"
        }
      ]
    },
    {
      "type": "library",
      "name": "strip-json-comments",
      "version": "2.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|strip-json-comments@2.0.1",
      "author": "Sindre Sorhus",
      "description": "Strip comments from JSON. Lets you use comments in your JSON files!",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/strip-json-comments@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/strip-json-comments.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-json-comments#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-json-comments/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3c531942e908c2697c0ec344858c286c7ca0a60a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/strip-json-comments"
        }
      ]
    },
    {
      "type": "library",
      "name": "table",
      "version": "3.8.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|table@3.8.3",
      "author": "Gajus Kuizinas",
      "description": "Formats data into a string table.",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/table@3.8.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/gajus/table.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/gajus/table#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/gajus/table/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/table/-/table-3.8.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2bbc542f0fda9861a755d3947fefd8b3f513855f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/table"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "string-width",
          "version": "2.1.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|table@3.8.3|string-width@2.1.1",
          "author": "Sindre Sorhus",
          "description": "Get the visual width of a string - the number of columns required to display it",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/string-width@2.1.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/string-width.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/string-width#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/string-width/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-512",
                  "content": "9cea87e7d75e0aaf52447971ab5030f39267b78c3a2af2caa9656293aa00f599255cb3483a5aa0e05db2ad3d4c55a4e302abd5c1d7de67bc3b682bc90fbba093"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/table/node_modules/string-width"
            }
          ]
        },
        {
          "type": "library",
          "name": "is-fullwidth-code-point",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|table@3.8.3|is-fullwidth-code-point@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Check if the character represented by a given Unicode code point is fullwidth",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/is-fullwidth-code-point@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "a3b30a5c4f199183167aaab93beefae3ddfb654f"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/table/node_modules/is-fullwidth-code-point"
            }
          ]
        },
        {
          "type": "library",
          "name": "strip-ansi",
          "version": "4.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|table@3.8.3|strip-ansi@4.0.0",
          "author": "Sindre Sorhus",
          "description": "Strip ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-ansi@4.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/strip-ansi.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/strip-ansi#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/strip-ansi/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "a8479022eb1ac368a871389b635262c505ee368f"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/table/node_modules/strip-ansi"
            }
          ]
        },
        {
          "type": "library",
          "name": "ansi-regex",
          "version": "3.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|table@3.8.3|ansi-regex@3.0.0",
          "author": "Sindre Sorhus",
          "description": "Regular expression for matching ANSI escape codes",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/ansi-regex@3.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/chalk/ansi-regex.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/chalk/ansi-regex/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "ed0317c322064f79466c02966bddb605ab37d998"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/table/node_modules/ansi-regex"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "text-table",
      "version": "0.2.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|text-table@0.2.0",
      "author": "James Halliday",
      "description": "borderless text tables with alignment",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/text-table@0.2.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/text-table.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/text-table",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/text-table/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7f5ee823ae805207c00af2df4a84ec3fcfa570b4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/text-table"
        }
      ]
    },
    {
      "type": "library",
      "name": "user-home",
      "version": "2.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|user-home@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Get the path to the user home directory",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/user-home@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/user-home.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/user-home#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/user-home/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/user-home/-/user-home-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9c70bfd8169bc1dcbf48604e0f04b8b49cde9e9f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/user-home"
        }
      ]
    },
    {
      "type": "library",
      "name": "deglob",
      "version": "2.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|deglob@2.1.0",
      "author": "Dan Flettre",
      "description": "Take a list of glob patterns and return an array of file locations, respecting `.gitignore` and allowing for ignore patterns via `package.json`.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/deglob@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/flet/deglob.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/flet/deglob",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/flet/deglob/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/deglob/-/deglob-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4d44abe16ef32c779b4972bd141a80325029a14a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/deglob"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-stdin",
      "version": "5.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|get-stdin@5.0.1",
      "author": "Sindre Sorhus",
      "description": "Get stdin as a string or buffer",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-stdin@5.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/get-stdin.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/get-stdin#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/get-stdin/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-stdin/-/get-stdin-5.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "122e161591e21ff4c52530305693f20e6393a398"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-stdin"
        }
      ]
    },
    {
      "type": "library",
      "name": "pkg-conf",
      "version": "2.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|pkg-conf@2.1.0",
      "author": "Sindre Sorhus",
      "description": "Get namespaced config from the closest package.json",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pkg-conf@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/pkg-conf.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/pkg-conf#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/pkg-conf/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pkg-conf/-/pkg-conf-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2126514ca6f2abfebd168596df18ba57867f0058"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pkg-conf"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "find-up",
          "version": "2.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|pkg-conf@2.1.0|find-up@2.1.0",
          "author": "Sindre Sorhus",
          "description": "Find a file by walking up parent directories",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/find-up@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/find-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/find-up/-/find-up-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "45d1b7e506c717ddd482775a2b77920a3c0c57a7"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/pkg-conf/node_modules/find-up"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "lcov-parse",
      "version": "0.0.10",
      "bom-ref": "ssri@5.3.0-tuxcare.1|lcov-parse@0.0.10",
      "author": "Dav Glass",
      "description": "Parse lcov results files and return JSON",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lcov-parse@0.0.10",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/davglass/lcov-parse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/davglass/lcov-parse#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/davglass/lcov-parse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lcov-parse/-/lcov-parse-0.0.10.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1b0b8ff9ac9c7889250582b70b71315d9da6d9a3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lcov-parse"
        }
      ]
    },
    {
      "type": "library",
      "name": "log-driver",
      "version": "1.2.5",
      "bom-ref": "ssri@5.3.0-tuxcare.1|log-driver@1.2.5",
      "description": "log-driver is a simple logging framework for logging to stdout",
      "purl": "pkg:npm/log-driver@1.2.5",
      "externalReferences": [
        {
          "url": "git://github.com/cainus/logdriver.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/cainus/logdriver#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/cainus/logdriver/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/log-driver/-/log-driver-1.2.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7ae4ec257302fd790d557cb10c97100d857b0056"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/log-driver"
        }
      ]
    },
    {
      "type": "library",
      "name": "request",
      "version": "2.79.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|request@2.79.0",
      "author": "Mikeal Rogers",
      "description": "Simplified HTTP request client.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/request@2.79.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/request/request.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/request/request#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/request/request/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/request/-/request-2.79.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4dfe5bf6be8b8cdc37fcf93e04b65577722710de"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/request"
        }
      ]
    },
    {
      "type": "library",
      "name": "fs.realpath",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|fs.realpath@1.0.0",
      "author": "Isaac Z. Schlueter",
      "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/fs.realpath.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/fs.realpath#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/fs.realpath/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1504ad2523158caa40db4a2787cb01411994ea4f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fs.realpath"
        }
      ]
    },
    {
      "type": "library",
      "name": "inflight",
      "version": "1.0.6",
      "bom-ref": "ssri@5.3.0-tuxcare.1|inflight@1.0.6",
      "author": "Isaac Z. Schlueter",
      "description": "Add callbacks to requests in flight to avoid async duplication",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/inflight.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/inflight",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/inflight/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "49bd6331d7d02d0c09bc910a1075ba8165b56df9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/inflight"
        }
      ]
    },
    {
      "type": "library",
      "name": "inherits",
      "version": "2.0.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|inherits@2.0.3",
      "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/inherits.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/inherits#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/inherits/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "633c2c83e3da42a502f52466022480f4208261de"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/inherits"
        }
      ]
    },
    {
      "type": "library",
      "name": "once",
      "version": "1.4.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|once@1.4.0",
      "author": "Isaac Z. Schlueter",
      "description": "Run a function exactly one time",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/once.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/once#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/once/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "583b1aa775961d4b113ac17d9c50baef9dd76bd1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/once"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|path-is-absolute@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Node.js 0.12 path.isAbsolute() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/path-is-absolute.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/path-is-absolute#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/path-is-absolute/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-is-absolute"
        }
      ]
    },
    {
      "type": "library",
      "name": "argparse",
      "version": "1.0.9",
      "bom-ref": "ssri@5.3.0-tuxcare.1|argparse@1.0.9",
      "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/argparse@1.0.9",
      "externalReferences": [
        {
          "url": "git+https://github.com/nodeca/argparse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodeca/argparse#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodeca/argparse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/argparse/-/argparse-1.0.9.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "73d83bc263f86e97f8cc4f6bae1b0e90a7d22c86"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/argparse"
        }
      ]
    },
    {
      "type": "library",
      "name": "esprima",
      "version": "4.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|esprima@4.0.0",
      "author": "Ariya Hidayat",
      "description": "ECMAScript parsing infrastructure for multipurpose analysis",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/esprima@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jquery/esprima.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://esprima.org",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jquery/esprima/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/esprima/-/esprima-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a1fb5371a32efc41ab108bbdd38996b5e288bfcbccb8e806628ec4855249374d11fc4103f430ae6bfc711d17589cab5c102cd583bc4e5a17e5bc9327a9c1598f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/esprima"
        }
      ]
    },
    {
      "type": "library",
      "name": "minimist",
      "version": "0.0.8",
      "bom-ref": "ssri@5.3.0-tuxcare.1|minimist@0.0.8",
      "author": "James Halliday",
      "description": "parse argument options",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/minimist@0.0.8",
      "externalReferences": [
        {
          "url": "git://github.com/substack/minimist.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/minimist",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/minimist/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "857fcabfc3397d2625b8228262e86aa7a011b05d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/minimist"
        }
      ]
    },
    {
      "type": "library",
      "name": "diff",
      "version": "1.4.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|diff@1.4.0",
      "description": "A javascript text diff implementation.",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "acknowledgement": "declared",
            "url": "http://github.com/kpdecker/jsdiff/blob/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/diff@1.4.0",
      "externalReferences": [
        {
          "url": "git://github.com/kpdecker/jsdiff.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kpdecker/jsdiff#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/kpdecker/jsdiff/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/diff/-/diff-1.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7f28d2eb9ee7b15a97efd89ce63dcfdaa3ccbabf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/diff"
        }
      ]
    },
    {
      "type": "library",
      "name": "readable-stream",
      "version": "2.3.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|readable-stream@2.3.3",
      "description": "Streams3, a user-land copy of the stream library from Node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.3",
      "externalReferences": [
        {
          "url": "git://github.com/nodejs/readable-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nodejs/readable-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nodejs/readable-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "9beab3cdc9fb294c4499dd6031b72117e63678851b89e51ac645ada6dc87cb0ad7d2b13c40462a3c2d3b56ecb85a6df6ff1135e8d71d05cb5bf12d177bfe4879"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/readable-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "unicode-length",
      "version": "1.0.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|unicode-length@1.0.3",
      "author": "Juan Cruz Viotti",
      "description": "Get the length of unicode strings",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/unicode-length@1.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/jviotti/unicode-length.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jviotti/unicode-length",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jviotti/unicode-length/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/unicode-length/-/unicode-length-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5ada7a7fed51841a418a328cf149478ac8358abb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/unicode-length"
        }
      ]
    },
    {
      "type": "library",
      "name": "events-to-array",
      "version": "1.1.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|events-to-array@1.1.2",
      "author": "Isaac Z. Schlueter",
      "description": "Put a bunch of emitted events in an array, for testing.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/events-to-array@1.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/events-to-array.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/events-to-array",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/events-to-array/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/events-to-array/-/events-to-array-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2d41f563e1fe400ed4962fe1a4d5c6a7539df7f6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/events-to-array"
        }
      ]
    },
    {
      "type": "library",
      "name": "graceful-fs",
      "version": "4.1.11",
      "bom-ref": "ssri@5.3.0-tuxcare.1|graceful-fs@4.1.11",
      "description": "A drop-in replacement for fs, making various improvements.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.1.11",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/node-graceful-fs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/node-graceful-fs#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/node-graceful-fs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.11.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0e8bdfe4d1ddb8854d64e04ea7c00e2a026e5658"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/graceful-fs"
        }
      ]
    },
    {
      "type": "library",
      "name": "os-locale",
      "version": "1.4.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|os-locale@1.4.0",
      "author": "Sindre Sorhus",
      "description": "Get the system locale",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/os-locale@1.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/os-locale.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/os-locale#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/os-locale/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/os-locale/-/os-locale-1.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "20f9f17ae29ed345e8bde583b13d2009803c14d9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/os-locale"
        }
      ]
    },
    {
      "type": "library",
      "name": "read-pkg-up",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|read-pkg-up@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Read the closest package.json file",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/read-pkg-up@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/read-pkg-up.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/read-pkg-up#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/read-pkg-up/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9d63c13276c065918d57f002a57f40a1b643fb02"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/read-pkg-up"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "find-up",
          "version": "1.1.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|read-pkg-up@1.0.1|find-up@1.1.2",
          "author": "Sindre Sorhus",
          "description": "Find a file by walking up parent directories",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/find-up@1.1.2",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/find-up.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/find-up/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "6b2e9822b1a2ce0a60ab64d610eccad53cb24d0f"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/read-pkg-up/node_modules/find-up"
            }
          ]
        },
        {
          "type": "library",
          "name": "path-exists",
          "version": "2.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|read-pkg-up@1.0.1|path-exists@2.1.0",
          "author": "Sindre Sorhus",
          "description": "Check if a path exists",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/path-exists@2.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/path-exists.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/path-exists#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/path-exists/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "0feb6c64f0fc518d9a754dd5efb62c7022761f4b"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/read-pkg-up/node_modules/path-exists"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "string-width",
      "version": "1.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|string-width@1.0.2",
      "author": "Sindre Sorhus",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/string-width@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/string-width.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/string-width#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/string-width/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/string-width/-/string-width-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "118bdf5b8cdc51a2a7e70d211e07e2b0b9b107d3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/string-width"
        }
      ]
    },
    {
      "type": "library",
      "name": "which-module",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|which-module@1.0.0",
      "author": "nexdrew",
      "description": "Find the module object for something that was require()d",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/which-module@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/nexdrew/which-module.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/nexdrew/which-module#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/nexdrew/which-module/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/which-module/-/which-module-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bba63ca861948994ff307736089e3b96026c2a4f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/which-module"
        }
      ]
    },
    {
      "type": "library",
      "name": "yargs-parser",
      "version": "4.2.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|yargs-parser@4.2.1",
      "author": "Ben Coe",
      "description": "the mighty option parser used by yargs",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/yargs-parser@4.2.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/yargs/yargs-parser.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/yargs/yargs-parser#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/yargs/yargs-parser/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-4.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "29cceac0dc4f03c6c87b4a9f217dd18c9f74871c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/yargs-parser"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "camelcase",
          "version": "3.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|yargs-parser@4.2.1|camelcase@3.0.0",
          "author": "Sindre Sorhus",
          "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase@3.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/camelcase/-/camelcase-3.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "32fc4b9fcdaf845fcdf7e73bb97cac2261f0ab0a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/yargs-parser/node_modules/camelcase"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "ansi-regex",
      "version": "2.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|ansi-regex@2.1.1",
      "author": "Sindre Sorhus",
      "description": "Regular expression for matching ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@2.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/ansi-regex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/ansi-regex#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/ansi-regex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c3b33ab5ee360d86e0e628f0468ae7ef27d654df"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ansi-regex"
        }
      ]
    },
    {
      "type": "library",
      "name": "compare-func",
      "version": "1.3.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|compare-func@1.3.2",
      "author": "Steve Mao",
      "description": "Get a compare function for array to sort",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/compare-func@1.3.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/compare-func.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/compare-func",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/compare-func/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/compare-func/-/compare-func-1.3.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "99dd0ba457e1f9bc722b12c08ec33eeab31fa648"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/compare-func"
        }
      ]
    },
    {
      "type": "library",
      "name": "q",
      "version": "1.5.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|q@1.5.1",
      "author": "Kris Kowal",
      "description": "A library for promises (CommonJS/Promises/A,B,D)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/q@1.5.1",
      "externalReferences": [
        {
          "url": "git://github.com/kriskowal/q.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kriskowal/q",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/kriskowal/q/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/q/-/q-1.5.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7e32f75b41381291d04611f1bf14109ac00651d7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/q"
        }
      ]
    },
    {
      "type": "library",
      "name": "conventional-changelog-writer",
      "version": "3.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-writer@3.0.0",
      "author": "Steve Mao",
      "description": "Write logs based on conventional commits and templates",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-writer@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/conventional-changelog/conventional-changelog-writer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog-writer",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/conventional-changelog/conventional-changelog-writer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/conventional-changelog-writer/-/conventional-changelog-writer-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e106154ed94341e387d717b61be2181ff53254cc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/conventional-changelog-writer"
        }
      ]
    },
    {
      "type": "library",
      "name": "dateformat",
      "version": "1.0.12",
      "bom-ref": "ssri@5.3.0-tuxcare.1|dateformat@1.0.12",
      "author": "Steven Levithan",
      "description": "A node.js package for Steven Levithan's excellent dateFormat() function.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/dateformat@1.0.12",
      "externalReferences": [
        {
          "url": "git+https://github.com/felixge/node-dateformat.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/felixge/node-dateformat",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/felixge/node-dateformat/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/dateformat/-/dateformat-1.0.12.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9f124b67594c937ff706932e4a642cca8dbbfee9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/dateformat"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "get-stdin",
          "version": "4.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|dateformat@1.0.12|get-stdin@4.0.1",
          "author": "Sindre Sorhus",
          "description": "Easier stdin",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/get-stdin@4.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/get-stdin.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/get-stdin#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/get-stdin/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/get-stdin/-/get-stdin-4.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "b968c6b0a04384324902e8bf1a5df32579a450fe"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/dateformat/node_modules/get-stdin"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "get-pkg-repo",
      "version": "1.4.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|get-pkg-repo@1.4.0",
      "author": "Steve Mao",
      "description": "Get normalized repository from package json data",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-pkg-repo@1.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/get-pkg-repo.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/get-pkg-repo",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/get-pkg-repo/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-pkg-repo/-/get-pkg-repo-1.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c73b489c06d80cc5536c2c853f9e05232056972d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-pkg-repo"
        }
      ]
    },
    {
      "type": "library",
      "name": "git-remote-origin-url",
      "version": "2.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|git-remote-origin-url@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Get the remote origin url of a git repository",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/git-remote-origin-url@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/git-remote-origin-url.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/git-remote-origin-url#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/git-remote-origin-url/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/git-remote-origin-url/-/git-remote-origin-url-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5282659dae2107145a11126112ad3216ec5fa65f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/git-remote-origin-url"
        }
      ]
    },
    {
      "type": "library",
      "name": "normalize-package-data",
      "version": "2.3.6",
      "bom-ref": "ssri@5.3.0-tuxcare.1|normalize-package-data@2.3.6",
      "author": "Meryn Stol",
      "description": "Normalizes data that can be found in package.json files.",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/normalize-package-data@2.3.6",
      "externalReferences": [
        {
          "url": "git://github.com/npm/normalize-package-data.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/normalize-package-data#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/normalize-package-data/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.3.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "498fa420c96401f787402ba21e600def9f981fff"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/normalize-package-data"
        }
      ]
    },
    {
      "type": "library",
      "name": "read-pkg",
      "version": "1.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|read-pkg@1.1.0",
      "author": "Sindre Sorhus",
      "description": "Read a package.json file",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/read-pkg@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/read-pkg.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/read-pkg#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/read-pkg/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/read-pkg/-/read-pkg-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f5ffaa5ecd29cb31c0474bca7d756b6bb29e3f28"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/read-pkg"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "load-json-file",
          "version": "1.1.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|read-pkg@1.1.0|load-json-file@1.1.0",
          "author": "Sindre Sorhus",
          "description": "Read and parse a JSON file",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/load-json-file@1.1.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/load-json-file.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/load-json-file#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/load-json-file/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "956905708d58b4bab4c2261b04f59f31c99374c0"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/read-pkg/node_modules/load-json-file"
            }
          ]
        },
        {
          "type": "library",
          "name": "strip-bom",
          "version": "2.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|read-pkg@1.1.0|strip-bom@2.0.0",
          "author": "Sindre Sorhus",
          "description": "Strip UTF-8 byte order mark (BOM) from a string/buffer",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/strip-bom@2.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/strip-bom.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-bom#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/strip-bom/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "6219a85616520491f35788bdbf1447a99c7e6b0e"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/read-pkg/node_modules/strip-bom"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "through2",
      "version": "2.0.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|through2@2.0.3",
      "author": "Rod Vagg",
      "description": "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing noise",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/through2@2.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/rvagg/through2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/rvagg/through2#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/rvagg/through2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/through2/-/through2-2.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0004569b37c7c74ba39c43f3ced78d1ad94140be"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/through2"
        }
      ]
    },
    {
      "type": "library",
      "name": "typedarray",
      "version": "0.0.6",
      "bom-ref": "ssri@5.3.0-tuxcare.1|typedarray@0.0.6",
      "author": "James Halliday",
      "description": "TypedArray polyfill for old browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/typedarray@0.0.6",
      "externalReferences": [
        {
          "url": "git://github.com/substack/typedarray.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/typedarray",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/typedarray/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "867ac74e3864187b1d3d47d996a78ec5c8830777"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/typedarray"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-subset",
      "version": "0.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-subset@0.1.1",
      "author": "Tomek Wiszniewski",
      "description": "Check if an object is contained within another one",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-subset@0.1.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/studio-b12/is-subset.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/studio-b12/is-subset#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/studio-b12/is-subset/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-subset/-/is-subset-0.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8a59117d932de1de00f245fcdd39ce43f1e939a6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-subset"
        }
      ]
    },
    {
      "type": "library",
      "name": "modify-values",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|modify-values@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Modify the values of an object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/modify-values@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/modify-values.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/modify-values#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/modify-values/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/modify-values/-/modify-values-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e2b6cdeb9ce19f99317a53722f3dbf5df5eaaab2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/modify-values"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-text-path",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-text-path@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Check if a filepath is a text file",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-text-path@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-text-path.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-text-path#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-text-path/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-text-path/-/is-text-path-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4e1aa0fb51bfbcb3e92688001397202c1775b66e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-text-path"
        }
      ]
    },
    {
      "type": "library",
      "name": "JSONStream",
      "version": "1.3.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|JSONStream@1.3.2",
      "author": "Dominic Tarr",
      "description": "rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)",
      "licenses": [
        {
          "expression": "(MIT OR Apache-2.0)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/jsonstream@1.3.2",
      "externalReferences": [
        {
          "url": "git://github.com/dominictarr/JSONStream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/dominictarr/JSONStream",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dominictarr/JSONStream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/JSONStream/-/JSONStream-1.3.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c102371b6ec3a7cf3b847ca00c20bb0fce4c6dea"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/JSONStream"
        }
      ]
    },
    {
      "type": "library",
      "name": "split2",
      "version": "2.2.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|split2@2.2.0",
      "author": "Matteo Collina",
      "description": "split a Text Stream into a Line Stream, using Stream 3",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/split2@2.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mcollina/split2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mcollina/split2#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/mcollina/split2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/split2/-/split2-2.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "4406f6d931b7f4b848df531bade06022e2a220a855b1ac1f4e0106a8a1d32bceda1beba5fcf07c4aaa22dc8ee455d4568827eb2b12b7ba8e3f61492936f84f6f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/split2"
        }
      ]
    },
    {
      "type": "library",
      "name": "trim-off-newlines",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|trim-off-newlines@1.0.1",
      "author": "Steve Mao",
      "description": "Similar to String#trim() but removes only newlines",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/trim-off-newlines@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/trim-off-newlines.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/trim-off-newlines#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/trim-off-newlines/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/trim-off-newlines/-/trim-off-newlines-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9f9ba9d9efa8764c387698bcbfeb2c848f11adb3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/trim-off-newlines"
        }
      ]
    },
    {
      "type": "library",
      "name": "dargs",
      "version": "4.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|dargs@4.1.0",
      "author": "Sindre Sorhus",
      "description": "Reverse minimist. Convert an object of options into an array of command-line arguments.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/dargs@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/dargs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/dargs#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/dargs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/dargs/-/dargs-4.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "03a9dbb4b5c2f139bf14ae53f0b8a2a6a86f4e17"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/dargs"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.template",
      "version": "4.4.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|lodash.template@4.4.0",
      "author": "John-David Dalton",
      "description": "The lodash method `_.template` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.template@4.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.template/-/lodash.template-4.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e73a0385c8355591746e020b99679c690e68fba0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.template"
        }
      ]
    },
    {
      "type": "library",
      "name": "camelcase-keys",
      "version": "2.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|camelcase-keys@2.1.0",
      "author": "Sindre Sorhus",
      "description": "Convert object keys to camelCase",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/camelcase-keys@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/camelcase-keys.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/camelcase-keys#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/camelcase-keys/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "308beeaffdf28119051efa1d932213c91b8f92e7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/camelcase-keys"
        }
      ]
    },
    {
      "type": "library",
      "name": "loud-rejection",
      "version": "1.6.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|loud-rejection@1.6.0",
      "author": "Sindre Sorhus",
      "description": "Make unhandled promise rejections fail loudly instead of the default silent fail",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/loud-rejection@1.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/loud-rejection.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/loud-rejection#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/loud-rejection/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/loud-rejection/-/loud-rejection-1.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5b46f80147edee578870f086d04821cf998e551f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/loud-rejection"
        }
      ]
    },
    {
      "type": "library",
      "name": "map-obj",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|map-obj@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Map object keys and values into a new object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/map-obj@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/map-obj.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/map-obj#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/map-obj/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/map-obj/-/map-obj-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d933ceb9205d82bdcf4886f6742bdc2b4dea146d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/map-obj"
        }
      ]
    },
    {
      "type": "library",
      "name": "redent",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|redent@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Strip redundant indentation and indent the string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/redent@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/redent.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/redent#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/redent/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/redent/-/redent-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cf916ab1fd5f1f16dfb20822dd6ec7f730c2afde"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/redent"
        }
      ]
    },
    {
      "type": "library",
      "name": "trim-newlines",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|trim-newlines@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Trim newlines from the start and/or end of a string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/trim-newlines@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/trim-newlines.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/trim-newlines#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/trim-newlines/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/trim-newlines/-/trim-newlines-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5887966bb582a4503a41eb524f7d35011815a613"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/trim-newlines"
        }
      ]
    },
    {
      "type": "library",
      "name": "locate-path",
      "version": "2.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|locate-path@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Get the first path that exists on disk of multiple paths",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/locate-path@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/locate-path.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/locate-path#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/locate-path/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/locate-path/-/locate-path-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2b568b265eec944c6d9c0de9c3dbbbca0354cd8e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/locate-path"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "path-exists",
          "version": "3.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|locate-path@2.0.0|path-exists@3.0.0",
          "author": "Sindre Sorhus",
          "description": "Check if a path exists",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/path-exists@3.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/path-exists.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/path-exists#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/path-exists/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "ce0ebeaa5f78cb18925ea7d810d7b59b010fd515"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/locate-path/node_modules/path-exists"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "brace-expansion",
      "version": "1.1.8",
      "bom-ref": "ssri@5.3.0-tuxcare.1|brace-expansion@1.1.8",
      "author": "Julian Gruber",
      "description": "Brace expansion as known from sh/bash",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.8",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/brace-expansion.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/brace-expansion",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/brace-expansion/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c07b211c7c952ec1f8efd51a77ef0d1d3990a292"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/brace-expansion"
        }
      ]
    },
    {
      "type": "library",
      "name": "wrap-ansi",
      "version": "2.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|wrap-ansi@2.1.0",
      "author": "Sindre Sorhus",
      "description": "Wordwrap a string with ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/wrap-ansi@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/wrap-ansi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/wrap-ansi#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/wrap-ansi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d8fc3d284dd05794fe84973caecdd1cf824fdd85"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/wrap-ansi"
        }
      ]
    },
    {
      "type": "library",
      "name": "execa",
      "version": "0.7.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|execa@0.7.0",
      "author": "Sindre Sorhus",
      "description": "A better `child_process`",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/execa@0.7.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/execa.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/execa#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/execa/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/execa/-/execa-0.7.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "944becd34cc41ee32a63a9faf27ad5a65fc59777"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/execa"
        }
      ]
    },
    {
      "type": "library",
      "name": "lcid",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|lcid@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Mapping between standard locale identifiers and Windows locale identifiers (LCID)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lcid@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/lcid.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/lcid#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/lcid/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lcid/-/lcid-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "308accafa0bc483a3867b4b6f2b9506251d1b835"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lcid"
        }
      ]
    },
    {
      "type": "library",
      "name": "mem",
      "version": "1.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|mem@1.1.0",
      "author": "Sindre Sorhus",
      "description": "Memoize functions - An optimization used to speed up consecutive function calls by caching the result of calls with identical input",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mem@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/mem.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/mem#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/mem/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mem/-/mem-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5edd52b485ca1d900fe64895505399a0dfa45f76"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mem"
        }
      ]
    },
    {
      "type": "library",
      "name": "ms",
      "version": "2.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|ms@2.0.0",
      "description": "Tiny milisecond conversion utility",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ms@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/zeit/ms.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zeit/ms#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zeit/ms/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5608aeadfc00be6c2901df5f9861788de0d597c8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ms"
        }
      ]
    },
    {
      "type": "library",
      "name": "isarray",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|isarray@1.0.0",
      "author": "Julian Gruber",
      "description": "Array#isArray for older browsers",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/isarray.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/isarray",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/isarray/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bb935d48582cba168c06834957a54a3e07124f11"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/isarray"
        }
      ]
    },
    {
      "type": "library",
      "name": "pkg-dir",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|pkg-dir@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Find the root directory of a npm package",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pkg-dir@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/pkg-dir.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/pkg-dir#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/pkg-dir/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pkg-dir/-/pkg-dir-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7a4b508a8d5bb2d629d447056ff4e9c9314cf3d4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pkg-dir"
        }
      ]
    },
    {
      "type": "library",
      "name": "function-bind",
      "version": "1.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|function-bind@1.1.1",
      "author": "Raynos",
      "description": "Implementation of Function.prototype.bind",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/Raynos/function-bind.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Raynos/function-bind",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Raynos/function-bind/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c88a2f033317e3db05f18979f1f482589e6cbd22ee6a26cfc5740914b98139b4ee0abd0c7f52a23e8a4633d3621638980426df69ad8587a6eb790e803554c8d0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/function-bind"
        }
      ]
    },
    {
      "type": "library",
      "name": "find-up",
      "version": "1.1.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|find-up@1.1.2",
      "author": "Sindre Sorhus",
      "description": "Find a file by walking up parent directories",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/find-up@1.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/find-up.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/find-up#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/find-up/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6b2e9822b1a2ce0a60ab64d610eccad53cb24d0f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/find-up"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-parse",
      "version": "1.0.5",
      "bom-ref": "ssri@5.3.0-tuxcare.1|path-parse@1.0.5",
      "author": "Javier Blanco",
      "description": "Node.js path.parse() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/jbgutierrez/path-parse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jbgutierrez/path-parse#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jbgutierrez/path-parse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-parse/-/path-parse-1.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3c1adf871ea9cd6c9431b6ea2bd74a0ff055c4c1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-parse"
        }
      ]
    },
    {
      "type": "library",
      "name": "define-properties",
      "version": "1.1.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|define-properties@1.1.2",
      "author": "Jordan Harband",
      "description": "Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/define-properties@1.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/define-properties.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/define-properties#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/define-properties/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/define-properties/-/define-properties-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "83a73f2fea569898fb737193c8f873caf6d45c94"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/define-properties"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-abstract",
      "version": "1.10.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|es-abstract@1.10.0",
      "author": "Jordan Harband",
      "description": "ECMAScript spec abstract operations.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-abstract@1.10.0",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/es-abstract.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/es-abstract#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/es-abstract/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-abstract/-/es-abstract-1.10.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "fee87f0e176a20e4a401689f53ef271bbf2f950c5d2dc914748fec3e0cb4561b978b6a89ed3f1ccc19aa218b4b415a4220561a7c2867b11b01e69c9bd4976609"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-abstract"
        }
      ]
    },
    {
      "type": "library",
      "name": "has-symbols",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|has-symbols@1.0.0",
      "author": "Jordan Harband",
      "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/has-symbols@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/has-symbols.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/has-symbols#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/has-symbols/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ba1a8f1af2a0fc39650f5c850367704122063b44"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/has-symbols"
        }
      ]
    },
    {
      "type": "library",
      "name": "object-keys",
      "version": "1.0.11",
      "bom-ref": "ssri@5.3.0-tuxcare.1|object-keys@1.0.11",
      "author": "Jordan Harband",
      "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/object-keys@1.0.11",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/object-keys.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/object-keys#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/object-keys/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/object-keys/-/object-keys-1.0.11.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c54601778ad560f1142ce0e01bcca8b56d13426d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/object-keys"
        }
      ]
    },
    {
      "type": "library",
      "name": "js-tokens",
      "version": "3.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|js-tokens@3.0.2",
      "author": "Simon Lydell",
      "description": "A regex that tokenizes JavaScript.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/js-tokens@3.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/lydell/js-tokens.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/lydell/js-tokens#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lydell/js-tokens/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/js-tokens/-/js-tokens-3.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9866df395102130e38f7f996bceb65443209c25b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/js-tokens"
        }
      ]
    },
    {
      "type": "library",
      "name": "es6-map",
      "version": "0.1.5",
      "bom-ref": "ssri@5.3.0-tuxcare.1|es6-map@0.1.5",
      "author": "Mariusz Nowak",
      "description": "ECMAScript6 Map polyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es6-map@0.1.5",
      "externalReferences": [
        {
          "url": "git://github.com/medikoo/es6-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/es6-map#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/es6-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es6-map/-/es6-map-0.1.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9136e0503dcc06a301690f0bb14ff4e364e949f0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es6-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "es6-weak-map",
      "version": "2.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|es6-weak-map@2.0.2",
      "author": "Mariusz Nowak",
      "description": "ECMAScript6 WeakMap polyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es6-weak-map@2.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/medikoo/es6-weak-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/es6-weak-map#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/es6-weak-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es6-weak-map/-/es6-weak-map-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5e3ab32251ffd1538a1f8e5ffa1357772f92d96f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es6-weak-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "esrecurse",
      "version": "4.2.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|esrecurse@4.2.0",
      "description": "ECMAScript AST recursive visitor",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/esrecurse@4.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/estools/esrecurse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/estools/esrecurse",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/estools/esrecurse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/esrecurse/-/esrecurse-4.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fa9568d98d3823f9a41d91e902dcab9ea6e5b163"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/esrecurse"
        }
      ]
    },
    {
      "type": "library",
      "name": "acorn-jsx",
      "version": "3.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|acorn-jsx@3.0.1",
      "description": "Alternative, faster React.js JSX parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/acorn-jsx@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/RReverser/acorn-jsx.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/RReverser/acorn-jsx",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/RReverser/acorn-jsx/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/acorn-jsx/-/acorn-jsx-3.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "afdf9488fb1ecefc8348f6fb22f464e32a58b36b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/acorn-jsx"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "acorn",
          "version": "3.3.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|acorn-jsx@3.0.1|acorn@3.3.0",
          "description": "ECMAScript parser",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/acorn@3.3.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/ternjs/acorn.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/ternjs/acorn",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/ternjs/acorn/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/acorn/-/acorn-3.3.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "45e37fb39e8da3f25baee3ff5369e2bb5f22017a"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/acorn-jsx/node_modules/acorn"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "acorn",
      "version": "5.4.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|acorn@5.4.1",
      "description": "ECMAScript parser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/acorn@5.4.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/acornjs/acorn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/acornjs/acorn",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/acornjs/acorn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/acorn/-/acorn-5.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5cb9aadc7fc156f5bafc66f12abc86c56391cf579b8a54ac5039720b6edb5e1586580656906c12e852c78ce970157345a1615010efc37f8bb46187742b705081"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/acorn"
        }
      ]
    },
    {
      "type": "library",
      "name": "flat-cache",
      "version": "1.3.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|flat-cache@1.3.0",
      "author": "Roy Riojas",
      "description": "A stupidly simple key/value storage using files to persist some data",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/flat-cache@1.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/royriojas/flat-cache.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/royriojas/flat-cache#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/royriojas/flat-cache/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/flat-cache/-/flat-cache-1.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d3030b32b38154f4e3b7e9c709f490f7ef97c481"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/flat-cache"
        }
      ]
    },
    {
      "type": "library",
      "name": "ansi-escapes",
      "version": "1.4.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|ansi-escapes@1.4.0",
      "author": "Sindre Sorhus",
      "description": "ANSI escape codes for manipulating the terminal",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ansi-escapes@1.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/ansi-escapes.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/ansi-escapes#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/ansi-escapes/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ansi-escapes/-/ansi-escapes-1.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d3a8a83b319aa67793662b13e761c7911422306e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ansi-escapes"
        }
      ]
    },
    {
      "type": "library",
      "name": "cli-cursor",
      "version": "1.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|cli-cursor@1.0.2",
      "author": "Sindre Sorhus",
      "description": "Toggle the CLI cursor",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cli-cursor@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/cli-cursor.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/cli-cursor#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/cli-cursor/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cli-cursor/-/cli-cursor-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "64da3f7d56a54412e59794bd62dc35295e8f2987"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cli-cursor"
        }
      ]
    },
    {
      "type": "library",
      "name": "cli-width",
      "version": "2.2.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|cli-width@2.2.0",
      "author": "Ilya Radchenko",
      "description": "Get stdout window width, with two fallbacks, tty and then a default.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cli-width@2.2.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/knownasilya/cli-width.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/knownasilya/cli-width",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/knownasilya/cli-width/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cli-width/-/cli-width-2.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ff19ede8a9a5e579324147b0c11f0fbcbabed639"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cli-width"
        }
      ]
    },
    {
      "type": "library",
      "name": "readline2",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|readline2@1.0.1",
      "author": "Simon Boudrias",
      "description": "Readline Façade fixing bugs and issues found in releases 0.8 and 0.10",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/readline2@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/SBoudrias/readline2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/SBoudrias/readline2#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/SBoudrias/readline2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/readline2/-/readline2-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41059608ffc154757b715d9989d199ffbf372e35"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/readline2"
        }
      ]
    },
    {
      "type": "library",
      "name": "run-async",
      "version": "0.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|run-async@0.1.0",
      "author": "Simon Boudrias",
      "description": "Utility method to run function either synchronously or asynchronously using the common `this.async()` style.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/run-async@0.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/SBoudrias/run-async.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/SBoudrias/run-async",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/SBoudrias/run-async/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/run-async/-/run-async-0.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c8ad4a5e110661e402a7d21b530e009f25f8e389"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/run-async"
        }
      ]
    },
    {
      "type": "library",
      "name": "rx-lite",
      "version": "3.1.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|rx-lite@3.1.2",
      "author": "Cloud Programmability Team",
      "description": "Lightweight library for composing asynchronous and event-based operations in JavaScript",
      "licenses": [
        {
          "license": {
            "name": "Apache License, Version 2.0",
            "acknowledgement": "declared",
            "url": "http://www.apache.org/licenses/LICENSE-2.0.html"
          }
        }
      ],
      "purl": "pkg:npm/rx-lite@3.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/Reactive-Extensions/RxJS.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Reactive-Extensions/RxJS",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Reactive-Extensions/RxJS/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/rx-lite/-/rx-lite-3.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "19ce502ca572665f3b647b10939f97fd1615f102"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/rx-lite"
        }
      ]
    },
    {
      "type": "library",
      "name": "through",
      "version": "2.3.8",
      "bom-ref": "ssri@5.3.0-tuxcare.1|through@2.3.8",
      "author": "Dominic Tarr",
      "description": "simplified stream construction",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/through@2.3.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/dominictarr/through.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/dominictarr/through",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dominictarr/through/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/through/-/through-2.3.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/through"
        }
      ]
    },
    {
      "type": "library",
      "name": "generate-function",
      "version": "2.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|generate-function@2.0.0",
      "author": "Mathias Buus",
      "description": "Module that helps you write generated functions in Node",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/generate-function@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mafintosh/generate-function.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mafintosh/generate-function",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mafintosh/generate-function/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/generate-function/-/generate-function-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6858fe7c0969b7d4e9093337647ac79f60dfbe74"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/generate-function"
        }
      ]
    },
    {
      "type": "library",
      "name": "generate-object-property",
      "version": "1.2.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|generate-object-property@1.2.0",
      "author": "Mathias Buus",
      "description": "Generate safe JS code that can used to reference a object property",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/generate-object-property@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mafintosh/generate-object-property.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mafintosh/generate-object-property",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mafintosh/generate-object-property/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/generate-object-property/-/generate-object-property-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9c0e1c40308ce804f4783618b937fa88f99d50d0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/generate-object-property"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsonpointer",
      "version": "4.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|jsonpointer@4.0.1",
      "author": "Jan Lehnardt",
      "description": "Simple JSON Addressing.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsonpointer@4.0.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/janl/node-jsonpointer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/janl/node-jsonpointer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/janl/node-jsonpointer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsonpointer/-/jsonpointer-4.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4fd92cb34e0e9db3c89c8622ecf51f9b978c6cb9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsonpointer"
        }
      ]
    },
    {
      "type": "library",
      "name": "xtend",
      "version": "4.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|xtend@4.0.1",
      "author": "Raynos",
      "description": "extend like a boss",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/xtend@4.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/Raynos/xtend.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/Raynos/xtend",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/Raynos/xtend/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/xtend/-/xtend-4.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a5c6d532be656e23db820efb943a1f04998d63af"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/xtend"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsonify",
      "version": "0.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|jsonify@0.0.0",
      "author": "Douglas Crockford",
      "description": "JSON without touching any globals",
      "licenses": [
        {
          "license": {
            "name": "Public Domain",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsonify@0.0.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/substack/jsonify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/jsonify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/jsonify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsonify/-/jsonify-0.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2c74b6ee41d93ca51b7b5aaee8f503631d252a73"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsonify"
        }
      ]
    },
    {
      "type": "library",
      "name": "prelude-ls",
      "version": "1.1.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|prelude-ls@1.1.2",
      "author": "George Zahariev",
      "description": "prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://raw.github.com/gkz/prelude-ls/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/prelude-ls@1.1.2",
      "externalReferences": [
        {
          "url": "git://github.com/gkz/prelude-ls.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://preludels.com",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/gkz/prelude-ls/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/prelude-ls/-/prelude-ls-1.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "21932a549f5e52ffd9a827f570e04be62a97da54"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/prelude-ls"
        }
      ]
    },
    {
      "type": "library",
      "name": "type-check",
      "version": "0.3.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|type-check@0.3.2",
      "author": "George Zahariev",
      "description": "type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/type-check@0.3.2",
      "externalReferences": [
        {
          "url": "git://github.com/gkz/type-check.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/gkz/type-check",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/gkz/type-check/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/type-check/-/type-check-0.3.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5884cab512cf1d355e3fb784f30804b2b520db72"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/type-check"
        }
      ]
    },
    {
      "type": "library",
      "name": "deep-is",
      "version": "0.1.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|deep-is@0.1.3",
      "author": "Thorsten Lorenz",
      "description": "node's assert.deepEqual algorithm except for NaN being equal to NaN",
      "purl": "pkg:npm/deep-is@0.1.3",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/thlorenz/deep-is.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/thlorenz/deep-is#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/thlorenz/deep-is/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/deep-is/-/deep-is-0.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b369d6fb5dbc13eecf524f91b070feedc357cf34"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/deep-is"
        }
      ]
    },
    {
      "type": "library",
      "name": "fast-levenshtein",
      "version": "2.0.6",
      "bom-ref": "ssri@5.3.0-tuxcare.1|fast-levenshtein@2.0.6",
      "author": "Ramesh Nair",
      "description": "Efficient implementation of Levenshtein algorithm  with locale-specific collator support.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/fast-levenshtein@2.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/hiddentao/fast-levenshtein.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hiddentao/fast-levenshtein#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hiddentao/fast-levenshtein/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3d8a5c66883a16a30ca8643e851f19baa7797917"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/fast-levenshtein"
        }
      ]
    },
    {
      "type": "library",
      "name": "wordwrap",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|wordwrap@1.0.0",
      "author": "James Halliday",
      "description": "Wrap those words. Show them at what columns to start and stop.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/substack/node-wordwrap.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-wordwrap#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-wordwrap/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "27584810891456a4171c8d0226441ade90cbcaeb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/wordwrap"
        }
      ]
    },
    {
      "type": "library",
      "name": "caller-path",
      "version": "0.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|caller-path@0.1.0",
      "author": "Sindre Sorhus",
      "description": "Get the path of the caller module",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/caller-path@0.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/caller-path.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/caller-path#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/caller-path/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/caller-path/-/caller-path-0.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "94085ef63581ecd3daa92444a8fe94e82577751f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/caller-path"
        }
      ]
    },
    {
      "type": "library",
      "name": "resolve-from",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|resolve-from@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Resolve the path of a module like require.resolve() but from a given path",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/resolve-from@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/resolve-from.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/resolve-from#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/resolve-from/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/resolve-from/-/resolve-from-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "26cbfe935d1aeeeabb29bc3fe5aeb01e93d44226"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/resolve-from"
        }
      ]
    },
    {
      "type": "library",
      "name": "interpret",
      "version": "1.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|interpret@1.1.0",
      "author": "Tyler Kellen",
      "description": "A dictionary of file extensions and associated module loaders.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/interpret@1.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/tkellen/node-interpret.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tkellen/node-interpret",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tkellen/node-interpret/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/interpret/-/interpret-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7ed1b1410c6a0e0f78cf95d3b8440c63f78b8614"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/interpret"
        }
      ]
    },
    {
      "type": "library",
      "name": "rechoir",
      "version": "0.6.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|rechoir@0.6.2",
      "author": "Tyler Kellen",
      "description": "Require any supported file as a node module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/tkellen/node-rechoir/blob/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/rechoir@0.6.2",
      "externalReferences": [
        {
          "url": "git://github.com/tkellen/node-rechoir.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tkellen/node-rechoir",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tkellen/node-rechoir/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/rechoir/-/rechoir-0.6.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "85204b54dba82d5742e28c96756ef43af50e3384"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/rechoir"
        }
      ]
    },
    {
      "type": "library",
      "name": "ajv-keywords",
      "version": "1.5.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|ajv-keywords@1.5.1",
      "author": "Evgeny Poberezkin",
      "description": "Custom JSON-Schema keywords for ajv validator",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ajv-keywords@1.5.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/epoberezkin/ajv-keywords.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/epoberezkin/ajv-keywords#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/epoberezkin/ajv-keywords/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ajv-keywords/-/ajv-keywords-1.5.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "314dd0a4b3368fad3dfcdc54ede6171b886daf3c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ajv-keywords"
        }
      ]
    },
    {
      "type": "library",
      "name": "ajv",
      "version": "4.11.8",
      "bom-ref": "ssri@5.3.0-tuxcare.1|ajv@4.11.8",
      "author": "Evgeny Poberezkin",
      "description": "Another JSON Schema Validator",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ajv@4.11.8",
      "externalReferences": [
        {
          "url": "git+https://github.com/epoberezkin/ajv.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/epoberezkin/ajv",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/epoberezkin/ajv/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ajv/-/ajv-4.11.8.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "82ffb02b29e662ae53bdc20af15947706739c536"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ajv"
        }
      ]
    },
    {
      "type": "library",
      "name": "slice-ansi",
      "version": "0.0.4",
      "bom-ref": "ssri@5.3.0-tuxcare.1|slice-ansi@0.0.4",
      "author": "David Caccavella",
      "description": "Slice a string with ANSI escape codes",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/slice-ansi@0.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/chalk/slice-ansi.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/chalk/slice-ansi#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/chalk/slice-ansi/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/slice-ansi/-/slice-ansi-0.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "edbf8903f66f7ce2f8eafd6ceed65e264c831b35"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/slice-ansi"
        }
      ]
    },
    {
      "type": "library",
      "name": "find-root",
      "version": "1.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|find-root@1.1.0",
      "author": "jsdnxx",
      "description": "find the closest package.json",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/find-root@1.1.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/js-n/find-root.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/js-n/find-root#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/js-n/find-root/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/find-root/-/find-root-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "34a7d6e9b79ce867ca734486c757b4ed0658f4f13df6ed017edff4af3483e64dec3bfbf09155290d42959b91a9a7951edd87d284f1535f6d3bd2d0ece6407d36"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/find-root"
        }
      ]
    },
    {
      "type": "library",
      "name": "pkg-config",
      "version": "1.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|pkg-config@1.1.1",
      "author": "Ahmad Nassri",
      "description": "parse the closest `package.json` and get package specific configurations",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pkg-config@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/ahmadnassri/pkg-config.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ahmadnassri/pkg-config",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ahmadnassri/pkg-config/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pkg-config/-/pkg-config-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "557ef22d73da3c8837107766c52eadabde298fe4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pkg-config"
        }
      ]
    },
    {
      "type": "library",
      "name": "run-parallel",
      "version": "1.1.6",
      "bom-ref": "ssri@5.3.0-tuxcare.1|run-parallel@1.1.6",
      "author": "Feross Aboukhadijeh",
      "description": "Run an array of functions in parallel",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/run-parallel@1.1.6",
      "externalReferences": [
        {
          "url": "git://github.com/feross/run-parallel.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/run-parallel",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/run-parallel/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/run-parallel/-/run-parallel-1.1.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "29003c9a2163e01e2d2dfc90575f2c6c1d61a039"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/run-parallel"
        }
      ]
    },
    {
      "type": "library",
      "name": "uniq",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|uniq@1.0.1",
      "author": "Mikola Lysenko",
      "description": "Removes duplicates from a sorted array in place",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/uniq@1.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/mikolalysenko/uniq.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mikolalysenko/uniq#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mikolalysenko/uniq/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/uniq/-/uniq-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b31c5ae8254844a3a8281541ce2b04b865a734ff"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/uniq"
        }
      ]
    },
    {
      "type": "library",
      "name": "load-json-file",
      "version": "4.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|load-json-file@4.0.0",
      "author": "Sindre Sorhus",
      "description": "Read and parse a JSON file",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/load-json-file@4.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/load-json-file.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/load-json-file#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/load-json-file/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/load-json-file/-/load-json-file-4.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2f5f45ab91e33216234fd53adab668eb4ec0993b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/load-json-file"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "parse-json",
          "version": "4.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|load-json-file@4.0.0|parse-json@4.0.0",
          "author": "Sindre Sorhus",
          "description": "Parse JSON with more helpful errors",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/parse-json@4.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/parse-json.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/parse-json#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/parse-json/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/parse-json/-/parse-json-4.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "be35f5425be1f7f6c747184f98a788cb99477ee0"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/load-json-file/node_modules/parse-json"
            }
          ]
        },
        {
          "type": "library",
          "name": "pify",
          "version": "3.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|load-json-file@4.0.0|pify@3.0.0",
          "author": "Sindre Sorhus",
          "description": "Promisify a callback-style function",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/pify@3.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/pify.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/pify#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/pify/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/pify/-/pify-3.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "e5a4acd2c101fdf3d9a4d07f0dbc4db49dd28176"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/load-json-file/node_modules/pify"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "aws-sign2",
      "version": "0.6.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|aws-sign2@0.6.0",
      "author": "Mikeal Rogers",
      "description": "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor in request, now a standalone module.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/aws-sign2@0.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mikeal/aws-sign.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mikeal/aws-sign#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mikeal/aws-sign/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "14342dd38dbcc94d0e5b87d763cd63612c0e794f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/aws-sign2"
        }
      ]
    },
    {
      "type": "library",
      "name": "aws4",
      "version": "1.6.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|aws4@1.6.0",
      "author": "Michael Hart",
      "description": "Signs and prepares requests using AWS Signature Version 4",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/aws4@1.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mhart/aws4.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mhart/aws4#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mhart/aws4/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/aws4/-/aws4-1.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "83ef5ca860b2b32e4a0deedee8c771b9db57471e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/aws4"
        }
      ]
    },
    {
      "type": "library",
      "name": "caseless",
      "version": "0.11.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|caseless@0.11.0",
      "author": "Mikeal Rogers",
      "description": "Caseless object set/get/has, very useful when working with HTTP headers.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/caseless@0.11.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mikeal/caseless.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mikeal/caseless#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mikeal/caseless/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/caseless/-/caseless-0.11.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "715b96ea9841593cc33067923f5ec60ebda4f7d7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/caseless"
        }
      ]
    },
    {
      "type": "library",
      "name": "combined-stream",
      "version": "1.0.5",
      "bom-ref": "ssri@5.3.0-tuxcare.1|combined-stream@1.0.5",
      "author": "Felix Geisendörfer",
      "description": "A stream that emits multiple other streams one after another.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/combined-stream@1.0.5",
      "externalReferences": [
        {
          "url": "git://github.com/felixge/node-combined-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/felixge/node-combined-stream",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/felixge/node-combined-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "938370a57b4a51dea2c77c15d5c5fdf895164009"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/combined-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "extend",
      "version": "3.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|extend@3.0.1",
      "author": "Stefan Thomas",
      "description": "Port of jQuery.extend for node.js and the browser",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/extend@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/justmoon/node-extend.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/justmoon/node-extend#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/justmoon/node-extend/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/extend/-/extend-3.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a755ea7bc1adfcc5a31ce7e762dbaadc5e636444"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/extend"
        }
      ]
    },
    {
      "type": "library",
      "name": "forever-agent",
      "version": "0.6.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|forever-agent@0.6.1",
      "author": "Mikeal Rogers",
      "description": "HTTP Agent that keeps socket connections alive between keep-alive requests. Formerly part of mikeal/request, now a standalone module.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/forever-agent@0.6.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/mikeal/forever-agent.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mikeal/forever-agent#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mikeal/forever-agent/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/forever-agent"
        }
      ]
    },
    {
      "type": "library",
      "name": "form-data",
      "version": "2.1.4",
      "bom-ref": "ssri@5.3.0-tuxcare.1|form-data@2.1.4",
      "author": "Felix Geisendörfer",
      "description": "A library to create readable \"multipart/form-data\" streams. Can be used to submit forms and file uploads to other web applications.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/form-data@2.1.4",
      "externalReferences": [
        {
          "url": "git://github.com/form-data/form-data.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/form-data/form-data#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/form-data/form-data/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/form-data/-/form-data-2.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "33c183acf193276ecaa98143a69e94bfee1750d1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/form-data"
        }
      ]
    },
    {
      "type": "library",
      "name": "har-validator",
      "version": "2.0.6",
      "bom-ref": "ssri@5.3.0-tuxcare.1|har-validator@2.0.6",
      "author": "Ahmad Nassri",
      "description": "Extremely fast HTTP Archive (HAR) validator using JSON Schema",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/har-validator@2.0.6",
      "externalReferences": [
        {
          "url": "git+https://github.com/ahmadnassri/har-validator.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ahmadnassri/har-validator",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ahmadnassri/har-validator/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/har-validator/-/har-validator-2.0.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cdcbc08188265ad119b6a5a7c8ab70eecfb5d27d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/har-validator"
        }
      ]
    },
    {
      "type": "library",
      "name": "hawk",
      "version": "3.1.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|hawk@3.1.3",
      "author": "Eran Hammer",
      "description": "HTTP Hawk Authentication Scheme",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hawk@3.1.3",
      "externalReferences": [
        {
          "url": "git://github.com/hueniverse/hawk.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hueniverse/hawk#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hueniverse/hawk/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hawk/-/hawk-3.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "078444bd7c1640b0fe540d2c9b73d59678e8e1c4"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hawk"
        }
      ]
    },
    {
      "type": "library",
      "name": "http-signature",
      "version": "1.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|http-signature@1.1.1",
      "author": "Joyent, Inc",
      "description": "Reference implementation of Joyent's HTTP Signature scheme.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/http-signature@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/joyent/node-http-signature.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/joyent/node-http-signature/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/joyent/node-http-signature/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/http-signature/-/http-signature-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "df72e267066cd0ac67fb76adf8e134a8fbcf91bf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/http-signature"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-typedarray",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-typedarray@1.0.0",
      "author": "Hugh Kennedy",
      "description": "Detect whether or not an object is a Typed Array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-typedarray@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/hughsk/is-typedarray.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hughsk/is-typedarray",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hughsk/is-typedarray/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e479c80858df0c1b11ddda6940f96011fcda4a9a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-typedarray"
        }
      ]
    },
    {
      "type": "library",
      "name": "isstream",
      "version": "0.1.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|isstream@0.1.2",
      "author": "Rod Vagg",
      "description": "Determine if an object is a Stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/isstream@0.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/rvagg/isstream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/rvagg/isstream",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/rvagg/isstream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "47e63f7af55afa6f92e1500e690eb8b8529c099a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/isstream"
        }
      ]
    },
    {
      "type": "library",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|json-stringify-safe@5.0.1",
      "author": "Isaac Z. Schlueter",
      "description": "Like JSON.stringify, but doesn't blow up on circular refs.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/json-stringify-safe.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/json-stringify-safe",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/json-stringify-safe/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/json-stringify-safe"
        }
      ]
    },
    {
      "type": "library",
      "name": "mime-types",
      "version": "2.1.17",
      "bom-ref": "ssri@5.3.0-tuxcare.1|mime-types@2.1.17",
      "description": "The ultimate javascript content-type utility.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mime-types@2.1.17",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/mime-types.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/mime-types#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/mime-types/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mime-types/-/mime-types-2.1.17.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "09d7a393f03e995a79f8af857b70a9e0ab16557a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mime-types"
        }
      ]
    },
    {
      "type": "library",
      "name": "oauth-sign",
      "version": "0.8.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|oauth-sign@0.8.2",
      "author": "Mikeal Rogers",
      "description": "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone module.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/oauth-sign@0.8.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/mikeal/oauth-sign.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mikeal/oauth-sign#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mikeal/oauth-sign/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.8.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "46a6ab7f0aead8deae9ec0565780b7d4efeb9d43"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/oauth-sign"
        }
      ]
    },
    {
      "type": "library",
      "name": "qs",
      "version": "6.3.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|qs@6.3.2",
      "description": "A querystring parser that supports nesting and arrays, with a depth limit",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/qs@6.3.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ljharb/qs.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/qs",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/qs/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/qs/-/qs-6.3.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e75bd5f6e268122a2a0e0bda630b2550c166502c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/qs"
        }
      ]
    },
    {
      "type": "library",
      "name": "stringstream",
      "version": "0.0.5",
      "bom-ref": "ssri@5.3.0-tuxcare.1|stringstream@0.0.5",
      "author": "Michael Hart",
      "description": "Encode and decode streams into string streams",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/stringstream@0.0.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/mhart/StringStream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mhart/StringStream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mhart/StringStream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/stringstream/-/stringstream-0.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4e484cd4de5a0bbbee18e46307710a8a81621878"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/stringstream"
        }
      ]
    },
    {
      "type": "library",
      "name": "tough-cookie",
      "version": "2.3.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|tough-cookie@2.3.3",
      "author": "Jeremy Stashewsky",
      "description": "RFC6265 Cookies and Cookie Jar for node.js",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tough-cookie@2.3.3",
      "externalReferences": [
        {
          "url": "git://github.com/salesforce/tough-cookie.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/salesforce/tough-cookie",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/salesforce/tough-cookie/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.3.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0b618a5565b6dea90bf3425d04d55edc475a7561"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tough-cookie"
        }
      ]
    },
    {
      "type": "library",
      "name": "tunnel-agent",
      "version": "0.4.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|tunnel-agent@0.4.3",
      "author": "Mikeal Rogers",
      "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tunnel-agent@0.4.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/mikeal/tunnel-agent.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mikeal/tunnel-agent#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mikeal/tunnel-agent/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.4.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6373db76909fe570e08d73583365ed828a74eeeb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tunnel-agent"
        }
      ]
    },
    {
      "type": "library",
      "name": "uuid",
      "version": "3.2.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|uuid@3.2.1",
      "description": "RFC4122 (v1, v4, and v5) UUIDs",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/uuid@3.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/kelektiv/node-uuid.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kelektiv/node-uuid#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kelektiv/node-uuid/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/uuid/-/uuid-3.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8d99ccc256fd224bbf3b7b26196bd985ab827fa72fbe92a2e012918a5892ddcc6723e1b3f63e4c1294f3d9416e5e228f26871bee09ec2c7c224b4e6281ee4110"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/uuid"
        }
      ]
    },
    {
      "type": "library",
      "name": "lru-cache",
      "version": "4.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|lru-cache@4.1.1",
      "author": "Isaac Z. Schlueter",
      "description": "A cache object that deletes the least-recently-used items.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@4.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-lru-cache.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/node-lru-cache#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/node-lru-cache/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lru-cache/-/lru-cache-4.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "ab8b297b82937ec012d525072ced30cfc422c9fd7ebcc2008294588a81580cc36a29f1d06e0f805431f78b87efa65ef5fcfd4bd1d065f9f422f8fdfb5187f47b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lru-cache"
        }
      ]
    },
    {
      "type": "library",
      "name": "which",
      "version": "1.3.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|which@1.3.0",
      "author": "Isaac Z. Schlueter",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/which@1.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/node-which.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/node-which#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/node-which/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/which/-/which-1.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c5c269a2975a993b98e5db82fca9d34cd06b68f2b9e18c297a73f8973c54f07f751ae756a45bf7f2ed022a37251355a2d841f6103cf92d170770a6c2233a86ca"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/which"
        }
      ]
    },
    {
      "type": "library",
      "name": "wrappy",
      "version": "1.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|wrappy@1.0.2",
      "author": "Isaac Z. Schlueter",
      "description": "Callback wrapping utility",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/npm/wrappy.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/npm/wrappy",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/npm/wrappy/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/wrappy"
        }
      ]
    },
    {
      "type": "library",
      "name": "sprintf-js",
      "version": "1.0.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|sprintf-js@1.0.3",
      "author": "Alexandru Marasteanu",
      "description": "JavaScript sprintf implementation",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/alexei/sprintf.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/alexei/sprintf.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/alexei/sprintf.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "04e6926f662895354f3dd015203633b857297e2c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/sprintf-js"
        }
      ]
    },
    {
      "type": "library",
      "name": "core-util-is",
      "version": "1.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|core-util-is@1.0.2",
      "author": "Isaac Z. Schlueter",
      "description": "The `util.is*` functions introduced in Node v0.12.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/core-util-is.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/core-util-is#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/core-util-is/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b5fd54220aa2bc5ab57aab7140c940754503c1a7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/core-util-is"
        }
      ]
    },
    {
      "type": "library",
      "name": "process-nextick-args",
      "version": "1.0.7",
      "bom-ref": "ssri@5.3.0-tuxcare.1|process-nextick-args@1.0.7",
      "description": "process.nextTick but always with args",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/process-nextick-args@1.0.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/calvinmetcalf/process-nextick-args.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/calvinmetcalf/process-nextick-args",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/calvinmetcalf/process-nextick-args/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-1.0.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "150e20b756590ad3f91093f25a4f2ad8bff30ba3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/process-nextick-args"
        }
      ]
    },
    {
      "type": "library",
      "name": "string_decoder",
      "version": "1.0.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|string_decoder@1.0.3",
      "description": "The string_decoder module from Node core",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/rvagg/string_decoder.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/rvagg/string_decoder",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/rvagg/string_decoder/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "e001fa6797f334d05c1fee970cc7c0fc14edf3bb24c6a2653b49408770e47abe734e1700c46ea62b3fa21aedf4f142a83cf43c0dcab1ff8261ba3ce5b516be85"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/string_decoder"
        }
      ]
    },
    {
      "type": "library",
      "name": "util-deprecate",
      "version": "1.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|util-deprecate@1.0.2",
      "author": "Nathan Rajlich",
      "description": "The Node.js `util.deprecate()` function with browser support",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/TooTallNate/util-deprecate.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/TooTallNate/util-deprecate",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/TooTallNate/util-deprecate/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "450d4dc9fa70de732762fbd2d4a28981419a0ccf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/util-deprecate"
        }
      ]
    },
    {
      "type": "library",
      "name": "punycode",
      "version": "1.4.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|punycode@1.4.1",
      "author": "Mathias Bynens",
      "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/punycode@1.4.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/bestiejs/punycode.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://mths.be/punycode",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/bestiejs/punycode.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c0d5a63b2718800ad8e1eb0fa5269c84dd41845e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/punycode"
        }
      ]
    },
    {
      "type": "library",
      "name": "code-point-at",
      "version": "1.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|code-point-at@1.1.0",
      "author": "Sindre Sorhus",
      "description": "ES2015 `String#codePointAt()` ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/code-point-at@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/code-point-at.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/code-point-at#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/code-point-at/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/code-point-at/-/code-point-at-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/code-point-at"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-fullwidth-code-point",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-fullwidth-code-point@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Check if the character represented by a given Unicode code point is fullwidth",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-fullwidth-code-point.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-fullwidth-code-point#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-fullwidth-code-point/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ef9e31386f031a7f0d643af82fde50c457ef00cb"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-fullwidth-code-point"
        }
      ]
    },
    {
      "type": "library",
      "name": "array-ify",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|array-ify@1.0.0",
      "author": "Steve Mao",
      "description": "Turn anything into an array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/array-ify@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/stevemao/array-ify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/stevemao/array-ify",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/stevemao/array-ify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/array-ify/-/array-ify-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9e528762b4a9066ad163a6962a364418e9626ece"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/array-ify"
        }
      ]
    },
    {
      "type": "library",
      "name": "dot-prop",
      "version": "3.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|dot-prop@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Get, set, or delete a property from a nested object using a dot path",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/dot-prop@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/dot-prop.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/dot-prop#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/dot-prop/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/dot-prop/-/dot-prop-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1b708af094a49c9a0e7dbcad790aba539dac1177"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/dot-prop"
        }
      ]
    },
    {
      "type": "library",
      "name": "handlebars",
      "version": "4.0.11",
      "bom-ref": "ssri@5.3.0-tuxcare.1|handlebars@4.0.11",
      "author": "Yehuda Katz",
      "description": "Handlebars provides the power necessary to let you build semantic templates effectively with no frustration",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/handlebars@4.0.11",
      "externalReferences": [
        {
          "url": "git+https://github.com/wycats/handlebars.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://www.handlebarsjs.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/wycats/handlebars.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/handlebars/-/handlebars-4.0.11.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "630a35dfe0294bc281edae6ffc5d329fc7982dcc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/handlebars"
        }
      ]
    },
    {
      "type": "library",
      "name": "split",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|split@1.0.1",
      "author": "Dominic Tarr",
      "description": "split a Text Stream into a Line Stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/split@1.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/dominictarr/split.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/dominictarr/split",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dominictarr/split/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/split/-/split-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "993c8ea0f6eb8afb579f09c8c59445611acf36d1052a5a41d9fbe34a7090522000eaa019ceac276b97a7bcae2e93a38878fd7b0ac745deb481198541b14d1392"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/split"
        }
      ]
    },
    {
      "type": "library",
      "name": "parse-github-repo-url",
      "version": "1.4.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|parse-github-repo-url@1.4.1",
      "author": "Jonathan Ong",
      "description": "Parse a GitHub URL for user/project@version",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/parse-github-repo-url@1.4.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/repo-utils/parse-github-repo-url.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/repo-utils/parse-github-repo-url#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/repo-utils/parse-github-repo-url/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/parse-github-repo-url/-/parse-github-repo-url-1.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9e7d8bb252a6cb6ba42595060b7bf6df3dbc1f50"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/parse-github-repo-url"
        }
      ]
    },
    {
      "type": "library",
      "name": "gitconfiglocal",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|gitconfiglocal@1.0.0",
      "author": "Ryan Day",
      "description": "parse the .git/config file into a useful data structure",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/gitconfiglocal@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/soldair/node-gitconfiglocal.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/soldair/node-gitconfiglocal#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/soldair/node-gitconfiglocal/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/gitconfiglocal/-/gitconfiglocal-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "41d045f3851a5ea88f03f24ca1c6178114464b9b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/gitconfiglocal"
        }
      ]
    },
    {
      "type": "library",
      "name": "pify",
      "version": "2.3.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|pify@2.3.0",
      "author": "Sindre Sorhus",
      "description": "Promisify a callback-style function",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pify@2.3.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/pify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/pify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/pify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ed141a6ac043a849ea588498e7dca8b15330e90c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pify"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-builtin-module",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-builtin-module@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Check if a string matches the name of a Node.js builtin module",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-builtin-module@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-builtin-module.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-builtin-module#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-builtin-module/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-builtin-module/-/is-builtin-module-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "540572d34f7ac3119f8f76c30cbc1b1e037affbe"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-builtin-module"
        }
      ]
    },
    {
      "type": "library",
      "name": "validate-npm-package-license",
      "version": "3.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|validate-npm-package-license@3.0.1",
      "author": "Kyle E. Mitchell",
      "description": "Give me a string and I'll tell you if it's a valid npm package license string",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/validate-npm-package-license@3.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/kemitchell/validate-npm-package-license.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kemitchell/validate-npm-package-license.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kemitchell/validate-npm-package-license.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2804babe712ad3379459acfbe24746ab2c303fbc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/validate-npm-package-license"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-type",
      "version": "1.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|path-type@1.1.0",
      "author": "Sindre Sorhus",
      "description": "Check if a path is a file, directory, or symlink",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-type@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/path-type.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/path-type#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/path-type/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-type/-/path-type-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "59c44f7ee491da704da415da5a4070ba4f8fe441"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-type"
        }
      ]
    },
    {
      "type": "library",
      "name": "text-extensions",
      "version": "1.7.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|text-extensions@1.7.0",
      "author": "Sindre Sorhus",
      "description": "List of text file extensions",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/text-extensions@1.7.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/text-extensions.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/text-extensions#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/text-extensions/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/text-extensions/-/text-extensions-1.7.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "00a5d9783ab6df451a4b368ee6cdea41464e682ee229bcead233852fad7847b77d479f771cba8038bd1c628a8b76436b8c148e766a10234eb28a0ab54d205702"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/text-extensions"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsonparse",
      "version": "1.3.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|jsonparse@1.3.1",
      "author": "Tim Caswell",
      "description": "This is a pure-js JSON streaming parser for node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsonparse@1.3.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/creationix/jsonparse.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/creationix/jsonparse#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "http://github.com/creationix/jsonparse/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsonparse/-/jsonparse-1.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3f4dae4a91fac315f71062f8521cc239f1366280"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsonparse"
        }
      ]
    },
    {
      "type": "library",
      "name": "number-is-nan",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|number-is-nan@1.0.1",
      "author": "Sindre Sorhus",
      "description": "ES2015 Number.isNaN() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/number-is-nan@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/number-is-nan.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/number-is-nan#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/number-is-nan/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "097b602b53422a522c1afb8790318336941a011d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/number-is-nan"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash._reinterpolate",
      "version": "3.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|lodash._reinterpolate@3.0.0",
      "author": "John-David Dalton",
      "description": "The modern build of lodash’s internal `reInterpolate` as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash._reinterpolate@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash._reinterpolate/-/lodash._reinterpolate-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0ccf2d89166af03b3663c796538b75ac6e114d9d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash._reinterpolate"
        }
      ]
    },
    {
      "type": "library",
      "name": "lodash.templatesettings",
      "version": "4.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|lodash.templatesettings@4.1.0",
      "author": "John-David Dalton",
      "description": "The lodash method `_.templateSettings` exported as a module.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lodash.templatesettings@4.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/lodash/lodash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://lodash.com/",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/lodash/lodash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lodash.templatesettings/-/lodash.templatesettings-4.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2b4d4e95ba440d915ff08bc899e4553666713316"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lodash.templatesettings"
        }
      ]
    },
    {
      "type": "library",
      "name": "camelcase",
      "version": "2.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|camelcase@2.1.1",
      "author": "Sindre Sorhus",
      "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/camelcase@2.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/camelcase.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/camelcase#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/camelcase/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/camelcase/-/camelcase-2.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "7c1d16d679a1bbe59ca02cacecfb011e201f5a1f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/camelcase"
        }
      ]
    },
    {
      "type": "library",
      "name": "currently-unhandled",
      "version": "0.4.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|currently-unhandled@0.4.1",
      "author": "James Talmage",
      "description": "Track the list of currently unhandled promise rejections.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/currently-unhandled@0.4.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jamestalmage/currently-unhandled.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jamestalmage/currently-unhandled#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jamestalmage/currently-unhandled/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/currently-unhandled/-/currently-unhandled-0.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "988df33feab191ef799a61369dd76c17adf957ea"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/currently-unhandled"
        }
      ]
    },
    {
      "type": "library",
      "name": "indent-string",
      "version": "2.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|indent-string@2.1.0",
      "author": "Sindre Sorhus",
      "description": "Indent each line in a string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/indent-string@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/indent-string.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/indent-string#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/indent-string/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/indent-string/-/indent-string-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8e2d48348742121b4a8218b7a137e9a52049dc80"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/indent-string"
        }
      ]
    },
    {
      "type": "library",
      "name": "strip-indent",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|strip-indent@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Strip leading whitespace from every line in a string",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/strip-indent@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/strip-indent.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-indent#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-indent/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/strip-indent/-/strip-indent-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0c7962a6adefa7bbd4ac366460a638552ae1a0a2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/strip-indent"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "get-stdin",
          "version": "4.0.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|strip-indent@1.0.1|get-stdin@4.0.1",
          "author": "Sindre Sorhus",
          "description": "Easier stdin",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/get-stdin@4.0.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/get-stdin.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/get-stdin#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/get-stdin/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/get-stdin/-/get-stdin-4.0.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "b968c6b0a04384324902e8bf1a5df32579a450fe"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/strip-indent/node_modules/get-stdin"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "p-locate",
      "version": "2.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|p-locate@2.0.0",
      "author": "Sindre Sorhus",
      "description": "Get the first fulfilled promise that satisfies the provided testing function",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-locate@2.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-locate.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-locate#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-locate/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-locate/-/p-locate-2.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "20a0103b222a70c8fd39cc2e580680f3dde5ec43"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-locate"
        }
      ]
    },
    {
      "type": "library",
      "name": "balanced-match",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|balanced-match@1.0.0",
      "author": "Julian Gruber",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/juliangruber/balanced-match.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/juliangruber/balanced-match",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/juliangruber/balanced-match/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "89b4d199ab2bee49de164ea02b89ce462d71b767"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/balanced-match"
        }
      ]
    },
    {
      "type": "library",
      "name": "concat-map",
      "version": "0.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|concat-map@0.0.1",
      "author": "James Halliday",
      "description": "concatenative mapdashery",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/substack/node-concat-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-concat-map#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-concat-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d8a96bd77fd68df7793a73036a3ba0d5405d477b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/concat-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "cross-spawn",
      "version": "5.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|cross-spawn@5.1.0",
      "author": "IndigoUnited",
      "description": "Cross platform child_process#spawn and child_process#spawnSync",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cross-spawn@5.1.0",
      "externalReferences": [
        {
          "url": "git://github.com/IndigoUnited/node-cross-spawn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/IndigoUnited/node-cross-spawn#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/IndigoUnited/node-cross-spawn/issues/",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "e8bd0efee58fcff6f8f94510a0a554bbfa235449"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cross-spawn"
        }
      ]
    },
    {
      "type": "library",
      "name": "get-stream",
      "version": "3.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|get-stream@3.0.0",
      "author": "Sindre Sorhus",
      "description": "Get a stream as a string, buffer, or array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/get-stream@3.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/get-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/get-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/get-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-3.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8e943d1358dc37555054ecbe2edb05aa174ede14"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/get-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-stream",
      "version": "1.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-stream@1.1.0",
      "author": "Sindre Sorhus",
      "description": "Check if something is a Node.js stream",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-stream@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "12d4a3dd4e68e0b79ceb8dbc84173ae80d91ca44"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "npm-run-path",
      "version": "2.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|npm-run-path@2.0.2",
      "author": "Sindre Sorhus",
      "description": "Get your PATH prepended with locally installed binaries",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/npm-run-path@2.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/npm-run-path.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/npm-run-path#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/npm-run-path/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/npm-run-path/-/npm-run-path-2.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "35a9232dfa35d7067b4cb2ddf2357b1871536c5f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/npm-run-path"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-finally",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|p-finally@1.0.0",
      "author": "Sindre Sorhus",
      "description": "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-finally@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-finally.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-finally#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-finally/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3fbcfb15b899a44123b34b6dcc18b724336a2cae"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-finally"
        }
      ]
    },
    {
      "type": "library",
      "name": "strip-eof",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|strip-eof@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Strip the End-Of-File (EOF) character from a string/buffer",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/strip-eof@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/strip-eof.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-eof#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/strip-eof/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/strip-eof/-/strip-eof-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bb43ff5598a6eb05d89b59fcd129c983313606bf"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/strip-eof"
        }
      ]
    },
    {
      "type": "library",
      "name": "invert-kv",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|invert-kv@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Invert the key/value of an object. Example: {foo: 'bar'} → {bar: 'foo'}",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/invert-kv@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/invert-kv.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/invert-kv#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/invert-kv/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/invert-kv/-/invert-kv-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "104a8e4aaca6d3d8cd157a8ef8bfab2d7a3ffdb6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/invert-kv"
        }
      ]
    },
    {
      "type": "library",
      "name": "mimic-fn",
      "version": "1.2.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|mimic-fn@1.2.0",
      "author": "Sindre Sorhus",
      "description": "Make a function mimic another one",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mimic-fn@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/mimic-fn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/mimic-fn#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/mimic-fn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mimic-fn/-/mimic-fn-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8dff38bb1cf08ae88854a88e2e97d893b378e934b2f2e6d3a279a7798f6fae91cd027a74401b76071595f5d3b7fe3f81a1501bf9ae46e980cf5b73391ce74c59"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mimic-fn"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-exists",
      "version": "2.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|path-exists@2.1.0",
      "author": "Sindre Sorhus",
      "description": "Check if a path exists",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-exists@2.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/path-exists.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/path-exists#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/path-exists/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0feb6c64f0fc518d9a754dd5efb62c7022761f4b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-exists"
        }
      ]
    },
    {
      "type": "library",
      "name": "pinkie-promise",
      "version": "2.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|pinkie-promise@2.0.1",
      "author": "Vsevolod Strukchinsky",
      "description": "ES2015 Promise ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pinkie-promise@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/floatdrop/pinkie-promise.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/floatdrop/pinkie-promise#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/floatdrop/pinkie-promise/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2135d6dfa7a358c069ac9b178776288228450ffa"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pinkie-promise"
        }
      ]
    },
    {
      "type": "library",
      "name": "foreach",
      "version": "2.0.5",
      "bom-ref": "ssri@5.3.0-tuxcare.1|foreach@2.0.5",
      "author": "Manuel Stofer",
      "description": "foreach component + npm package",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/foreach@2.0.5",
      "externalReferences": [
        {
          "url": "git://github.com/manuelstofer/foreach.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/manuelstofer/foreach#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/manuelstofer/foreach/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/foreach/-/foreach-2.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0bee005018aeb260d0a3af3ae658dd0136ec1b99"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/foreach"
        }
      ]
    },
    {
      "type": "library",
      "name": "es-to-primitive",
      "version": "1.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|es-to-primitive@1.1.1",
      "author": "Jordan Harband",
      "description": "ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES6 versions.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es-to-primitive@1.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/es-to-primitive.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/es-to-primitive#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/es-to-primitive/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "45355248a88979034b6792e19bb81f2b7975dd0d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es-to-primitive"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-callable",
      "version": "1.1.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-callable@1.1.3",
      "author": "Jordan Harband",
      "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-callable@1.1.3",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/is-callable.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/is-callable#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/is-callable/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-callable/-/is-callable-1.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "86eb75392805ddc33af71c92a0eedf74ee7604b2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-callable"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-regex",
      "version": "1.0.4",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-regex@1.0.4",
      "author": "Jordan Harband",
      "description": "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-regex@1.0.4",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/is-regex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/is-regex",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/is-regex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-regex/-/is-regex-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5517489b547091b0930e095654ced25ee97e9491"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-regex"
        }
      ]
    },
    {
      "type": "library",
      "name": "d",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|d@1.0.0",
      "author": "Mariusz Nowak",
      "description": "Property descriptor factory",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/d@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/medikoo/d.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/d#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/d/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/d/-/d-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "754bb5bfe55451da69a58b94d45f4c5b0462d58f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/d"
        }
      ]
    },
    {
      "type": "library",
      "name": "es5-ext",
      "version": "0.10.38",
      "bom-ref": "ssri@5.3.0-tuxcare.1|es5-ext@0.10.38",
      "author": "Mariusz Nowak",
      "description": "ECMAScript extensions and shims",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es5-ext@0.10.38",
      "externalReferences": [
        {
          "url": "git://github.com/medikoo/es5-ext.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/es5-ext#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/es5-ext/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es5-ext/-/es5-ext-0.10.38.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "8c233278fa3b0176d4112c1b97c422d355521f6a6263db3f6b7ad253fe70fcc953231f073cbd719f622718df1e8edff1ba57098274ceeefa8db4e031cd87762a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es5-ext"
        }
      ]
    },
    {
      "type": "library",
      "name": "es6-iterator",
      "version": "2.0.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|es6-iterator@2.0.3",
      "author": "Mariusz Nowak",
      "description": "Iterator abstraction based on ES6 specification",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es6-iterator@2.0.3",
      "externalReferences": [
        {
          "url": "git://github.com/medikoo/es6-iterator.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/es6-iterator#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/es6-iterator/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es6-iterator/-/es6-iterator-2.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a7de889141a05a94b0854403b2d0a0fbfa98f3b7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es6-iterator"
        }
      ]
    },
    {
      "type": "library",
      "name": "es6-set",
      "version": "0.1.5",
      "bom-ref": "ssri@5.3.0-tuxcare.1|es6-set@0.1.5",
      "author": "Mariusz Nowak",
      "description": "ECMAScript6 Set polyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es6-set@0.1.5",
      "externalReferences": [
        {
          "url": "git://github.com/medikoo/es6-set.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/es6-set#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/es6-set/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es6-set/-/es6-set-0.1.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d2b3ec5d4d800ced818db538d28974db0a73ccb1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es6-set"
        }
      ]
    },
    {
      "type": "library",
      "name": "es6-symbol",
      "version": "3.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|es6-symbol@3.1.1",
      "author": "Mariusz Nowak",
      "description": "ECMAScript 6 Symbol polyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/es6-symbol@3.1.1",
      "externalReferences": [
        {
          "url": "git://github.com/medikoo/es6-symbol.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/es6-symbol#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/es6-symbol/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/es6-symbol/-/es6-symbol-3.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "bf00ef4fdab6ba1b46ecb7b629b4c7ed5715cc77"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/es6-symbol"
        }
      ]
    },
    {
      "type": "library",
      "name": "event-emitter",
      "version": "0.3.5",
      "bom-ref": "ssri@5.3.0-tuxcare.1|event-emitter@0.3.5",
      "author": "Mariusz Nowak",
      "description": "Environment agnostic event emitter",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/event-emitter@0.3.5",
      "externalReferences": [
        {
          "url": "git://github.com/medikoo/event-emitter.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/medikoo/event-emitter#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/medikoo/event-emitter/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/event-emitter/-/event-emitter-0.3.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "df8c69eef1647923c7157b9ce83840610b02cc39"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/event-emitter"
        }
      ]
    },
    {
      "type": "library",
      "name": "circular-json",
      "version": "0.3.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|circular-json@0.3.3",
      "author": "Andrea Giammarchi",
      "description": "JSON does not handle circular references. This version does",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/circular-json@0.3.3",
      "externalReferences": [
        {
          "url": "git://github.com/WebReflection/circular-json.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/WebReflection/circular-json",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/WebReflection/circular-json/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/circular-json/-/circular-json-0.3.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "5192b7341c7631c6be6f92ec1bb6d8d7cde91d6b79635c6db383f73f3ec4353c0656724e5166d16f7a1c8ef5fb871f6dabfc9301d7255e6f6c677f2036e7a6e0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/circular-json"
        }
      ]
    },
    {
      "type": "library",
      "name": "del",
      "version": "2.2.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|del@2.2.2",
      "author": "Sindre Sorhus",
      "description": "Delete files and folders",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/del@2.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/del.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/del#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/del/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/del/-/del-2.2.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c12c981d067846c84bcaf862cff930d907ffd1a8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/del"
        }
      ]
    },
    {
      "type": "library",
      "name": "write",
      "version": "0.2.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|write@0.2.1",
      "author": "Jon Schlinkert",
      "description": "Write files to disk, creating intermediate directories if they don't exist.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/write@0.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/write.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/write",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/write/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/write/-/write-0.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5fc03828e264cea3fe91455476f7a3c566cb0757"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/write"
        }
      ]
    },
    {
      "type": "library",
      "name": "restore-cursor",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|restore-cursor@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Gracefully restore the CLI cursor on exit",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/restore-cursor@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/restore-cursor.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/restore-cursor#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/restore-cursor/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/restore-cursor/-/restore-cursor-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "34661f46886327fed2991479152252df92daa541"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/restore-cursor"
        }
      ]
    },
    {
      "type": "library",
      "name": "mute-stream",
      "version": "0.0.5",
      "bom-ref": "ssri@5.3.0-tuxcare.1|mute-stream@0.0.5",
      "author": "Isaac Z. Schlueter",
      "description": "Bytes go in, but they don't come out (when muted).",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mute-stream@0.0.5",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/mute-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/mute-stream#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/mute-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8fbfabb0a98a253d3184331f9e8deb7372fac6c0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mute-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-property",
      "version": "1.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-property@1.0.2",
      "author": "Mikola Lysenko",
      "description": "Tests if a JSON property can be accessed using . syntax",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-property@1.0.2",
      "externalReferences": [
        {
          "url": "git://github.com/mikolalysenko/is-property.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mikolalysenko/is-property#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mikolalysenko/is-property/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-property/-/is-property-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "57fe1c4e48474edd65b09911f26b1cd4095dda84"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-property"
        }
      ]
    },
    {
      "type": "library",
      "name": "callsites",
      "version": "0.2.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|callsites@0.2.0",
      "author": "Sindre Sorhus",
      "description": "Get callsites from the V8 stack trace API",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/callsites@0.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/callsites.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/callsites#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/callsites/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/callsites/-/callsites-0.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "afab96262910a7f33c19a5775825c69f34e350ca"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/callsites"
        }
      ]
    },
    {
      "type": "library",
      "name": "co",
      "version": "4.6.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|co@4.6.0",
      "description": "generator async control flow goodness",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/co@4.6.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/tj/co.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tj/co#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tj/co/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/co/-/co-4.6.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6ea6bdf3d853ae54ccb8e47bfa0bf3f9031fb184"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/co"
        }
      ]
    },
    {
      "type": "library",
      "name": "debug-log",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|debug-log@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Node.js 0.12 util.debuglog() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/debug-log@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/debug-log.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/debug-log#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/debug-log/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/debug-log/-/debug-log-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "2307632d4c04382b8df8a32f70b895046d52745f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/debug-log"
        }
      ]
    },
    {
      "type": "library",
      "name": "delayed-stream",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|delayed-stream@1.0.0",
      "author": "Felix Geisendörfer",
      "description": "Buffers events from a stream until you are ready to handle them.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/delayed-stream@1.0.0",
      "externalReferences": [
        {
          "url": "git://github.com/felixge/node-delayed-stream.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/felixge/node-delayed-stream",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/felixge/node-delayed-stream/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "df3ae199acadfb7d440aaae0b29e2272b24ec619"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/delayed-stream"
        }
      ]
    },
    {
      "type": "library",
      "name": "asynckit",
      "version": "0.4.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|asynckit@0.4.0",
      "author": "Alex Indigo",
      "description": "Minimal async jobs utility library, with streams support",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/asynckit@0.4.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/alexindigo/asynckit.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/alexindigo/asynckit#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/alexindigo/asynckit/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/asynckit"
        }
      ]
    },
    {
      "type": "library",
      "name": "commander",
      "version": "2.14.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|commander@2.14.0",
      "author": "TJ Holowaychuk",
      "description": "the complete solution for node.js command-line programs",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/commander@2.14.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/tj/commander.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/tj/commander.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/tj/commander.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/commander/-/commander-2.14.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "a243e976f749afa9941a2d97ceea42fa2ad0c73c062d5681cda7050b5e218cbbfc342a255c4b31b14f9069eb92497a5051a9398362b4bd0ed68c0d5ef2cbdcce"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/commander"
        }
      ]
    },
    {
      "type": "library",
      "name": "boom",
      "version": "2.10.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|boom@2.10.1",
      "description": "HTTP-friendly error objects",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/boom@2.10.1",
      "externalReferences": [
        {
          "url": "git://github.com/hapijs/boom.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hapijs/boom#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hapijs/boom/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/boom/-/boom-2.10.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "39c8918ceff5799f83f9492a848f625add0c766f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/boom"
        }
      ]
    },
    {
      "type": "library",
      "name": "cryptiles",
      "version": "2.0.5",
      "bom-ref": "ssri@5.3.0-tuxcare.1|cryptiles@2.0.5",
      "description": "General purpose crypto utilities",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cryptiles@2.0.5",
      "externalReferences": [
        {
          "url": "git://github.com/hapijs/cryptiles.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hapijs/cryptiles#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hapijs/cryptiles/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cryptiles/-/cryptiles-2.0.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3bdfecdc608147c1c67202fa291e7dca59eaa3b8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cryptiles"
        }
      ]
    },
    {
      "type": "library",
      "name": "hoek",
      "version": "2.16.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|hoek@2.16.3",
      "description": "General purpose node utilities",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/hoek@2.16.3",
      "externalReferences": [
        {
          "url": "git://github.com/hapijs/hoek.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hapijs/hoek#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hapijs/hoek/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/hoek/-/hoek-2.16.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "20bb7403d3cea398e91dc4710a8ff1b8274a25ed"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/hoek"
        }
      ]
    },
    {
      "type": "library",
      "name": "sntp",
      "version": "1.0.9",
      "bom-ref": "ssri@5.3.0-tuxcare.1|sntp@1.0.9",
      "author": "Eran Hammer",
      "description": "SNTP Client",
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "acknowledgement": "declared",
            "url": "http://github.com/hueniverse/sntp/raw/master/LICENSE"
          }
        }
      ],
      "purl": "pkg:npm/sntp@1.0.9",
      "externalReferences": [
        {
          "url": "git://github.com/hueniverse/sntp.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/hueniverse/sntp#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/hueniverse/sntp/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/sntp/-/sntp-1.0.9.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6541184cc90aeea6c6e7b35e2659082443c66198"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/sntp"
        }
      ]
    },
    {
      "type": "library",
      "name": "assert-plus",
      "version": "0.2.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|assert-plus@0.2.0",
      "author": "Mark Cavage",
      "description": "Extra assertions on top of node's assert module",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/assert-plus@0.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/mcavage/node-assert-plus.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mcavage/node-assert-plus#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mcavage/node-assert-plus/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-0.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d74e1b87e7affc0db8aadb7021f3fe48101ab234"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/assert-plus"
        }
      ]
    },
    {
      "type": "library",
      "name": "jsprim",
      "version": "1.4.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|jsprim@1.4.1",
      "description": "utilities for primitive JavaScript types",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsprim@1.4.1",
      "externalReferences": [
        {
          "url": "git://github.com/joyent/node-jsprim.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/joyent/node-jsprim#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/joyent/node-jsprim/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsprim/-/jsprim-1.4.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "313e66bc1e5cc06e438bc1b7499c2e5c56acb6a2"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsprim"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "assert-plus",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|jsprim@1.4.1|assert-plus@1.0.0",
          "author": "Mark Cavage",
          "description": "Extra assertions on top of node's assert module",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/assert-plus@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/mcavage/node-assert-plus.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mcavage/node-assert-plus#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mcavage/node-assert-plus/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/jsprim/node_modules/assert-plus"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "sshpk",
      "version": "1.13.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|sshpk@1.13.1",
      "author": "Joyent, Inc",
      "description": "A library for finding and using SSH public keys",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/sshpk@1.13.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/arekinath/node-sshpk.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/arekinath/node-sshpk#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/arekinath/node-sshpk/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/sshpk/-/sshpk-1.13.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "512df6da6287144316dc4c18fe1cf1d940739be3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/sshpk"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "assert-plus",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|sshpk@1.13.1|assert-plus@1.0.0",
          "author": "Mark Cavage",
          "description": "Extra assertions on top of node's assert module",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/assert-plus@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/mcavage/node-assert-plus.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mcavage/node-assert-plus#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mcavage/node-assert-plus/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/sshpk/node_modules/assert-plus"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "mime-db",
      "version": "1.30.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|mime-db@1.30.0",
      "description": "Media Type Database",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/mime-db@1.30.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jshttp/mime-db.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jshttp/mime-db#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jshttp/mime-db/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/mime-db/-/mime-db-1.30.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "74c643da2dd9d6a45399963465b26d5ca7d71f01"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/mime-db"
        }
      ]
    },
    {
      "type": "library",
      "name": "pseudomap",
      "version": "1.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|pseudomap@1.0.2",
      "author": "Isaac Z. Schlueter",
      "description": "A thing that is a lot like ES6 `Map`, but without iterators, for use in environments where `for..of` syntax and `Map` are not available.",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pseudomap@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/pseudomap.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/pseudomap#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/pseudomap/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f052a28da70e618917ef0a8ac34c1ae5a68286b3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pseudomap"
        }
      ]
    },
    {
      "type": "library",
      "name": "yallist",
      "version": "2.1.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|yallist@2.1.2",
      "author": "Isaac Z. Schlueter",
      "description": "Yet Another Linked List",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/yallist@2.1.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/isaacs/yallist.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/yallist#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/yallist/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/yallist/-/yallist-2.1.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "1c11f9218f076089a47dd512f93c6699a6a81d52"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/yallist"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-obj",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-obj@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Check if a value is an object",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-obj@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-obj.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-obj#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-obj/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-obj/-/is-obj-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3e4729ac1f5fde025cd7d83a896dab9f4f67db0f"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-obj"
        }
      ]
    },
    {
      "type": "library",
      "name": "async",
      "version": "1.5.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|async@1.5.2",
      "author": "Caolan McMahon",
      "description": "Higher-order functions and common patterns for asynchronous code",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/async@1.5.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/caolan/async.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/caolan/async#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/caolan/async/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/async/-/async-1.5.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ec6a61ae56480c0c3cb241c95618e20892f9672a"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/async"
        }
      ]
    },
    {
      "type": "library",
      "name": "optimist",
      "version": "0.6.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|optimist@0.6.1",
      "author": "James Halliday",
      "description": "Light-weight option parsing with an argv hash. No optstrings attached.",
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/optimist@0.6.1",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/substack/node-optimist.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/substack/node-optimist#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/substack/node-optimist/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/optimist/-/optimist-0.6.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "da3ea74686fa21a19a111c326e90eb15a0196686"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/optimist"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "wordwrap",
          "version": "0.0.3",
          "bom-ref": "ssri@5.3.0-tuxcare.1|optimist@0.6.1|wordwrap@0.0.3",
          "author": "James Halliday",
          "description": "Wrap those words. Show them at what columns to start and stop.",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/wordwrap@0.0.3",
          "externalReferences": [
            {
              "url": "git://github.com/substack/node-wordwrap.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/node-wordwrap#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/node-wordwrap/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.3.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "a3d5da6cd5c0bc0008d37234bbaf1bed63059107"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/optimist/node_modules/wordwrap"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "source-map",
      "version": "0.4.4",
      "bom-ref": "ssri@5.3.0-tuxcare.1|source-map@0.4.4",
      "author": "Nick Fitzgerald",
      "description": "Generates and consumes source maps",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.4.4",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/mozilla/source-map.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mozilla/source-map",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mozilla/source-map/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.4.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "eba4f5da9c0dc999de68032d8b4f76173652036b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/source-map"
        }
      ]
    },
    {
      "type": "library",
      "name": "uglify-js",
      "version": "2.8.29",
      "bom-ref": "ssri@5.3.0-tuxcare.1|uglify-js@2.8.29",
      "author": "Mihai Bazon",
      "description": "JavaScript parser, mangler/compressor and beautifier toolkit",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/uglify-js@2.8.29",
      "externalReferences": [
        {
          "url": "git+https://github.com/mishoo/UglifyJS2.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://lisperator.net/uglifyjs",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mishoo/UglifyJS2/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/uglify-js/-/uglify-js-2.8.29.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "29c5733148057bb4e1f75df35b7a9cb72e6a59dd"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/uglify-js"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "source-map",
          "version": "0.5.7",
          "bom-ref": "ssri@5.3.0-tuxcare.1|uglify-js@2.8.29|source-map@0.5.7",
          "author": "Nick Fitzgerald",
          "description": "Generates and consumes source maps",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "BSD-3-Clause",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/source-map@0.5.7",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/mozilla/source-map.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mozilla/source-map",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mozilla/source-map/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "8a039d2d1021d22d1ea14c80d8ea468ba2ef3fcc"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/uglify-js/node_modules/source-map"
            }
          ]
        },
        {
          "type": "library",
          "name": "yargs",
          "version": "3.10.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|uglify-js@2.8.29|yargs@3.10.0",
          "author": "Alex Ford",
          "description": "Light-weight option parsing with an argv hash. No optstrings attached.",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/yargs@3.10.0",
          "externalReferences": [
            {
              "url": "git+ssh://git@github.com/bcoe/yargs.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/bcoe/yargs#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/bcoe/yargs/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "f7ee7bd857dd7c1d2d38c0e74efbd681d1431fd1"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/uglify-js/node_modules/yargs"
            }
          ]
        },
        {
          "type": "library",
          "name": "camelcase",
          "version": "1.2.1",
          "bom-ref": "ssri@5.3.0-tuxcare.1|uglify-js@2.8.29|camelcase@1.2.1",
          "author": "Sindre Sorhus",
          "description": "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar → fooBar",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/camelcase@1.2.1",
          "externalReferences": [
            {
              "url": "git+https://github.com/sindresorhus/camelcase.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/sindresorhus/camelcase/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "9bb5304d2e0b56698b2c758b08a3eaa9daa58a39"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/uglify-js/node_modules/camelcase"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "ini",
      "version": "1.3.5",
      "bom-ref": "ssri@5.3.0-tuxcare.1|ini@1.3.5",
      "author": "Isaac Z. Schlueter",
      "description": "An ini encoder/decoder for node",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ini@1.3.5",
      "externalReferences": [
        {
          "url": "git://github.com/isaacs/ini.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/isaacs/ini#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/isaacs/ini/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ini/-/ini-1.3.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "45963986e20a08c4560d4a999448bbd9ffe599728cbeeb3370c05dba5890de79d66f1f57fd90503bb0e28cc1184bd1211c16f6a9a71150cb42eecbcbc1ed2573"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ini"
        }
      ]
    },
    {
      "type": "library",
      "name": "spdx-correct",
      "version": "1.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|spdx-correct@1.0.2",
      "author": "Kyle E. Mitchell",
      "description": "correct invalid SPDX identifiers",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/spdx-correct@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/kemitchell/spdx-correct.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kemitchell/spdx-correct.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kemitchell/spdx-correct.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/spdx-correct/-/spdx-correct-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b3073d933ff51f3912f03ac5519498a4150db40"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/spdx-correct"
        }
      ]
    },
    {
      "type": "library",
      "name": "spdx-expression-parse",
      "version": "1.0.4",
      "bom-ref": "ssri@5.3.0-tuxcare.1|spdx-expression-parse@1.0.4",
      "author": "Kyle E. Mitchell",
      "description": "parse SPDX license expressions",
      "licenses": [
        {
          "expression": "(MIT AND CC-BY-3.0)",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/kemitchell/spdx-expression-parse.js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kemitchell/spdx-expression-parse.js#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kemitchell/spdx-expression-parse.js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9bdf2f20e1f40ed447fbe273266191fced51626c"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/spdx-expression-parse"
        }
      ]
    },
    {
      "type": "library",
      "name": "parse-json",
      "version": "2.2.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|parse-json@2.2.0",
      "author": "Sindre Sorhus",
      "description": "Parse JSON with more helpful errors",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/parse-json@2.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/parse-json.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/parse-json#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/parse-json/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f480f40434ef80741f8469099f8dea18f55a4dc9"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/parse-json"
        }
      ]
    },
    {
      "type": "library",
      "name": "array-find-index",
      "version": "1.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|array-find-index@1.0.2",
      "author": "Sindre Sorhus",
      "description": "ES2015 `Array#findIndex()` ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/array-find-index@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/array-find-index.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/array-find-index#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/array-find-index/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/array-find-index/-/array-find-index-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "df010aa1287e164bbda6f9723b0a96a1ec4187a1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/array-find-index"
        }
      ]
    },
    {
      "type": "library",
      "name": "repeating",
      "version": "2.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|repeating@2.0.1",
      "author": "Sindre Sorhus",
      "description": "Repeat a string - fast",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/repeating@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/repeating.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/repeating#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/repeating/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/repeating/-/repeating-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5214c53a926d3552707527fbab415dbc08d06dda"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/repeating"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-limit",
      "version": "1.2.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|p-limit@1.2.0",
      "author": "Sindre Sorhus",
      "description": "Run multiple promise-returning & async functions with limited concurrency",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-limit@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-limit.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-limit#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-limit/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-limit/-/p-limit-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "63f3ad21a5ed50faf8fd8a4cbf5a422f92f979dd2bba601a01e0528f5d85f9b4a531dcacee2f28405fc650999fa534bf428691ad2fe4ea999adbd85a269b0c9e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-limit"
        }
      ]
    },
    {
      "type": "library",
      "name": "shebang-command",
      "version": "1.2.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|shebang-command@1.2.0",
      "author": "Kevin Martensson",
      "description": "Get the command from a shebang",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/shebang-command@1.2.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/kevva/shebang-command.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kevva/shebang-command#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kevva/shebang-command/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "44aac65b695b03398968c39f363fee5deafdf1ea"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/shebang-command"
        }
      ]
    },
    {
      "type": "library",
      "name": "path-key",
      "version": "2.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|path-key@2.0.1",
      "author": "Sindre Sorhus",
      "description": "Get the PATH environment variable key cross-platform",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/path-key@2.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/path-key.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/path-key#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/path-key/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/path-key/-/path-key-2.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "411cadb574c5a140d3a4b1910d40d80cc9f40b40"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/path-key"
        }
      ]
    },
    {
      "type": "library",
      "name": "pinkie",
      "version": "2.0.4",
      "bom-ref": "ssri@5.3.0-tuxcare.1|pinkie@2.0.4",
      "author": "Vsevolod Strukchinsky",
      "description": "Itty bitty little widdle twinkie pinkie ES2015 Promise implementation",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/pinkie@2.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/floatdrop/pinkie.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/floatdrop/pinkie#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/floatdrop/pinkie/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "72556b80cfa0d48a974e80e77248e80ed4f7f870"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/pinkie"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-date-object",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-date-object@1.0.1",
      "author": "Jordan Harband",
      "description": "Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-date-object@1.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/is-date-object.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/is-date-object#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/is-date-object/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9aa20eb6aeebbff77fbd33e74ca01b33581d3a16"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-date-object"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-symbol",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-symbol@1.0.1",
      "author": "Jordan Harband",
      "description": "Determine if a value is an ES6 Symbol or not.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-symbol@1.0.1",
      "externalReferences": [
        {
          "url": "git://github.com/ljharb/is-symbol.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ljharb/is-symbol#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ljharb/is-symbol/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3cc59f00025194b6ab2e38dbae6689256b660572"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-symbol"
        }
      ]
    },
    {
      "type": "library",
      "name": "globby",
      "version": "5.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|globby@5.0.0",
      "author": "Sindre Sorhus",
      "description": "Extends `glob` with support for multiple patterns and exposes a Promise API",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/globby@5.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/globby.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/globby#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/globby/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/globby/-/globby-5.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "ebd84667ca0dbb330b99bcfc68eac2bc54370e0d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/globby"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-path-cwd",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-path-cwd@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Check if a path is CWD",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-path-cwd@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-path-cwd.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-path-cwd#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-path-cwd/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-path-cwd/-/is-path-cwd-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "d225ec23132e89edd38fda767472e62e65f1106d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-path-cwd"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-path-in-cwd",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-path-in-cwd@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Check if a path is in the current working directory",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-path-in-cwd@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-path-in-cwd.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-path-in-cwd#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-path-in-cwd/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-path-in-cwd/-/is-path-in-cwd-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6477582b8214d602346094567003be8a9eac04dc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-path-in-cwd"
        }
      ]
    },
    {
      "type": "library",
      "name": "exit-hook",
      "version": "1.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|exit-hook@1.1.1",
      "author": "Sindre Sorhus",
      "description": "Run some code when the process exits",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/exit-hook@1.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/exit-hook.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/exit-hook#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/exit-hook/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/exit-hook/-/exit-hook-1.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f05ca233b48c05d54fff07765df8507e95c02ff8"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/exit-hook"
        }
      ]
    },
    {
      "type": "library",
      "name": "onetime",
      "version": "1.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|onetime@1.1.0",
      "author": "Sindre Sorhus",
      "description": "Only call a function once",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/onetime@1.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/onetime.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/onetime#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/onetime/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/onetime/-/onetime-1.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a1f7838f8314c516f05ecefcbc4ccfe04b4ed789"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/onetime"
        }
      ]
    },
    {
      "type": "library",
      "name": "error-ex",
      "version": "1.3.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|error-ex@1.3.1",
      "description": "Easy error subclassing and stack customization",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/qix-/node-error-ex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/qix-/node-error-ex#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/qix-/node-error-ex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/error-ex/-/error-ex-1.3.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "f855a86ce61adc4e8621c3cda21e7a7612c3a8dc"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/error-ex"
        }
      ]
    },
    {
      "type": "library",
      "name": "json-parse-better-errors",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|json-parse-better-errors@1.0.1",
      "author": "Kat Marchán",
      "description": "JSON.parse with context information on error",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/json-parse-better-errors@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/zkat/json-parse-better-errors.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/zkat/json-parse-better-errors#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/zkat/json-parse-better-errors/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/json-parse-better-errors/-/json-parse-better-errors-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "c72429c5e59630ac89a6cf42b862587a783ab2c2396e9a92f65b50a5d550f74b78aa5e8d767c452a1f7925c46dd9cba7fc38cc54dadd8e788b3ee300ebdc660b"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/json-parse-better-errors"
        }
      ]
    },
    {
      "type": "library",
      "name": "extsprintf",
      "version": "1.3.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|extsprintf@1.3.0",
      "description": "extended POSIX-style sprintf",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/extsprintf@1.3.0",
      "externalReferences": [
        {
          "url": "git://github.com/davepacheco/node-extsprintf.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/davepacheco/node-extsprintf#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/davepacheco/node-extsprintf/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "96918440e3041a7a414f8c52e3c574eb3c3e1e05"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/extsprintf"
        }
      ]
    },
    {
      "type": "library",
      "name": "json-schema",
      "version": "0.2.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|json-schema@0.2.3",
      "author": "Kris Zyp",
      "description": "JSON Schema validation and specifications",
      "licenses": [
        {
          "license": {
            "name": "AFLv2.1",
            "acknowledgement": "declared",
            "url": "http://trac.dojotoolkit.org/browser/dojo/trunk/LICENSE#L43"
          }
        },
        {
          "license": {
            "name": "BSD",
            "acknowledgement": "declared",
            "url": "http://trac.dojotoolkit.org/browser/dojo/trunk/LICENSE#L13"
          }
        }
      ],
      "purl": "pkg:npm/json-schema@0.2.3",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/kriszyp/json-schema.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/kriszyp/json-schema#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/kriszyp/json-schema/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/json-schema/-/json-schema-0.2.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "b480c892e59a2f05954ce727bd3f2a4e882f9e13"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/json-schema"
        }
      ]
    },
    {
      "type": "library",
      "name": "verror",
      "version": "1.10.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|verror@1.10.0",
      "description": "richer JavaScript errors",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/verror@1.10.0",
      "externalReferences": [
        {
          "url": "git://github.com/davepacheco/node-verror.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/davepacheco/node-verror#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/davepacheco/node-verror/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "3a105ca17053af55d6e270c1f8288682e18da400"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/verror"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "assert-plus",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|verror@1.10.0|assert-plus@1.0.0",
          "author": "Mark Cavage",
          "description": "Extra assertions on top of node's assert module",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/assert-plus@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/mcavage/node-assert-plus.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mcavage/node-assert-plus#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mcavage/node-assert-plus/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/verror/node_modules/assert-plus"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "asn1",
      "version": "0.2.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|asn1@0.2.3",
      "author": "Mark Cavage",
      "description": "Contains parsers and serializers for ASN.1 (currently BER only)",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/asn1@0.2.3",
      "externalReferences": [
        {
          "url": "git://github.com/mcavage/node-asn1.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/mcavage/node-asn1#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/mcavage/node-asn1/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/asn1/-/asn1-0.2.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "dac8787713c9966849fc8180777ebe9c1ddf3b86"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/asn1"
        }
      ]
    },
    {
      "type": "library",
      "name": "bcrypt-pbkdf",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|bcrypt-pbkdf@1.0.1",
      "description": "Port of the OpenBSD bcrypt_pbkdf function to pure JS",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/bcrypt-pbkdf@1.0.1",
      "externalReferences": [
        {
          "url": "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "63bc5dcb61331b92bc05fd528953c33462a06f8d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/bcrypt-pbkdf"
        }
      ]
    },
    {
      "type": "library",
      "name": "dashdash",
      "version": "1.14.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|dashdash@1.14.1",
      "author": "Trent Mick",
      "description": "A light, featureful and explicit option parsing library.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/dashdash@1.14.1",
      "externalReferences": [
        {
          "url": "git://github.com/trentm/node-dashdash.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/trentm/node-dashdash#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/trentm/node-dashdash/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "853cfa0f7cbe2fed5de20326b8dd581035f6e2f0"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/dashdash"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "assert-plus",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|dashdash@1.14.1|assert-plus@1.0.0",
          "author": "Mark Cavage",
          "description": "Extra assertions on top of node's assert module",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/assert-plus@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/mcavage/node-assert-plus.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mcavage/node-assert-plus#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mcavage/node-assert-plus/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/dashdash/node_modules/assert-plus"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "ecc-jsbn",
      "version": "0.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|ecc-jsbn@0.1.1",
      "author": "Jeremie Miller",
      "description": "ECC JS code based on JSBN",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/ecc-jsbn@0.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/quartzjer/ecc-jsbn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/quartzjer/ecc-jsbn",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/quartzjer/ecc-jsbn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0fc73a9ed5f0d53c38193398523ef7e543777505"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/ecc-jsbn"
        }
      ]
    },
    {
      "type": "library",
      "name": "getpass",
      "version": "0.1.7",
      "bom-ref": "ssri@5.3.0-tuxcare.1|getpass@0.1.7",
      "author": "Alex Wilson",
      "description": "getpass for node.js",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/getpass@0.1.7",
      "externalReferences": [
        {
          "url": "git+https://github.com/arekinath/node-getpass.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/arekinath/node-getpass#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/arekinath/node-getpass/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5eff8e3e684d569ae4cb2b1282604e8ba62149fa"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/getpass"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "assert-plus",
          "version": "1.0.0",
          "bom-ref": "ssri@5.3.0-tuxcare.1|getpass@0.1.7|assert-plus@1.0.0",
          "author": "Mark Cavage",
          "description": "Extra assertions on top of node's assert module",
          "licenses": [
            {
              "license": {
                "id": "MIT",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/assert-plus@1.0.0",
          "externalReferences": [
            {
              "url": "git+https://github.com/mcavage/node-assert-plus.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/mcavage/node-assert-plus#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/mcavage/node-assert-plus/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/getpass/node_modules/assert-plus"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "jsbn",
      "version": "0.1.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|jsbn@0.1.1",
      "author": "Tom Wu",
      "description": "The jsbn library is a fast, portable implementation of large-number math in pure JavaScript, enabling public-key crypto and other applications on desktop and mobile browsers.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/jsbn@0.1.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/andyperlitch/jsbn.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/andyperlitch/jsbn#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/andyperlitch/jsbn/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a5e654c2e5a2deb5f201d96cefbca80c0ef2f513"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/jsbn"
        }
      ]
    },
    {
      "type": "library",
      "name": "tweetnacl",
      "version": "0.14.5",
      "bom-ref": "ssri@5.3.0-tuxcare.1|tweetnacl@0.14.5",
      "author": "TweetNaCl-js contributors",
      "description": "Port of TweetNaCl cryptographic library to JavaScript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Unlicense",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/tweetnacl@0.14.5",
      "externalReferences": [
        {
          "url": "git+https://github.com/dchest/tweetnacl-js.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://tweetnacl.js.org",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/dchest/tweetnacl-js/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5ae68177f192d4456269d108afa93ff8743f4f64"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/tweetnacl"
        }
      ]
    },
    {
      "type": "library",
      "name": "amdefine",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|amdefine@1.0.1",
      "author": "James Burke",
      "description": "Provide AMD's define() API for declaring modules in the AMD format",
      "licenses": [
        {
          "expression": "BSD-3-Clause OR MIT",
          "acknowledgement": "declared"
        }
      ],
      "purl": "pkg:npm/amdefine@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jrburke/amdefine.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "http://github.com/jrburke/amdefine",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jrburke/amdefine/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4a5282ac164729e93619bcfd3ad151f817ce91f5"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/amdefine"
        }
      ]
    },
    {
      "type": "library",
      "name": "uglify-to-browserify",
      "version": "1.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|uglify-to-browserify@1.0.2",
      "author": "ForbesLindesay",
      "description": "A transform to make UglifyJS work in browserify.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/uglify-to-browserify@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/ForbesLindesay/uglify-to-browserify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/ForbesLindesay/uglify-to-browserify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/ForbesLindesay/uglify-to-browserify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "6e0924d6bda6b5afe349e39a6d632850a0f882b7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/uglify-to-browserify"
        }
      ]
    },
    {
      "type": "library",
      "name": "spdx-license-ids",
      "version": "1.2.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|spdx-license-ids@1.2.2",
      "author": "Shinnosuke Watanabe",
      "description": "A list of SPDX license identifiers",
      "licenses": [
        {
          "license": {
            "id": "Unlicense",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@1.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/shinnn/spdx-license-ids.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/shinnn/spdx-license-ids#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/shinnn/spdx-license-ids/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-1.2.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "c9df7a3424594ade6bd11900d596696dc06bac57"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/spdx-license-ids"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-utf8",
      "version": "0.2.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-utf8@0.2.1",
      "author": "wayfind",
      "description": "Detect if a buffer is utf8 encoded.",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-utf8@0.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/wayfind/is-utf8.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/wayfind/is-utf8#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/wayfind/is-utf8/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b0da1442104d1b336340e80797e865cf39f7d72"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-utf8"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-finite",
      "version": "1.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-finite@1.0.2",
      "author": "Sindre Sorhus",
      "description": "ES2015 Number.isFinite() ponyfill",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-finite@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-finite.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-finite#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-finite/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-finite/-/is-finite-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cc6677695602be550ef11e8b4aa6305342b6d0aa"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-finite"
        }
      ]
    },
    {
      "type": "library",
      "name": "p-try",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|p-try@1.0.0",
      "author": "Sindre Sorhus",
      "description": "`Promise#try()` ponyfill - Starts a promise chain",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/p-try@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/p-try.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/p-try#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/p-try/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/p-try/-/p-try-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "cbc79cdbaf8fd4228e13f621f2b1a237c1b207b3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/p-try"
        }
      ]
    },
    {
      "type": "library",
      "name": "shebang-regex",
      "version": "1.0.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|shebang-regex@1.0.0",
      "author": "Sindre Sorhus",
      "description": "Regular expression for matching a shebang",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/shebang-regex@1.0.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/shebang-regex.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/shebang-regex#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/shebang-regex/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "da42f49740c0b42db2ca9728571cb190c98efea3"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/shebang-regex"
        }
      ]
    },
    {
      "type": "library",
      "name": "array-union",
      "version": "1.0.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|array-union@1.0.2",
      "author": "Sindre Sorhus",
      "description": "Create an array of unique values, in order, from the input arrays",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/array-union@1.0.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/array-union.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/array-union#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/array-union/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/array-union/-/array-union-1.0.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "9a34410e4f4e3da23dea375be5be70f24778ec39"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/array-union"
        }
      ]
    },
    {
      "type": "library",
      "name": "arrify",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|arrify@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Convert a value to an array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/arrify@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/arrify.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/arrify#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/arrify/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/arrify/-/arrify-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "898508da2226f380df904728456849c1501a4b0d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/arrify"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-path-inside",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-path-inside@1.0.1",
      "author": "Sindre Sorhus",
      "description": "Check if a path is inside another path",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-path-inside@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/is-path-inside.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/is-path-inside#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/is-path-inside/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8ef5b7de50437a3fdca6b4e865ef7aa55cb48036"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-path-inside"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-arrayish",
      "version": "0.2.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-arrayish@0.2.1",
      "author": "Qix",
      "description": "Determines if an object can be used as an array",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-arrayish@0.2.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/qix-/node-is-arrayish.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/qix-/node-is-arrayish#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/qix-/node-is-arrayish/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "77c99840527aa8ecb1a8ba697b80645a7a926a9d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-arrayish"
        }
      ]
    },
    {
      "type": "library",
      "name": "cliui",
      "version": "2.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|cliui@2.1.0",
      "author": "Ben Coe",
      "description": "easily create complex multi-column command-line-interfaces",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/cliui@2.1.0",
      "externalReferences": [
        {
          "url": "git+ssh://git@github.com/bcoe/cliui.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/bcoe/cliui#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/bcoe/cliui/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "4b475760ff80264c762c3a1719032e91c7fea0d1"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/cliui"
        }
      ],
      "components": [
        {
          "type": "library",
          "name": "wordwrap",
          "version": "0.0.2",
          "bom-ref": "ssri@5.3.0-tuxcare.1|cliui@2.1.0|wordwrap@0.0.2",
          "author": "James Halliday",
          "description": "Wrap those words. Show them at what columns to start and stop.",
          "scope": "optional",
          "licenses": [
            {
              "license": {
                "name": "MIT/X11",
                "acknowledgement": "declared"
              }
            }
          ],
          "purl": "pkg:npm/wordwrap@0.0.2",
          "externalReferences": [
            {
              "url": "git://github.com/substack/node-wordwrap.git",
              "type": "vcs",
              "comment": "as detected from PackageJson property \"repository.url\""
            },
            {
              "url": "https://github.com/substack/node-wordwrap#readme",
              "type": "website",
              "comment": "as detected from PackageJson property \"homepage\""
            },
            {
              "url": "https://github.com/substack/node-wordwrap/issues",
              "type": "issue-tracker",
              "comment": "as detected from PackageJson property \"bugs.url\""
            },
            {
              "url": "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz",
              "type": "distribution",
              "hashes": [
                {
                  "alg": "SHA-1",
                  "content": "b79669bb42ecb409f83d583cad52ca17eaa1643f"
                }
              ],
              "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
            }
          ],
          "properties": [
            {
              "name": "cdx:npm:package:development",
              "value": "true"
            },
            {
              "name": "cdx:npm:package:path",
              "value": "node_modules/cliui/node_modules/wordwrap"
            }
          ]
        }
      ]
    },
    {
      "type": "library",
      "name": "window-size",
      "version": "0.1.0",
      "bom-ref": "ssri@5.3.0-tuxcare.1|window-size@0.1.0",
      "author": "Jon Schlinkert",
      "description": "Reliable way to to get the height and width of the terminal/console in a node.js environment.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared",
            "url": "https://github.com/jonschlinkert/window-size/blob/master/LICENSE-MIT"
          }
        }
      ],
      "purl": "pkg:npm/window-size@0.1.0",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/window-size.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/window-size",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/window-size/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "5438cd2ea93b202efa3a19fe8887aee7c94f9c9d"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/window-size"
        }
      ]
    },
    {
      "type": "library",
      "name": "array-uniq",
      "version": "1.0.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|array-uniq@1.0.3",
      "author": "Sindre Sorhus",
      "description": "Create an array without duplicates",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/array-uniq@1.0.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/sindresorhus/array-uniq.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/sindresorhus/array-uniq#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/sindresorhus/array-uniq/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "af6ac877a25cc7f74e058894753858dfdb24fdb6"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/array-uniq"
        }
      ]
    },
    {
      "type": "library",
      "name": "center-align",
      "version": "0.1.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|center-align@0.1.3",
      "author": "Jon Schlinkert",
      "description": "Center-align the text in a string.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/center-align@0.1.3",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/center-align.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/center-align",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/center-align/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/center-align/-/center-align-0.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "aa0d32629b6ee972200411cbd4461c907bc2b7ad"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/center-align"
        }
      ]
    },
    {
      "type": "library",
      "name": "right-align",
      "version": "0.1.3",
      "bom-ref": "ssri@5.3.0-tuxcare.1|right-align@0.1.3",
      "author": "Jon Schlinkert",
      "description": "Right-align the text in a string.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/right-align@0.1.3",
      "externalReferences": [
        {
          "url": "git://github.com/jonschlinkert/right-align.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/right-align",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/right-align/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/right-align/-/right-align-0.1.3.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "61339b722fe6a3515689210d24e14c96148613ef"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/right-align"
        }
      ]
    },
    {
      "type": "library",
      "name": "align-text",
      "version": "0.1.4",
      "bom-ref": "ssri@5.3.0-tuxcare.1|align-text@0.1.4",
      "author": "Jon Schlinkert",
      "description": "Align the text in a string.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/align-text@0.1.4",
      "externalReferences": [
        {
          "url": "git://github.com/jonschlinkert/align-text.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/align-text",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/align-text/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/align-text/-/align-text-0.1.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "0cd90a561093f35d0a99256c22b7069433fad117"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/align-text"
        }
      ]
    },
    {
      "type": "library",
      "name": "lazy-cache",
      "version": "1.0.4",
      "bom-ref": "ssri@5.3.0-tuxcare.1|lazy-cache@1.0.4",
      "author": "Jon Schlinkert",
      "description": "Cache requires to be lazy-loaded when needed.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/lazy-cache@1.0.4",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/lazy-cache.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/lazy-cache",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/lazy-cache/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/lazy-cache/-/lazy-cache-1.0.4.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "a1d78fc3a50474cb80845d3b3b6e1da49a446e8e"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/lazy-cache"
        }
      ]
    },
    {
      "type": "library",
      "name": "kind-of",
      "version": "3.2.2",
      "bom-ref": "ssri@5.3.0-tuxcare.1|kind-of@3.2.2",
      "author": "Jon Schlinkert",
      "description": "Get the native type of a value.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/kind-of@3.2.2",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/kind-of.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/kind-of",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/kind-of/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "31ea21a734bab9bbb0f32466d893aea51e4a3c64"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/kind-of"
        }
      ]
    },
    {
      "type": "library",
      "name": "longest",
      "version": "1.0.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|longest@1.0.1",
      "author": "Jon Schlinkert",
      "description": "Get the longest item in an array.",
      "scope": "optional",
      "purl": "pkg:npm/longest@1.0.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/longest.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/longest",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/longest/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "30a0b2da38f73770e8294a0d22e6625ed77d0097"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/longest"
        }
      ]
    },
    {
      "type": "library",
      "name": "repeat-string",
      "version": "1.6.1",
      "bom-ref": "ssri@5.3.0-tuxcare.1|repeat-string@1.6.1",
      "author": "Jon Schlinkert",
      "description": "Repeat the given string n times. Fastest implementation for repeating a string.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/repeat-string@1.6.1",
      "externalReferences": [
        {
          "url": "git+https://github.com/jonschlinkert/repeat-string.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/jonschlinkert/repeat-string",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/jonschlinkert/repeat-string/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-1",
              "content": "8dcae470e1c88abc2d600fff4a776286da75e637"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/repeat-string"
        }
      ]
    },
    {
      "type": "library",
      "name": "is-buffer",
      "version": "1.1.6",
      "bom-ref": "ssri@5.3.0-tuxcare.1|is-buffer@1.1.6",
      "author": "Feross Aboukhadijeh",
      "description": "Determine if an object is a Buffer",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "acknowledgement": "declared"
          }
        }
      ],
      "purl": "pkg:npm/is-buffer@1.1.6",
      "externalReferences": [
        {
          "url": "git://github.com/feross/is-buffer.git",
          "type": "vcs",
          "comment": "as detected from PackageJson property \"repository.url\""
        },
        {
          "url": "https://github.com/feross/is-buffer#readme",
          "type": "website",
          "comment": "as detected from PackageJson property \"homepage\""
        },
        {
          "url": "https://github.com/feross/is-buffer/issues",
          "type": "issue-tracker",
          "comment": "as detected from PackageJson property \"bugs.url\""
        },
        {
          "url": "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz",
          "type": "distribution",
          "hashes": [
            {
              "alg": "SHA-512",
              "content": "35c7402f0a579139b966fbdb93ba303944af56f04a0e028fe7f7b07d71339e64057ece194666a739e2814e34558e46b7405a0de9727ef45dd44aa7c7a93694e7"
            }
          ],
          "comment": "as detected from npm-ls property \"resolved\" and property \"integrity\""
        }
      ],
      "properties": [
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:path",
          "value": "node_modules/is-buffer"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "ssri@5.3.0-tuxcare.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1",
        "ssri@5.3.0-tuxcare.1|safe-buffer@5.1.1",
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0",
        "ssri@5.3.0-tuxcare.1|standard@10.0.3",
        "ssri@5.3.0-tuxcare.1|tap@11.1.0",
        "ssri@5.3.0-tuxcare.1|weallbehave@1.2.0",
        "ssri@5.3.0-tuxcare.1|weallcontribute@1.0.8"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|archy@1.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|arrify@1.0.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|caching-transform@1.0.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|convert-source-map@1.5.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|debug-log@1.0.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|default-require-extensions@1.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|find-cache-dir@0.1.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|find-up@2.1.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|foreground-child@1.5.6",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|glob@7.1.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-coverage@1.1.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-hook@1.1.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-instrument@1.9.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-report@1.1.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-source-maps@1.2.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-reports@1.1.3",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|md5-hex@1.3.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|merge-source-map@1.0.4",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|micromatch@2.3.11",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|mkdirp@0.5.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|resolve-from@2.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|rimraf@2.6.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|signal-exit@3.0.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|spawn-wrap@1.4.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|test-exclude@4.1.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yargs-parser@8.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yargs@10.0.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|archy@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|arrify@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|caching-transform@1.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|md5-hex@1.3.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|mkdirp@0.5.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|write-file-atomic@1.3.4"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|convert-source-map@1.5.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|debug-log@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|default-require-extensions@1.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|strip-bom@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|find-cache-dir@0.1.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|commondir@1.0.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|mkdirp@0.5.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pkg-dir@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|find-up@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|locate-path@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|foreground-child@1.5.6",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|cross-spawn@4.0.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|signal-exit@3.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|glob@7.1.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|fs.realpath@1.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|inflight@1.0.6",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|inherits@2.0.3",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|minimatch@3.0.4",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|once@1.4.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-coverage@1.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-hook@1.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|append-transform@0.4.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-instrument@1.9.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-generator@6.26.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-template@6.26.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-traverse@6.26.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-types@6.26.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babylon@6.18.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-coverage@1.1.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|semver@5.4.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-report@1.1.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-coverage@1.1.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|mkdirp@0.5.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|path-parse@1.0.5",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-report@1.1.2|supports-color@3.2.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-report@1.1.2|supports-color@3.2.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|has-flag@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-source-maps@1.2.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-source-maps@1.2.2|debug@3.1.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-coverage@1.1.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|mkdirp@0.5.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|rimraf@2.6.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|source-map@0.5.7"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-lib-source-maps@1.2.2|debug@3.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|ms@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|istanbul-reports@1.1.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|handlebars@4.0.11"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|md5-hex@1.3.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|md5-o-matic@0.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|merge-source-map@1.0.4",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|source-map@0.5.7"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|micromatch@2.3.11",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|arr-diff@2.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|array-unique@0.2.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|braces@1.8.5",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|expand-brackets@0.1.5",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|extglob@0.3.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|filename-regex@2.0.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-extglob@1.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-glob@2.0.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|kind-of@3.2.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|normalize-path@2.1.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|object.omit@2.0.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|parse-glob@3.0.4",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|regex-cache@0.4.4"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|mkdirp@0.5.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|minimist@0.0.8"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|resolve-from@2.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|rimraf@2.6.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|glob@7.1.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|signal-exit@3.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|spawn-wrap@1.4.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|foreground-child@1.5.6",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|mkdirp@0.5.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|os-homedir@1.0.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|rimraf@2.6.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|signal-exit@3.0.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|which@1.3.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|test-exclude@4.1.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|arrify@1.0.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|micromatch@2.3.11",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|object-assign@4.1.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|read-pkg-up@1.0.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|require-main-filename@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yargs-parser@8.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yargs-parser@8.0.0|camelcase@4.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yargs-parser@8.0.0|camelcase@4.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yargs@10.0.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yargs@10.0.3|cliui@3.2.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|decamelize@1.2.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|find-up@2.1.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|get-caller-file@1.0.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|os-locale@2.1.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|require-directory@2.1.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|require-main-filename@1.0.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|set-blocking@2.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|string-width@2.1.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|which-module@2.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|y18n@3.2.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yargs-parser@8.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yargs@10.0.3|cliui@3.2.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yargs@10.0.3|cliui@3.2.0|string-width@1.0.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|strip-ansi@3.0.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|wrap-ansi@2.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yargs@10.0.3|cliui@3.2.0|string-width@1.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|code-point-at@1.1.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-fullwidth-code-point@1.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|write-file-atomic@1.3.4",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|graceful-fs@4.1.11",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|imurmurhash@0.1.4",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|slide@1.1.6"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|strip-bom@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-utf8@0.2.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|commondir@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pkg-dir@1.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pkg-dir@1.0.0|find-up@1.1.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pkg-dir@1.0.0|find-up@1.1.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|path-exists@2.1.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|locate-path@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|p-locate@2.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|locate-path@2.0.0|path-exists@3.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|locate-path@2.0.0|path-exists@3.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|cross-spawn@4.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|lru-cache@4.1.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|which@1.3.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|fs.realpath@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|inflight@1.0.6",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|once@1.4.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|wrappy@1.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|inherits@2.0.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|minimatch@3.0.4",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|brace-expansion@1.1.8"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|once@1.4.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|wrappy@1.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|path-is-absolute@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|append-transform@0.4.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|default-require-extensions@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-generator@6.26.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-messages@6.23.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-runtime@6.26.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-types@6.26.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|detect-indent@4.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|jsesc@1.3.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|lodash@4.17.4",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|source-map@0.5.7",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|trim-right@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-template@6.26.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-runtime@6.26.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-traverse@6.26.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-types@6.26.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babylon@6.18.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|lodash@4.17.4"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-traverse@6.26.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-code-frame@6.26.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-messages@6.23.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-runtime@6.26.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-types@6.26.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babylon@6.18.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|debug@2.6.9",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|globals@9.18.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|invariant@2.2.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|lodash@4.17.4"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-types@6.26.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-runtime@6.26.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|esutils@2.0.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|lodash@4.17.4",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|to-fast-properties@1.0.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babylon@6.18.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|semver@5.4.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|path-parse@1.0.5"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|source-map@0.5.7"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|handlebars@4.0.11",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|async@1.5.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|optimist@0.6.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|handlebars@4.0.11|source-map@0.4.4",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|uglify-js@2.8.29"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|handlebars@4.0.11|source-map@0.4.4",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|amdefine@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|md5-o-matic@0.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|arr-diff@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|arr-flatten@1.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|array-unique@0.2.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|braces@1.8.5",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|expand-range@1.8.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|preserve@0.2.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|repeat-element@1.1.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|expand-brackets@0.1.5",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-posix-bracket@0.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|extglob@0.3.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-extglob@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|filename-regex@2.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-extglob@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-glob@2.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-extglob@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|kind-of@3.2.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-buffer@1.1.6"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|normalize-path@2.1.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|remove-trailing-separator@1.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|object.omit@2.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|for-own@0.1.5",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-extendable@0.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|parse-glob@3.0.4",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|glob-base@0.3.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-dotfile@1.0.3",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-extglob@1.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-glob@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|regex-cache@0.4.4",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-equal-shallow@0.1.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|minimist@0.0.8"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|os-homedir@1.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|which@1.3.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|isexe@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|object-assign@4.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|read-pkg-up@1.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|read-pkg-up@1.0.1|find-up@1.1.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|read-pkg@1.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|read-pkg-up@1.0.1|find-up@1.1.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|path-exists@2.1.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|require-main-filename@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|decamelize@1.2.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|get-caller-file@1.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|os-locale@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|execa@0.7.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|lcid@1.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|mem@1.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|require-directory@2.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|set-blocking@2.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|string-width@2.1.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|string-width@2.1.1|is-fullwidth-code-point@2.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|string-width@2.1.1|strip-ansi@4.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|string-width@2.1.1|is-fullwidth-code-point@2.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|string-width@2.1.1|strip-ansi@4.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|string-width@2.1.1|ansi-regex@3.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|string-width@2.1.1|ansi-regex@3.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|which-module@2.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|y18n@3.2.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|graceful-fs@4.1.11"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|imurmurhash@0.1.4"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|slide@1.1.6"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-utf8@0.2.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|p-locate@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|p-limit@1.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|lru-cache@4.1.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pseudomap@1.0.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yallist@2.1.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|wrappy@1.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|brace-expansion@1.1.8",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|balanced-match@1.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|concat-map@0.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-messages@6.23.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-runtime@6.26.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-runtime@6.26.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|core-js@2.5.3",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|regenerator-runtime@0.11.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|detect-indent@4.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|repeating@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|jsesc@1.3.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|lodash@4.17.4"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|trim-right@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|babel-code-frame@6.26.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|chalk@1.1.3",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|esutils@2.0.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|js-tokens@3.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|debug@2.6.9",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|ms@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|globals@9.18.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|invariant@2.2.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|loose-envify@1.3.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|esutils@2.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|to-fast-properties@1.0.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|has-flag@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|ms@2.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|async@1.5.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|optimist@0.6.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|minimist@0.0.8",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|wordwrap@0.0.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|uglify-js@2.8.29",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|source-map@0.5.7",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|uglify-to-browserify@1.0.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|uglify-js@2.8.29|yargs@3.10.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|uglify-js@2.8.29|yargs@3.10.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|camelcase@1.2.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|cliui@2.1.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|decamelize@1.2.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|window-size@0.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|arr-flatten@1.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|expand-range@1.8.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|fill-range@2.2.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|preserve@0.2.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|repeat-element@1.1.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-posix-bracket@0.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-buffer@1.1.6"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|remove-trailing-separator@1.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|for-own@0.1.5",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|for-in@1.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-extendable@0.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|glob-base@0.3.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|glob-parent@2.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-glob@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-dotfile@1.0.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-equal-shallow@0.1.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-primitive@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|isexe@2.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|read-pkg@1.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|load-json-file@1.1.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|normalize-package-data@2.4.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|path-type@1.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|strip-ansi@3.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|wrap-ansi@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|wrap-ansi@2.1.0|string-width@1.0.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|wrap-ansi@2.1.0|string-width@1.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|code-point-at@1.1.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-fullwidth-code-point@1.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|execa@0.7.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|execa@0.7.0|cross-spawn@5.1.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|get-stream@3.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-stream@1.1.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|npm-run-path@2.0.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|p-finally@1.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|signal-exit@3.0.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|strip-eof@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|execa@0.7.0|cross-spawn@5.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|lru-cache@4.1.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|shebang-command@1.2.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|which@1.3.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|lcid@1.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|invert-kv@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|mem@1.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|mimic-fn@1.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|path-exists@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pinkie-promise@2.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pinkie@2.0.4"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|p-limit@1.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pseudomap@1.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|yallist@2.1.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|balanced-match@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|concat-map@0.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|core-js@2.5.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|regenerator-runtime@0.11.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|repeating@2.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-finite@1.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|chalk@1.1.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|ansi-styles@2.2.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|escape-string-regexp@1.0.5",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|has-ansi@2.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|strip-ansi@3.0.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|supports-color@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|js-tokens@3.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|loose-envify@1.3.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|js-tokens@3.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|wordwrap@0.0.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|amdefine@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|uglify-to-browserify@1.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|fill-range@2.2.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-number@2.1.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|isobject@2.1.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|randomatic@1.1.7",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|repeat-element@1.1.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|repeat-string@1.6.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|for-in@1.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|glob-parent@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-glob@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-primitive@2.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|load-json-file@1.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|graceful-fs@4.1.11",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|parse-json@2.2.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pify@2.3.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pinkie-promise@2.0.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|strip-bom@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|normalize-package-data@2.4.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|hosted-git-info@2.5.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-builtin-module@1.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|semver@5.4.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|validate-npm-package-license@3.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|path-type@1.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|graceful-fs@4.1.11",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pify@2.3.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|code-point-at@1.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-fullwidth-code-point@1.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|ansi-regex@2.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|get-stream@3.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-stream@1.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|npm-run-path@2.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|path-key@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|p-finally@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|strip-eof@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|invert-kv@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|mimic-fn@1.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pinkie@2.0.4"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-finite@1.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|ansi-styles@2.2.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|escape-string-regexp@1.0.5"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|has-ansi@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|supports-color@2.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|camelcase@1.2.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|cliui@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|center-align@0.1.3",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|right-align@0.1.3",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|cliui@2.1.0|wordwrap@0.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|cliui@2.1.0|wordwrap@0.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|window-size@0.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-number@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|kind-of@3.2.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|isobject@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|isarray@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|randomatic@1.1.7",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|randomatic@1.1.7|is-number@3.0.0",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|randomatic@1.1.7|kind-of@4.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|randomatic@1.1.7|is-number@3.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|randomatic@1.1.7|is-number@3.0.0|kind-of@3.2.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|randomatic@1.1.7|is-number@3.0.0|kind-of@3.2.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-buffer@1.1.6"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|randomatic@1.1.7|kind-of@4.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-buffer@1.1.6"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|repeat-string@1.6.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|parse-json@2.2.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|error-ex@1.3.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|pify@2.3.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|hosted-git-info@2.5.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-builtin-module@1.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|builtin-modules@1.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|validate-npm-package-license@3.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|spdx-correct@1.0.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|spdx-expression-parse@1.0.4"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|number-is-nan@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|shebang-command@1.2.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|shebang-regex@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|path-key@2.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|center-align@0.1.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|align-text@0.1.4",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|lazy-cache@1.0.4"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|right-align@0.1.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|align-text@0.1.4"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|isarray@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|error-ex@1.3.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-arrayish@0.2.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|builtin-modules@1.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|spdx-correct@1.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|spdx-license-ids@1.2.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|spdx-expression-parse@1.0.4"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|shebang-regex@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|align-text@0.1.4",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|kind-of@3.2.2",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|longest@1.0.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1|repeat-string@1.6.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|lazy-cache@1.0.4"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|is-arrayish@0.2.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|spdx-license-ids@1.2.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|nyc@11.4.1|longest@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|safe-buffer@5.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|chalk@1.1.3",
        "ssri@5.3.0-tuxcare.1|conventional-changelog@1.1.11",
        "ssri@5.3.0-tuxcare.1|conventional-recommended-bump@1.2.1",
        "ssri@5.3.0-tuxcare.1|dotgitignore@1.0.3",
        "ssri@5.3.0-tuxcare.1|figures@1.7.0",
        "ssri@5.3.0-tuxcare.1|fs-access@1.0.1",
        "ssri@5.3.0-tuxcare.1|semver@5.3.0",
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|yargs@8.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|yargs@8.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|camelcase@4.1.0",
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|cliui@3.2.0",
        "ssri@5.3.0-tuxcare.1|decamelize@1.2.0",
        "ssri@5.3.0-tuxcare.1|get-caller-file@1.0.2",
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|os-locale@2.1.0",
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|read-pkg-up@2.0.0",
        "ssri@5.3.0-tuxcare.1|require-directory@2.1.1",
        "ssri@5.3.0-tuxcare.1|require-main-filename@1.0.1",
        "ssri@5.3.0-tuxcare.1|set-blocking@2.0.0",
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|string-width@2.1.1",
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|which-module@2.0.0",
        "ssri@5.3.0-tuxcare.1|y18n@3.2.1",
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|yargs-parser@7.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|camelcase@4.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|cliui@3.2.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|cliui@3.2.0|string-width@1.0.2",
        "ssri@5.3.0-tuxcare.1|strip-ansi@3.0.1",
        "ssri@5.3.0-tuxcare.1|wrap-ansi@2.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|cliui@3.2.0|string-width@1.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|code-point-at@1.1.0",
        "ssri@5.3.0-tuxcare.1|is-fullwidth-code-point@1.0.0",
        "ssri@5.3.0-tuxcare.1|strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|os-locale@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|execa@0.7.0",
        "ssri@5.3.0-tuxcare.1|lcid@1.0.0",
        "ssri@5.3.0-tuxcare.1|mem@1.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|read-pkg-up@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|find-up@2.1.0",
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|read-pkg@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|string-width@2.1.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|string-width@2.1.1|is-fullwidth-code-point@2.0.0",
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|string-width@2.1.1|strip-ansi@4.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|string-width@2.1.1|is-fullwidth-code-point@2.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|string-width@2.1.1|strip-ansi@4.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|ansi-regex@3.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|which-module@2.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|yargs-parser@7.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|camelcase@4.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|find-up@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|locate-path@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|read-pkg@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|load-json-file@2.0.0",
        "ssri@5.3.0-tuxcare.1|normalize-package-data@2.3.6",
        "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|path-type@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|load-json-file@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|graceful-fs@4.1.11",
        "ssri@5.3.0-tuxcare.1|parse-json@2.2.0",
        "ssri@5.3.0-tuxcare.1|pify@2.3.0",
        "ssri@5.3.0-tuxcare.1|strip-bom@3.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|path-type@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|pify@2.3.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-version@4.3.0|ansi-regex@3.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard@10.0.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|eslint-config-standard-jsx@4.0.2",
        "ssri@5.3.0-tuxcare.1|eslint-config-standard@10.2.1",
        "ssri@5.3.0-tuxcare.1|eslint-plugin-import@2.2.0",
        "ssri@5.3.0-tuxcare.1|eslint-plugin-node@4.2.3",
        "ssri@5.3.0-tuxcare.1|eslint-plugin-promise@3.5.0",
        "ssri@5.3.0-tuxcare.1|eslint-plugin-react@6.10.3",
        "ssri@5.3.0-tuxcare.1|eslint-plugin-standard@3.0.1",
        "ssri@5.3.0-tuxcare.1|eslint@3.19.0",
        "ssri@5.3.0-tuxcare.1|standard-engine@7.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|tap@11.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|bind-obj-methods@1.0.0",
        "ssri@5.3.0-tuxcare.1|bluebird@3.5.1",
        "ssri@5.3.0-tuxcare.1|clean-yaml-object@0.1.0",
        "ssri@5.3.0-tuxcare.1|color-support@1.1.3",
        "ssri@5.3.0-tuxcare.1|coveralls@2.13.3",
        "ssri@5.3.0-tuxcare.1|foreground-child@1.5.6",
        "ssri@5.3.0-tuxcare.1|fs-exists-cached@1.0.0",
        "ssri@5.3.0-tuxcare.1|function-loop@1.0.1",
        "ssri@5.3.0-tuxcare.1|glob@7.1.2",
        "ssri@5.3.0-tuxcare.1|isexe@2.0.0",
        "ssri@5.3.0-tuxcare.1|js-yaml@3.10.0",
        "ssri@5.3.0-tuxcare.1|minipass@2.2.1",
        "ssri@5.3.0-tuxcare.1|mkdirp@0.5.1",
        "ssri@5.3.0-tuxcare.1|nyc@11.4.1",
        "ssri@5.3.0-tuxcare.1|opener@1.4.3",
        "ssri@5.3.0-tuxcare.1|os-homedir@1.0.2",
        "ssri@5.3.0-tuxcare.1|own-or-env@1.0.0",
        "ssri@5.3.0-tuxcare.1|own-or@1.0.0",
        "ssri@5.3.0-tuxcare.1|rimraf@2.6.2",
        "ssri@5.3.0-tuxcare.1|signal-exit@3.0.2",
        "ssri@5.3.0-tuxcare.1|source-map-support@0.4.18",
        "ssri@5.3.0-tuxcare.1|stack-utils@1.0.1",
        "ssri@5.3.0-tuxcare.1|tap-mocha-reporter@3.0.6",
        "ssri@5.3.0-tuxcare.1|tap-parser@7.0.0",
        "ssri@5.3.0-tuxcare.1|tmatch@3.1.0",
        "ssri@5.3.0-tuxcare.1|trivial-deferred@1.0.1",
        "ssri@5.3.0-tuxcare.1|tsame@1.1.2",
        "ssri@5.3.0-tuxcare.1|write-file-atomic@2.3.0",
        "ssri@5.3.0-tuxcare.1|yapool@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|weallbehave@1.2.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|yargs@6.6.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|weallcontribute@1.0.8",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|hosted-git-info@2.4.2",
        "ssri@5.3.0-tuxcare.1|yargs@6.6.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|chalk@1.1.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|ansi-styles@2.2.1",
        "ssri@5.3.0-tuxcare.1|escape-string-regexp@1.0.5",
        "ssri@5.3.0-tuxcare.1|has-ansi@2.0.0",
        "ssri@5.3.0-tuxcare.1|strip-ansi@3.0.1",
        "ssri@5.3.0-tuxcare.1|supports-color@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|conventional-changelog@1.1.11",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|conventional-changelog-angular@1.6.2",
        "ssri@5.3.0-tuxcare.1|conventional-changelog-atom@0.2.0",
        "ssri@5.3.0-tuxcare.1|conventional-changelog-codemirror@0.3.0",
        "ssri@5.3.0-tuxcare.1|conventional-changelog-core@2.0.1",
        "ssri@5.3.0-tuxcare.1|conventional-changelog-ember@0.3.2",
        "ssri@5.3.0-tuxcare.1|conventional-changelog-eslint@1.0.0",
        "ssri@5.3.0-tuxcare.1|conventional-changelog-express@0.3.0",
        "ssri@5.3.0-tuxcare.1|conventional-changelog-jquery@0.1.0",
        "ssri@5.3.0-tuxcare.1|conventional-changelog-jscs@0.1.0",
        "ssri@5.3.0-tuxcare.1|conventional-changelog-jshint@0.3.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|conventional-recommended-bump@1.2.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|concat-stream@1.6.0",
        "ssri@5.3.0-tuxcare.1|conventional-commits-filter@1.1.1",
        "ssri@5.3.0-tuxcare.1|conventional-commits-parser@2.1.1",
        "ssri@5.3.0-tuxcare.1|git-raw-commits@1.3.0",
        "ssri@5.3.0-tuxcare.1|git-semver-tags@1.3.0",
        "ssri@5.3.0-tuxcare.1|meow@3.7.0",
        "ssri@5.3.0-tuxcare.1|object-assign@4.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|dotgitignore@1.0.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|dotgitignore@1.0.3|find-up@2.1.0",
        "ssri@5.3.0-tuxcare.1|minimatch@3.0.4"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|dotgitignore@1.0.3|find-up@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|locate-path@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|figures@1.7.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|escape-string-regexp@1.0.5",
        "ssri@5.3.0-tuxcare.1|object-assign@4.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|fs-access@1.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|null-check@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|semver@5.3.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|eslint-config-standard-jsx@4.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|eslint-plugin-react@6.10.3",
        "ssri@5.3.0-tuxcare.1|eslint@3.19.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|eslint-config-standard@10.2.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|eslint-plugin-import@2.2.0",
        "ssri@5.3.0-tuxcare.1|eslint-plugin-node@4.2.3",
        "ssri@5.3.0-tuxcare.1|eslint-plugin-promise@3.5.0",
        "ssri@5.3.0-tuxcare.1|eslint-plugin-standard@3.0.1",
        "ssri@5.3.0-tuxcare.1|eslint@3.19.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|eslint-plugin-import@2.2.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|builtin-modules@1.1.1",
        "ssri@5.3.0-tuxcare.1|contains-path@0.1.0",
        "ssri@5.3.0-tuxcare.1|debug@2.6.9",
        "ssri@5.3.0-tuxcare.1|eslint-plugin-import@2.2.0|doctrine@1.5.0",
        "ssri@5.3.0-tuxcare.1|eslint-import-resolver-node@0.2.3",
        "ssri@5.3.0-tuxcare.1|eslint-module-utils@2.1.1",
        "ssri@5.3.0-tuxcare.1|eslint@3.19.0",
        "ssri@5.3.0-tuxcare.1|has@1.0.1",
        "ssri@5.3.0-tuxcare.1|lodash.cond@4.5.2",
        "ssri@5.3.0-tuxcare.1|minimatch@3.0.4",
        "ssri@5.3.0-tuxcare.1|pkg-up@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|eslint-plugin-import@2.2.0|doctrine@1.5.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|esutils@2.0.2",
        "ssri@5.3.0-tuxcare.1|isarray@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|eslint-plugin-node@4.2.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|eslint@3.19.0",
        "ssri@5.3.0-tuxcare.1|ignore@3.3.7",
        "ssri@5.3.0-tuxcare.1|minimatch@3.0.4",
        "ssri@5.3.0-tuxcare.1|object-assign@4.1.1",
        "ssri@5.3.0-tuxcare.1|resolve@1.5.0",
        "ssri@5.3.0-tuxcare.1|semver@5.3.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|eslint-plugin-promise@3.5.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|eslint-plugin-react@6.10.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|array.prototype.find@2.0.4",
        "ssri@5.3.0-tuxcare.1|eslint-plugin-react@6.10.3|doctrine@1.5.0",
        "ssri@5.3.0-tuxcare.1|eslint@3.19.0",
        "ssri@5.3.0-tuxcare.1|has@1.0.1",
        "ssri@5.3.0-tuxcare.1|jsx-ast-utils@1.4.1",
        "ssri@5.3.0-tuxcare.1|object.assign@4.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|eslint-plugin-react@6.10.3|doctrine@1.5.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|esutils@2.0.2",
        "ssri@5.3.0-tuxcare.1|isarray@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|eslint-plugin-standard@3.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|eslint@3.19.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|eslint@3.19.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|babel-code-frame@6.26.0",
        "ssri@5.3.0-tuxcare.1|chalk@1.1.3",
        "ssri@5.3.0-tuxcare.1|concat-stream@1.6.0",
        "ssri@5.3.0-tuxcare.1|debug@2.6.9",
        "ssri@5.3.0-tuxcare.1|doctrine@2.1.0",
        "ssri@5.3.0-tuxcare.1|escope@3.6.0",
        "ssri@5.3.0-tuxcare.1|espree@3.5.3",
        "ssri@5.3.0-tuxcare.1|esquery@1.0.0",
        "ssri@5.3.0-tuxcare.1|estraverse@4.2.0",
        "ssri@5.3.0-tuxcare.1|esutils@2.0.2",
        "ssri@5.3.0-tuxcare.1|file-entry-cache@2.0.0",
        "ssri@5.3.0-tuxcare.1|glob@7.1.2",
        "ssri@5.3.0-tuxcare.1|globals@9.18.0",
        "ssri@5.3.0-tuxcare.1|ignore@3.3.7",
        "ssri@5.3.0-tuxcare.1|imurmurhash@0.1.4",
        "ssri@5.3.0-tuxcare.1|inquirer@0.12.0",
        "ssri@5.3.0-tuxcare.1|is-my-json-valid@2.17.1",
        "ssri@5.3.0-tuxcare.1|is-resolvable@1.1.0",
        "ssri@5.3.0-tuxcare.1|js-yaml@3.10.0",
        "ssri@5.3.0-tuxcare.1|json-stable-stringify@1.0.1",
        "ssri@5.3.0-tuxcare.1|levn@0.3.0",
        "ssri@5.3.0-tuxcare.1|lodash@4.17.5",
        "ssri@5.3.0-tuxcare.1|mkdirp@0.5.1",
        "ssri@5.3.0-tuxcare.1|natural-compare@1.4.0",
        "ssri@5.3.0-tuxcare.1|optionator@0.8.2",
        "ssri@5.3.0-tuxcare.1|path-is-inside@1.0.2",
        "ssri@5.3.0-tuxcare.1|pluralize@1.2.1",
        "ssri@5.3.0-tuxcare.1|progress@1.1.8",
        "ssri@5.3.0-tuxcare.1|require-uncached@1.0.3",
        "ssri@5.3.0-tuxcare.1|shelljs@0.7.8",
        "ssri@5.3.0-tuxcare.1|strip-bom@3.0.0",
        "ssri@5.3.0-tuxcare.1|strip-json-comments@2.0.1",
        "ssri@5.3.0-tuxcare.1|table@3.8.3",
        "ssri@5.3.0-tuxcare.1|text-table@0.2.0",
        "ssri@5.3.0-tuxcare.1|user-home@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-engine@7.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|deglob@2.1.0",
        "ssri@5.3.0-tuxcare.1|get-stdin@5.0.1",
        "ssri@5.3.0-tuxcare.1|standard-engine@7.0.0|minimist@1.2.0",
        "ssri@5.3.0-tuxcare.1|pkg-conf@2.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|standard-engine@7.0.0|minimist@1.2.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|bind-obj-methods@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|bluebird@3.5.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|clean-yaml-object@0.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|color-support@1.1.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|coveralls@2.13.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|coveralls@2.13.3|js-yaml@3.6.1",
        "ssri@5.3.0-tuxcare.1|lcov-parse@0.0.10",
        "ssri@5.3.0-tuxcare.1|log-driver@1.2.5",
        "ssri@5.3.0-tuxcare.1|coveralls@2.13.3|minimist@1.2.0",
        "ssri@5.3.0-tuxcare.1|request@2.79.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|coveralls@2.13.3|js-yaml@3.6.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|argparse@1.0.9",
        "ssri@5.3.0-tuxcare.1|coveralls@2.13.3|esprima@2.7.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|coveralls@2.13.3|minimist@1.2.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|coveralls@2.13.3|esprima@2.7.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|foreground-child@1.5.6",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|foreground-child@1.5.6|cross-spawn@4.0.2",
        "ssri@5.3.0-tuxcare.1|signal-exit@3.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|foreground-child@1.5.6|cross-spawn@4.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|lru-cache@4.1.1",
        "ssri@5.3.0-tuxcare.1|which@1.3.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|fs-exists-cached@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|function-loop@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|glob@7.1.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|fs.realpath@1.0.0",
        "ssri@5.3.0-tuxcare.1|inflight@1.0.6",
        "ssri@5.3.0-tuxcare.1|inherits@2.0.3",
        "ssri@5.3.0-tuxcare.1|minimatch@3.0.4",
        "ssri@5.3.0-tuxcare.1|once@1.4.0",
        "ssri@5.3.0-tuxcare.1|path-is-absolute@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|isexe@2.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|js-yaml@3.10.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|argparse@1.0.9",
        "ssri@5.3.0-tuxcare.1|esprima@4.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|minipass@2.2.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|minipass@2.2.1|yallist@3.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|minipass@2.2.1|yallist@3.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|mkdirp@0.5.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|minimist@0.0.8"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|opener@1.4.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|os-homedir@1.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|own-or-env@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|own-or@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|rimraf@2.6.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|glob@7.1.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|signal-exit@3.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|source-map-support@0.4.18",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|source-map-support@0.4.18|source-map@0.5.7"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|source-map-support@0.4.18|source-map@0.5.7"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|stack-utils@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|tap-mocha-reporter@3.0.6",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|color-support@1.1.3",
        "ssri@5.3.0-tuxcare.1|debug@2.6.9",
        "ssri@5.3.0-tuxcare.1|diff@1.4.0",
        "ssri@5.3.0-tuxcare.1|escape-string-regexp@1.0.5",
        "ssri@5.3.0-tuxcare.1|glob@7.1.2",
        "ssri@5.3.0-tuxcare.1|js-yaml@3.10.0",
        "ssri@5.3.0-tuxcare.1|readable-stream@2.3.3",
        "ssri@5.3.0-tuxcare.1|tap-mocha-reporter@3.0.6|tap-parser@5.4.0",
        "ssri@5.3.0-tuxcare.1|unicode-length@1.0.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|tap-mocha-reporter@3.0.6|tap-parser@5.4.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|events-to-array@1.1.2",
        "ssri@5.3.0-tuxcare.1|js-yaml@3.10.0",
        "ssri@5.3.0-tuxcare.1|readable-stream@2.3.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|tap-parser@7.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|events-to-array@1.1.2",
        "ssri@5.3.0-tuxcare.1|js-yaml@3.10.0",
        "ssri@5.3.0-tuxcare.1|minipass@2.2.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|tmatch@3.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|trivial-deferred@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|tsame@1.1.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|write-file-atomic@2.3.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|graceful-fs@4.1.11",
        "ssri@5.3.0-tuxcare.1|imurmurhash@0.1.4",
        "ssri@5.3.0-tuxcare.1|signal-exit@3.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|yapool@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|yargs@6.6.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|yargs@6.6.0|camelcase@3.0.0",
        "ssri@5.3.0-tuxcare.1|yargs@6.6.0|cliui@3.2.0",
        "ssri@5.3.0-tuxcare.1|decamelize@1.2.0",
        "ssri@5.3.0-tuxcare.1|get-caller-file@1.0.2",
        "ssri@5.3.0-tuxcare.1|os-locale@1.4.0",
        "ssri@5.3.0-tuxcare.1|read-pkg-up@1.0.1",
        "ssri@5.3.0-tuxcare.1|require-directory@2.1.1",
        "ssri@5.3.0-tuxcare.1|require-main-filename@1.0.1",
        "ssri@5.3.0-tuxcare.1|set-blocking@2.0.0",
        "ssri@5.3.0-tuxcare.1|string-width@1.0.2",
        "ssri@5.3.0-tuxcare.1|which-module@1.0.0",
        "ssri@5.3.0-tuxcare.1|y18n@3.2.1",
        "ssri@5.3.0-tuxcare.1|yargs-parser@4.2.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|yargs@6.6.0|camelcase@3.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|yargs@6.6.0|cliui@3.2.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|string-width@1.0.2",
        "ssri@5.3.0-tuxcare.1|strip-ansi@3.0.1",
        "ssri@5.3.0-tuxcare.1|wrap-ansi@2.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|hosted-git-info@2.4.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|ansi-styles@2.2.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|escape-string-regexp@1.0.5"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|has-ansi@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|strip-ansi@3.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|ansi-regex@2.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|supports-color@2.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-angular@1.6.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|compare-func@1.3.2",
        "ssri@5.3.0-tuxcare.1|q@1.5.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-atom@0.2.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|q@1.5.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-codemirror@0.3.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|q@1.5.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-core@2.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|conventional-changelog-writer@3.0.0",
        "ssri@5.3.0-tuxcare.1|conventional-commits-parser@2.1.1",
        "ssri@5.3.0-tuxcare.1|dateformat@1.0.12",
        "ssri@5.3.0-tuxcare.1|get-pkg-repo@1.4.0",
        "ssri@5.3.0-tuxcare.1|git-raw-commits@1.3.0",
        "ssri@5.3.0-tuxcare.1|git-remote-origin-url@2.0.0",
        "ssri@5.3.0-tuxcare.1|git-semver-tags@1.3.0",
        "ssri@5.3.0-tuxcare.1|lodash@4.17.5",
        "ssri@5.3.0-tuxcare.1|normalize-package-data@2.3.6",
        "ssri@5.3.0-tuxcare.1|q@1.5.1",
        "ssri@5.3.0-tuxcare.1|read-pkg-up@1.0.1",
        "ssri@5.3.0-tuxcare.1|read-pkg@1.1.0",
        "ssri@5.3.0-tuxcare.1|through2@2.0.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-ember@0.3.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|q@1.5.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-eslint@1.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|q@1.5.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-express@0.3.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|q@1.5.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-jquery@0.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|q@1.5.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-jscs@0.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|q@1.5.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-jshint@0.3.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|compare-func@1.3.2",
        "ssri@5.3.0-tuxcare.1|q@1.5.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|concat-stream@1.6.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|inherits@2.0.3",
        "ssri@5.3.0-tuxcare.1|readable-stream@2.3.3",
        "ssri@5.3.0-tuxcare.1|typedarray@0.0.6"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|conventional-commits-filter@1.1.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|is-subset@0.1.1",
        "ssri@5.3.0-tuxcare.1|modify-values@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|conventional-commits-parser@2.1.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|is-text-path@1.0.1",
        "ssri@5.3.0-tuxcare.1|JSONStream@1.3.2",
        "ssri@5.3.0-tuxcare.1|lodash@4.17.5",
        "ssri@5.3.0-tuxcare.1|meow@3.7.0",
        "ssri@5.3.0-tuxcare.1|split2@2.2.0",
        "ssri@5.3.0-tuxcare.1|through2@2.0.3",
        "ssri@5.3.0-tuxcare.1|trim-off-newlines@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|git-raw-commits@1.3.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|dargs@4.1.0",
        "ssri@5.3.0-tuxcare.1|lodash.template@4.4.0",
        "ssri@5.3.0-tuxcare.1|meow@3.7.0",
        "ssri@5.3.0-tuxcare.1|split2@2.2.0",
        "ssri@5.3.0-tuxcare.1|through2@2.0.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|git-semver-tags@1.3.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|meow@3.7.0",
        "ssri@5.3.0-tuxcare.1|semver@5.3.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|meow@3.7.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|camelcase-keys@2.1.0",
        "ssri@5.3.0-tuxcare.1|decamelize@1.2.0",
        "ssri@5.3.0-tuxcare.1|loud-rejection@1.6.0",
        "ssri@5.3.0-tuxcare.1|map-obj@1.0.1",
        "ssri@5.3.0-tuxcare.1|meow@3.7.0|minimist@1.2.0",
        "ssri@5.3.0-tuxcare.1|normalize-package-data@2.3.6",
        "ssri@5.3.0-tuxcare.1|object-assign@4.1.1",
        "ssri@5.3.0-tuxcare.1|read-pkg-up@1.0.1",
        "ssri@5.3.0-tuxcare.1|redent@1.0.0",
        "ssri@5.3.0-tuxcare.1|trim-newlines@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|meow@3.7.0|minimist@1.2.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|object-assign@4.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|minimatch@3.0.4",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|brace-expansion@1.1.8"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|null-check@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|decamelize@1.2.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|get-caller-file@1.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|require-directory@2.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|require-main-filename@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|set-blocking@2.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|y18n@3.2.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|builtin-modules@1.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|contains-path@0.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|debug@2.6.9",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|ms@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|eslint-import-resolver-node@0.2.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|debug@2.6.9",
        "ssri@5.3.0-tuxcare.1|object-assign@4.1.1",
        "ssri@5.3.0-tuxcare.1|resolve@1.5.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|eslint-module-utils@2.1.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|debug@2.6.9",
        "ssri@5.3.0-tuxcare.1|pkg-dir@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|has@1.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|function-bind@1.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|lodash.cond@4.5.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|pkg-up@1.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|find-up@1.1.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|ignore@3.3.7"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|resolve@1.5.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|path-parse@1.0.5"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|array.prototype.find@2.0.4",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|define-properties@1.1.2",
        "ssri@5.3.0-tuxcare.1|es-abstract@1.10.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|jsx-ast-utils@1.4.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|object.assign@4.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|define-properties@1.1.2",
        "ssri@5.3.0-tuxcare.1|function-bind@1.1.1",
        "ssri@5.3.0-tuxcare.1|has-symbols@1.0.0",
        "ssri@5.3.0-tuxcare.1|object-keys@1.0.11"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|babel-code-frame@6.26.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|chalk@1.1.3",
        "ssri@5.3.0-tuxcare.1|esutils@2.0.2",
        "ssri@5.3.0-tuxcare.1|js-tokens@3.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|doctrine@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|esutils@2.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|escope@3.6.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|es6-map@0.1.5",
        "ssri@5.3.0-tuxcare.1|es6-weak-map@2.0.2",
        "ssri@5.3.0-tuxcare.1|esrecurse@4.2.0",
        "ssri@5.3.0-tuxcare.1|estraverse@4.2.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|espree@3.5.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|acorn-jsx@3.0.1",
        "ssri@5.3.0-tuxcare.1|acorn@5.4.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|esquery@1.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|estraverse@4.2.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|estraverse@4.2.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|esutils@2.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|file-entry-cache@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|flat-cache@1.3.0",
        "ssri@5.3.0-tuxcare.1|object-assign@4.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|globals@9.18.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|imurmurhash@0.1.4"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|inquirer@0.12.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|ansi-escapes@1.4.0",
        "ssri@5.3.0-tuxcare.1|ansi-regex@2.1.1",
        "ssri@5.3.0-tuxcare.1|chalk@1.1.3",
        "ssri@5.3.0-tuxcare.1|cli-cursor@1.0.2",
        "ssri@5.3.0-tuxcare.1|cli-width@2.2.0",
        "ssri@5.3.0-tuxcare.1|figures@1.7.0",
        "ssri@5.3.0-tuxcare.1|lodash@4.17.5",
        "ssri@5.3.0-tuxcare.1|readline2@1.0.1",
        "ssri@5.3.0-tuxcare.1|run-async@0.1.0",
        "ssri@5.3.0-tuxcare.1|rx-lite@3.1.2",
        "ssri@5.3.0-tuxcare.1|string-width@1.0.2",
        "ssri@5.3.0-tuxcare.1|strip-ansi@3.0.1",
        "ssri@5.3.0-tuxcare.1|through@2.3.8"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-my-json-valid@2.17.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|generate-function@2.0.0",
        "ssri@5.3.0-tuxcare.1|generate-object-property@1.2.0",
        "ssri@5.3.0-tuxcare.1|jsonpointer@4.0.1",
        "ssri@5.3.0-tuxcare.1|xtend@4.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-resolvable@1.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|json-stable-stringify@1.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|jsonify@0.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|levn@0.3.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|prelude-ls@1.1.2",
        "ssri@5.3.0-tuxcare.1|type-check@0.3.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|lodash@4.17.5"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|natural-compare@1.4.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|optionator@0.8.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|deep-is@0.1.3",
        "ssri@5.3.0-tuxcare.1|fast-levenshtein@2.0.6",
        "ssri@5.3.0-tuxcare.1|levn@0.3.0",
        "ssri@5.3.0-tuxcare.1|prelude-ls@1.1.2",
        "ssri@5.3.0-tuxcare.1|type-check@0.3.2",
        "ssri@5.3.0-tuxcare.1|wordwrap@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|path-is-inside@1.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|pluralize@1.2.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|progress@1.1.8"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|require-uncached@1.0.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|caller-path@0.1.0",
        "ssri@5.3.0-tuxcare.1|resolve-from@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|shelljs@0.7.8",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|glob@7.1.2",
        "ssri@5.3.0-tuxcare.1|interpret@1.1.0",
        "ssri@5.3.0-tuxcare.1|rechoir@0.6.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|strip-bom@3.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|strip-json-comments@2.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|table@3.8.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|ajv-keywords@1.5.1",
        "ssri@5.3.0-tuxcare.1|ajv@4.11.8",
        "ssri@5.3.0-tuxcare.1|chalk@1.1.3",
        "ssri@5.3.0-tuxcare.1|lodash@4.17.5",
        "ssri@5.3.0-tuxcare.1|slice-ansi@0.0.4",
        "ssri@5.3.0-tuxcare.1|table@3.8.3|string-width@2.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|table@3.8.3|string-width@2.1.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|table@3.8.3|is-fullwidth-code-point@2.0.0",
        "ssri@5.3.0-tuxcare.1|table@3.8.3|strip-ansi@4.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|table@3.8.3|is-fullwidth-code-point@2.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|table@3.8.3|strip-ansi@4.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|table@3.8.3|ansi-regex@3.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|table@3.8.3|ansi-regex@3.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|text-table@0.2.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|user-home@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|os-homedir@1.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|deglob@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|find-root@1.1.0",
        "ssri@5.3.0-tuxcare.1|glob@7.1.2",
        "ssri@5.3.0-tuxcare.1|ignore@3.3.7",
        "ssri@5.3.0-tuxcare.1|pkg-config@1.1.1",
        "ssri@5.3.0-tuxcare.1|run-parallel@1.1.6",
        "ssri@5.3.0-tuxcare.1|uniq@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|get-stdin@5.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|pkg-conf@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|pkg-conf@2.1.0|find-up@2.1.0",
        "ssri@5.3.0-tuxcare.1|load-json-file@4.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|pkg-conf@2.1.0|find-up@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|locate-path@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|lcov-parse@0.0.10"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|log-driver@1.2.5"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|request@2.79.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|aws-sign2@0.6.0",
        "ssri@5.3.0-tuxcare.1|aws4@1.6.0",
        "ssri@5.3.0-tuxcare.1|caseless@0.11.0",
        "ssri@5.3.0-tuxcare.1|combined-stream@1.0.5",
        "ssri@5.3.0-tuxcare.1|extend@3.0.1",
        "ssri@5.3.0-tuxcare.1|forever-agent@0.6.1",
        "ssri@5.3.0-tuxcare.1|form-data@2.1.4",
        "ssri@5.3.0-tuxcare.1|har-validator@2.0.6",
        "ssri@5.3.0-tuxcare.1|hawk@3.1.3",
        "ssri@5.3.0-tuxcare.1|http-signature@1.1.1",
        "ssri@5.3.0-tuxcare.1|is-typedarray@1.0.0",
        "ssri@5.3.0-tuxcare.1|isstream@0.1.2",
        "ssri@5.3.0-tuxcare.1|json-stringify-safe@5.0.1",
        "ssri@5.3.0-tuxcare.1|mime-types@2.1.17",
        "ssri@5.3.0-tuxcare.1|oauth-sign@0.8.2",
        "ssri@5.3.0-tuxcare.1|qs@6.3.2",
        "ssri@5.3.0-tuxcare.1|stringstream@0.0.5",
        "ssri@5.3.0-tuxcare.1|tough-cookie@2.3.3",
        "ssri@5.3.0-tuxcare.1|tunnel-agent@0.4.3",
        "ssri@5.3.0-tuxcare.1|uuid@3.2.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|fs.realpath@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|inflight@1.0.6",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|once@1.4.0",
        "ssri@5.3.0-tuxcare.1|wrappy@1.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|inherits@2.0.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|once@1.4.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|wrappy@1.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|path-is-absolute@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|argparse@1.0.9",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|sprintf-js@1.0.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|esprima@4.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|minimist@0.0.8"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|diff@1.4.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|readable-stream@2.3.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|core-util-is@1.0.2",
        "ssri@5.3.0-tuxcare.1|inherits@2.0.3",
        "ssri@5.3.0-tuxcare.1|isarray@1.0.0",
        "ssri@5.3.0-tuxcare.1|process-nextick-args@1.0.7",
        "ssri@5.3.0-tuxcare.1|safe-buffer@5.1.1",
        "ssri@5.3.0-tuxcare.1|string_decoder@1.0.3",
        "ssri@5.3.0-tuxcare.1|util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|unicode-length@1.0.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|punycode@1.4.1",
        "ssri@5.3.0-tuxcare.1|strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|events-to-array@1.1.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|graceful-fs@4.1.11"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|os-locale@1.4.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|lcid@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|read-pkg-up@1.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|read-pkg-up@1.0.1|find-up@1.1.2",
        "ssri@5.3.0-tuxcare.1|read-pkg@1.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|read-pkg-up@1.0.1|find-up@1.1.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|read-pkg-up@1.0.1|path-exists@2.1.0",
        "ssri@5.3.0-tuxcare.1|pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|read-pkg-up@1.0.1|path-exists@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|string-width@1.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|code-point-at@1.1.0",
        "ssri@5.3.0-tuxcare.1|is-fullwidth-code-point@1.0.0",
        "ssri@5.3.0-tuxcare.1|strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|which-module@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|yargs-parser@4.2.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|yargs-parser@4.2.1|camelcase@3.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|yargs-parser@4.2.1|camelcase@3.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|ansi-regex@2.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|compare-func@1.3.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|array-ify@1.0.0",
        "ssri@5.3.0-tuxcare.1|dot-prop@3.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|q@1.5.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|conventional-changelog-writer@3.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|compare-func@1.3.2",
        "ssri@5.3.0-tuxcare.1|conventional-commits-filter@1.1.1",
        "ssri@5.3.0-tuxcare.1|dateformat@1.0.12",
        "ssri@5.3.0-tuxcare.1|handlebars@4.0.11",
        "ssri@5.3.0-tuxcare.1|json-stringify-safe@5.0.1",
        "ssri@5.3.0-tuxcare.1|lodash@4.17.5",
        "ssri@5.3.0-tuxcare.1|meow@3.7.0",
        "ssri@5.3.0-tuxcare.1|semver@5.3.0",
        "ssri@5.3.0-tuxcare.1|split@1.0.1",
        "ssri@5.3.0-tuxcare.1|through2@2.0.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|dateformat@1.0.12",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|dateformat@1.0.12|get-stdin@4.0.1",
        "ssri@5.3.0-tuxcare.1|meow@3.7.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|dateformat@1.0.12|get-stdin@4.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|get-pkg-repo@1.4.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|hosted-git-info@2.4.2",
        "ssri@5.3.0-tuxcare.1|meow@3.7.0",
        "ssri@5.3.0-tuxcare.1|normalize-package-data@2.3.6",
        "ssri@5.3.0-tuxcare.1|parse-github-repo-url@1.4.1",
        "ssri@5.3.0-tuxcare.1|through2@2.0.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|git-remote-origin-url@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|gitconfiglocal@1.0.0",
        "ssri@5.3.0-tuxcare.1|pify@2.3.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|normalize-package-data@2.3.6",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|hosted-git-info@2.4.2",
        "ssri@5.3.0-tuxcare.1|is-builtin-module@1.0.0",
        "ssri@5.3.0-tuxcare.1|semver@5.3.0",
        "ssri@5.3.0-tuxcare.1|validate-npm-package-license@3.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|read-pkg@1.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|read-pkg@1.1.0|load-json-file@1.1.0",
        "ssri@5.3.0-tuxcare.1|normalize-package-data@2.3.6",
        "ssri@5.3.0-tuxcare.1|path-type@1.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|read-pkg@1.1.0|load-json-file@1.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|graceful-fs@4.1.11",
        "ssri@5.3.0-tuxcare.1|parse-json@2.2.0",
        "ssri@5.3.0-tuxcare.1|pify@2.3.0",
        "ssri@5.3.0-tuxcare.1|pinkie-promise@2.0.1",
        "ssri@5.3.0-tuxcare.1|read-pkg@1.1.0|strip-bom@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|read-pkg@1.1.0|strip-bom@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|is-utf8@0.2.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|through2@2.0.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|readable-stream@2.3.3",
        "ssri@5.3.0-tuxcare.1|xtend@4.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|typedarray@0.0.6"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-subset@0.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|modify-values@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-text-path@1.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|text-extensions@1.7.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|JSONStream@1.3.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|jsonparse@1.3.1",
        "ssri@5.3.0-tuxcare.1|through@2.3.8"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|split2@2.2.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|through2@2.0.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|trim-off-newlines@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|dargs@4.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|lodash.template@4.4.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|lodash._reinterpolate@3.0.0",
        "ssri@5.3.0-tuxcare.1|lodash.templatesettings@4.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|camelcase-keys@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|camelcase@2.1.1",
        "ssri@5.3.0-tuxcare.1|map-obj@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|loud-rejection@1.6.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|currently-unhandled@0.4.1",
        "ssri@5.3.0-tuxcare.1|signal-exit@3.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|map-obj@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|redent@1.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|indent-string@2.1.0",
        "ssri@5.3.0-tuxcare.1|strip-indent@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|trim-newlines@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|locate-path@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|p-locate@2.0.0",
        "ssri@5.3.0-tuxcare.1|locate-path@2.0.0|path-exists@3.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|locate-path@2.0.0|path-exists@3.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|brace-expansion@1.1.8",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|balanced-match@1.0.0",
        "ssri@5.3.0-tuxcare.1|concat-map@0.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|wrap-ansi@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|string-width@1.0.2",
        "ssri@5.3.0-tuxcare.1|strip-ansi@3.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|execa@0.7.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|cross-spawn@5.1.0",
        "ssri@5.3.0-tuxcare.1|get-stream@3.0.0",
        "ssri@5.3.0-tuxcare.1|is-stream@1.1.0",
        "ssri@5.3.0-tuxcare.1|npm-run-path@2.0.2",
        "ssri@5.3.0-tuxcare.1|p-finally@1.0.0",
        "ssri@5.3.0-tuxcare.1|signal-exit@3.0.2",
        "ssri@5.3.0-tuxcare.1|strip-eof@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|lcid@1.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|invert-kv@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|mem@1.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|mimic-fn@1.2.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|ms@2.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|isarray@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|pkg-dir@1.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|find-up@1.1.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|function-bind@1.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|find-up@1.1.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|path-exists@2.1.0",
        "ssri@5.3.0-tuxcare.1|pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|path-parse@1.0.5"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|define-properties@1.1.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|foreach@2.0.5",
        "ssri@5.3.0-tuxcare.1|object-keys@1.0.11"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|es-abstract@1.10.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|es-to-primitive@1.1.1",
        "ssri@5.3.0-tuxcare.1|function-bind@1.1.1",
        "ssri@5.3.0-tuxcare.1|has@1.0.1",
        "ssri@5.3.0-tuxcare.1|is-callable@1.1.3",
        "ssri@5.3.0-tuxcare.1|is-regex@1.0.4"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|has-symbols@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|object-keys@1.0.11"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|js-tokens@3.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|es6-map@0.1.5",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|d@1.0.0",
        "ssri@5.3.0-tuxcare.1|es5-ext@0.10.38",
        "ssri@5.3.0-tuxcare.1|es6-iterator@2.0.3",
        "ssri@5.3.0-tuxcare.1|es6-set@0.1.5",
        "ssri@5.3.0-tuxcare.1|es6-symbol@3.1.1",
        "ssri@5.3.0-tuxcare.1|event-emitter@0.3.5"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|es6-weak-map@2.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|d@1.0.0",
        "ssri@5.3.0-tuxcare.1|es5-ext@0.10.38",
        "ssri@5.3.0-tuxcare.1|es6-iterator@2.0.3",
        "ssri@5.3.0-tuxcare.1|es6-symbol@3.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|esrecurse@4.2.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|estraverse@4.2.0",
        "ssri@5.3.0-tuxcare.1|object-assign@4.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|acorn-jsx@3.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|acorn-jsx@3.0.1|acorn@3.3.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|acorn-jsx@3.0.1|acorn@3.3.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|acorn@5.4.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|flat-cache@1.3.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|circular-json@0.3.3",
        "ssri@5.3.0-tuxcare.1|del@2.2.2",
        "ssri@5.3.0-tuxcare.1|graceful-fs@4.1.11",
        "ssri@5.3.0-tuxcare.1|write@0.2.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|ansi-escapes@1.4.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|cli-cursor@1.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|restore-cursor@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|cli-width@2.2.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|readline2@1.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|code-point-at@1.1.0",
        "ssri@5.3.0-tuxcare.1|is-fullwidth-code-point@1.0.0",
        "ssri@5.3.0-tuxcare.1|mute-stream@0.0.5"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|run-async@0.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|once@1.4.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|rx-lite@3.1.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|through@2.3.8"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|generate-function@2.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|generate-object-property@1.2.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|is-property@1.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|jsonpointer@4.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|xtend@4.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|jsonify@0.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|prelude-ls@1.1.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|type-check@0.3.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|prelude-ls@1.1.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|deep-is@0.1.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|fast-levenshtein@2.0.6"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|wordwrap@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|caller-path@0.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|callsites@0.2.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|resolve-from@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|interpret@1.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|rechoir@0.6.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|resolve@1.5.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|ajv-keywords@1.5.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|ajv@4.11.8"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|ajv@4.11.8",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|co@4.6.0",
        "ssri@5.3.0-tuxcare.1|json-stable-stringify@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|slice-ansi@0.0.4"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|find-root@1.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|pkg-config@1.1.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|debug-log@1.0.1",
        "ssri@5.3.0-tuxcare.1|find-root@1.1.0",
        "ssri@5.3.0-tuxcare.1|xtend@4.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|run-parallel@1.1.6"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|uniq@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|load-json-file@4.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|graceful-fs@4.1.11",
        "ssri@5.3.0-tuxcare.1|load-json-file@4.0.0|parse-json@4.0.0",
        "ssri@5.3.0-tuxcare.1|load-json-file@4.0.0|pify@3.0.0",
        "ssri@5.3.0-tuxcare.1|strip-bom@3.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|load-json-file@4.0.0|parse-json@4.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|error-ex@1.3.1",
        "ssri@5.3.0-tuxcare.1|json-parse-better-errors@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|load-json-file@4.0.0|pify@3.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|aws-sign2@0.6.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|aws4@1.6.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|caseless@0.11.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|combined-stream@1.0.5",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|delayed-stream@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|extend@3.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|forever-agent@0.6.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|form-data@2.1.4",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|asynckit@0.4.0",
        "ssri@5.3.0-tuxcare.1|combined-stream@1.0.5",
        "ssri@5.3.0-tuxcare.1|mime-types@2.1.17"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|har-validator@2.0.6",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|chalk@1.1.3",
        "ssri@5.3.0-tuxcare.1|commander@2.14.0",
        "ssri@5.3.0-tuxcare.1|is-my-json-valid@2.17.1",
        "ssri@5.3.0-tuxcare.1|pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|hawk@3.1.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|boom@2.10.1",
        "ssri@5.3.0-tuxcare.1|cryptiles@2.0.5",
        "ssri@5.3.0-tuxcare.1|hoek@2.16.3",
        "ssri@5.3.0-tuxcare.1|sntp@1.0.9"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|http-signature@1.1.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|assert-plus@0.2.0",
        "ssri@5.3.0-tuxcare.1|jsprim@1.4.1",
        "ssri@5.3.0-tuxcare.1|sshpk@1.13.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-typedarray@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|isstream@0.1.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|json-stringify-safe@5.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|mime-types@2.1.17",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|mime-db@1.30.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|oauth-sign@0.8.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|qs@6.3.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|stringstream@0.0.5"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|tough-cookie@2.3.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|punycode@1.4.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|tunnel-agent@0.4.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|uuid@3.2.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|lru-cache@4.1.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|pseudomap@1.0.2",
        "ssri@5.3.0-tuxcare.1|yallist@2.1.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|which@1.3.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|isexe@2.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|wrappy@1.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|sprintf-js@1.0.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|core-util-is@1.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|process-nextick-args@1.0.7"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|string_decoder@1.0.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|safe-buffer@5.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|util-deprecate@1.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|punycode@1.4.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|code-point-at@1.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-fullwidth-code-point@1.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|array-ify@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|dot-prop@3.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|is-obj@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|handlebars@4.0.11",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|async@1.5.2",
        "ssri@5.3.0-tuxcare.1|optimist@0.6.1",
        "ssri@5.3.0-tuxcare.1|source-map@0.4.4",
        "ssri@5.3.0-tuxcare.1|uglify-js@2.8.29"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|split@1.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|through@2.3.8"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|parse-github-repo-url@1.4.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|gitconfiglocal@1.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|ini@1.3.5"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|pify@2.3.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-builtin-module@1.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|builtin-modules@1.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|validate-npm-package-license@3.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|spdx-correct@1.0.2",
        "ssri@5.3.0-tuxcare.1|spdx-expression-parse@1.0.4"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|path-type@1.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|graceful-fs@4.1.11",
        "ssri@5.3.0-tuxcare.1|pify@2.3.0",
        "ssri@5.3.0-tuxcare.1|pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|text-extensions@1.7.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|jsonparse@1.3.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|number-is-nan@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|lodash._reinterpolate@3.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|lodash.templatesettings@4.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|lodash._reinterpolate@3.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|camelcase@2.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|currently-unhandled@0.4.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|array-find-index@1.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|indent-string@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|repeating@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|strip-indent@1.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|strip-indent@1.0.1|get-stdin@4.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|strip-indent@1.0.1|get-stdin@4.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|p-locate@2.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|p-limit@1.2.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|balanced-match@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|concat-map@0.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|cross-spawn@5.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|lru-cache@4.1.1",
        "ssri@5.3.0-tuxcare.1|shebang-command@1.2.0",
        "ssri@5.3.0-tuxcare.1|which@1.3.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|get-stream@3.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-stream@1.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|npm-run-path@2.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|path-key@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|p-finally@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|strip-eof@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|invert-kv@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|mimic-fn@1.2.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|path-exists@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|pinkie-promise@2.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|pinkie@2.0.4"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|foreach@2.0.5"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|es-to-primitive@1.1.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|is-callable@1.1.3",
        "ssri@5.3.0-tuxcare.1|is-date-object@1.0.1",
        "ssri@5.3.0-tuxcare.1|is-symbol@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-callable@1.1.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-regex@1.0.4",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|has@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|d@1.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|es5-ext@0.10.38"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|es5-ext@0.10.38",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|es6-iterator@2.0.3",
        "ssri@5.3.0-tuxcare.1|es6-symbol@3.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|es6-iterator@2.0.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|d@1.0.0",
        "ssri@5.3.0-tuxcare.1|es5-ext@0.10.38",
        "ssri@5.3.0-tuxcare.1|es6-symbol@3.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|es6-set@0.1.5",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|d@1.0.0",
        "ssri@5.3.0-tuxcare.1|es5-ext@0.10.38",
        "ssri@5.3.0-tuxcare.1|es6-iterator@2.0.3",
        "ssri@5.3.0-tuxcare.1|es6-symbol@3.1.1",
        "ssri@5.3.0-tuxcare.1|event-emitter@0.3.5"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|es6-symbol@3.1.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|d@1.0.0",
        "ssri@5.3.0-tuxcare.1|es5-ext@0.10.38"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|event-emitter@0.3.5",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|d@1.0.0",
        "ssri@5.3.0-tuxcare.1|es5-ext@0.10.38"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|circular-json@0.3.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|del@2.2.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|globby@5.0.0",
        "ssri@5.3.0-tuxcare.1|is-path-cwd@1.0.0",
        "ssri@5.3.0-tuxcare.1|is-path-in-cwd@1.0.0",
        "ssri@5.3.0-tuxcare.1|object-assign@4.1.1",
        "ssri@5.3.0-tuxcare.1|pify@2.3.0",
        "ssri@5.3.0-tuxcare.1|pinkie-promise@2.0.1",
        "ssri@5.3.0-tuxcare.1|rimraf@2.6.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|write@0.2.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|mkdirp@0.5.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|restore-cursor@1.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|exit-hook@1.1.1",
        "ssri@5.3.0-tuxcare.1|onetime@1.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|mute-stream@0.0.5"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-property@1.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|callsites@0.2.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|co@4.6.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|debug-log@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|delayed-stream@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|asynckit@0.4.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|commander@2.14.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|boom@2.10.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|hoek@2.16.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|cryptiles@2.0.5",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|boom@2.10.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|hoek@2.16.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|sntp@1.0.9",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|hoek@2.16.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|assert-plus@0.2.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|jsprim@1.4.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|jsprim@1.4.1|assert-plus@1.0.0",
        "ssri@5.3.0-tuxcare.1|extsprintf@1.3.0",
        "ssri@5.3.0-tuxcare.1|json-schema@0.2.3",
        "ssri@5.3.0-tuxcare.1|verror@1.10.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|jsprim@1.4.1|assert-plus@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|sshpk@1.13.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|asn1@0.2.3",
        "ssri@5.3.0-tuxcare.1|sshpk@1.13.1|assert-plus@1.0.0",
        "ssri@5.3.0-tuxcare.1|bcrypt-pbkdf@1.0.1",
        "ssri@5.3.0-tuxcare.1|dashdash@1.14.1",
        "ssri@5.3.0-tuxcare.1|ecc-jsbn@0.1.1",
        "ssri@5.3.0-tuxcare.1|getpass@0.1.7",
        "ssri@5.3.0-tuxcare.1|jsbn@0.1.1",
        "ssri@5.3.0-tuxcare.1|tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|sshpk@1.13.1|assert-plus@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|mime-db@1.30.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|pseudomap@1.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|yallist@2.1.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-obj@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|async@1.5.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|optimist@0.6.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|minimist@0.0.8",
        "ssri@5.3.0-tuxcare.1|optimist@0.6.1|wordwrap@0.0.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|optimist@0.6.1|wordwrap@0.0.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|source-map@0.4.4",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|amdefine@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|uglify-js@2.8.29",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|uglify-js@2.8.29|source-map@0.5.7",
        "ssri@5.3.0-tuxcare.1|uglify-to-browserify@1.0.2",
        "ssri@5.3.0-tuxcare.1|uglify-js@2.8.29|yargs@3.10.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|uglify-js@2.8.29|source-map@0.5.7"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|uglify-js@2.8.29|yargs@3.10.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|uglify-js@2.8.29|camelcase@1.2.1",
        "ssri@5.3.0-tuxcare.1|cliui@2.1.0",
        "ssri@5.3.0-tuxcare.1|decamelize@1.2.0",
        "ssri@5.3.0-tuxcare.1|window-size@0.1.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|uglify-js@2.8.29|camelcase@1.2.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|ini@1.3.5"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|spdx-correct@1.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|spdx-license-ids@1.2.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|spdx-expression-parse@1.0.4"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|parse-json@2.2.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|error-ex@1.3.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|array-find-index@1.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|repeating@2.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|is-finite@1.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|p-limit@1.2.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|p-try@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|shebang-command@1.2.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|shebang-regex@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|path-key@2.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|pinkie@2.0.4"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-date-object@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-symbol@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|globby@5.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|array-union@1.0.2",
        "ssri@5.3.0-tuxcare.1|arrify@1.0.1",
        "ssri@5.3.0-tuxcare.1|glob@7.1.2",
        "ssri@5.3.0-tuxcare.1|object-assign@4.1.1",
        "ssri@5.3.0-tuxcare.1|pify@2.3.0",
        "ssri@5.3.0-tuxcare.1|pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-path-cwd@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-path-in-cwd@1.0.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|is-path-inside@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|exit-hook@1.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|onetime@1.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|error-ex@1.3.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|is-arrayish@0.2.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|json-parse-better-errors@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|extsprintf@1.3.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|json-schema@0.2.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|verror@1.10.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|verror@1.10.0|assert-plus@1.0.0",
        "ssri@5.3.0-tuxcare.1|core-util-is@1.0.2",
        "ssri@5.3.0-tuxcare.1|extsprintf@1.3.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|verror@1.10.0|assert-plus@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|asn1@0.2.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|bcrypt-pbkdf@1.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|tweetnacl@0.14.5"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|dashdash@1.14.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|dashdash@1.14.1|assert-plus@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|dashdash@1.14.1|assert-plus@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|ecc-jsbn@0.1.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|jsbn@0.1.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|getpass@0.1.7",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|getpass@0.1.7|assert-plus@1.0.0"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|getpass@0.1.7|assert-plus@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|jsbn@0.1.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|tweetnacl@0.14.5"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|amdefine@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|uglify-to-browserify@1.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|spdx-license-ids@1.2.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-utf8@0.2.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-finite@1.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|number-is-nan@1.0.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|p-try@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|shebang-regex@1.0.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|array-union@1.0.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|array-uniq@1.0.3"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|arrify@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-path-inside@1.0.1",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|path-is-inside@1.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-arrayish@0.2.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|cliui@2.1.0",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|center-align@0.1.3",
        "ssri@5.3.0-tuxcare.1|right-align@0.1.3",
        "ssri@5.3.0-tuxcare.1|cliui@2.1.0|wordwrap@0.0.2"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|cliui@2.1.0|wordwrap@0.0.2"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|window-size@0.1.0"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|array-uniq@1.0.3"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|center-align@0.1.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|align-text@0.1.4",
        "ssri@5.3.0-tuxcare.1|lazy-cache@1.0.4"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|right-align@0.1.3",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|align-text@0.1.4"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|align-text@0.1.4",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|kind-of@3.2.2",
        "ssri@5.3.0-tuxcare.1|longest@1.0.1",
        "ssri@5.3.0-tuxcare.1|repeat-string@1.6.1"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|lazy-cache@1.0.4"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|kind-of@3.2.2",
      "dependsOn": [
        "ssri@5.3.0-tuxcare.1|is-buffer@1.1.6"
      ]
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|longest@1.0.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|repeat-string@1.6.1"
    },
    {
      "ref": "ssri@5.3.0-tuxcare.1|is-buffer@1.1.6"
    }
  ]
}