{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:94f559ad-a7dd-4dda-9c7a-227b0a1bb766",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-31T11:29:50Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "tar",
      "group": "",
      "version": "6.1.15-tuxcare.2",
      "description": "tar for node",
      "purl": "pkg:npm/tar@6.1.15-tuxcare.2",
      "bom-ref": "pkg:npm/tar@6.1.15-tuxcare.2",
      "author": "GitHub Inc.",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "build, genparse, template-oss-apply, lint, postlint, lintfix, snap, test, posttest"
        },
        {
          "name": "cdx:npm:buildScripts",
          "value": "build"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/node-tar.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@actions\\n@ampproject\\n@babel\\n@commitlint\\n@conventional-commits\\n@cspotcode\\n@eslint\\n@eslint-community\\n@fastify\\n@gar\\n@google-automations\\n@humanwhocodes\\n@iarna\\n@isaacs\\n@istanbuljs\\n@jridgewell\\n@lerna\\n@my-scope\\n@nodelib\\n@npmcli\\n@octokit\\n@pkgjs\\n@rtsao\\n@sigstore\\n@tootallnate\\n@tsconfig\\n@tufjs\\n@types\\n@ungap\\n@xmldom"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "node_modules/@actions/core/package.json\\nnode_modules/@actions/exec/package.json\\nnode_modules/@actions/http-client/package.json\\nnode_modules/@actions/io/package.json\\nnode_modules/@babel/code-frame/package.json\\nnode_modules/@babel/compat-data/package.json\\nnode_modules/@babel/core/node_modules/convert-source-map/package.json\\nnode_modules/@babel/core/node_modules/semver/package.json\\nnode_modules/@babel/core/package.json\\nnode_modules/@babel/generator/package.json\\nnode_modules/@babel/helper-compilation-targets/node_modules/lru-cache/package.json\\nnode_modules/@babel/helper-compilation-targets/node_modules/semver/package.json\\nnode_modules/@babel/helper-compilation-targets/node_modules/yallist/package.json\\nnode_modules/@babel/helper-compilation-targets/package.json\\nnode_modules/@babel/helper-globals/package.json\\nnode_modules/@babel/helper-module-imports/package.json\\nnode_modules/@babel/helper-module-transforms/package.json\\nnode_modules/@babel/helper-string-parser/package.json\\nnode_modules/@babel/helper-validator-identifier/package.json\\nnode_modules/@babel/helper-validator-option/package.json\\nnode_modules/@babel/helpers/package.json\\nnode_modules/@babel/parser/package.json\\nnode_modules/@babel/template/package.json\\nnode_modules/@babel/traverse/package.json\\nnode_modules/@babel/types/package.json\\nnode_modules/@commitlint/cli/package.json\\nnode_modules/@commitlint/config-conventional/package.json\\nnode_modules/@commitlint/config-validator/package.json\\nnode_modules/@commitlint/ensure/package.json\\nnode_modules/@commitlint/execute-rule/package.json\\nnode_modules/@commitlint/format/package.json\\nnode_modules/@commitlint/is-ignored/node_modules/lru-cache/package.json\\nnode_modules/@commitlint/is-ignored/node_modules/semver/package.json\\nnode_modules/@commitlint/is-ignored/package.json\\nnode_modules/@commitlint/lint/package.json\\nnode_modules/@commitlint/load/package.json\\nnode_modules/@commitlint/message/package.json\\nnode_modules/@commitlint/parse/package.json\\nnode_modules/@commitlint/read/package.json\\nnode_modules/@commitlint/resolve-extends/package.json\\nnode_modules/@commitlint/rules/package.json\\nnode_modules/@commitlint/to-lines/package.json\\nnode_modules/@commitlint/top-level/package.json\\nnode_modules/@commitlint/types/package.json\\nnode_modules/@conventional-commits/parser/package.json\\nnode_modules/@cspotcode/source-map-support/node_modules/@jridgewell/trace-mapping/package.json\\nnode_modules/@cspotcode/source-map-support/package.json\\nnode_modules/@eslint-community/eslint-utils/package.json\\nnode_modules/@eslint-community/regexpp/package.json\\nnode_modules/@eslint/eslintrc/node_modules/ajv/package.json\\nnode_modules/@eslint/eslintrc/node_modules/brace-expansion/package.json\\nnode_modules/@eslint/eslintrc/node_modules/json-schema-traverse/package.json\\nnode_modules/@eslint/eslintrc/node_modules/minimatch/package.json\\nnode_modules/@eslint/eslintrc/package.json\\nnode_modules/@eslint/js/package.json\\nnode_modules/@fastify/busboy/package.json\\nnode_modules/@gar/promisify/package.json\\nnode_modules/@google-automations/git-file-utils/node_modules/minimatch/package.json\\nnode_modules/@google-automations/git-file-utils/package.json\\nnode_modules/@humanwhocodes/config-array/node_modules/brace-expansion/package.json\\nnode_modules/@humanwhocodes/config-array/node_modules/minimatch/package.json\\nnode_modules/@humanwhocodes/config-array/package.json\\nnode_modules/@humanwhocodes/module-importer/package.json\\nnode_modules/@humanwhocodes/object-schema/package.json\\nnode_modules/@iarna/toml/package.json\\nnode_modules/@isaacs/cliui/node_modules/ansi-regex/package.json\\nnode_modules/@isaacs/cliui/node_modules/ansi-styles/package.json\\nnode_modules/@isaacs/cliui/node_modules/emoji-regex/package.json\\nnode_modules/@isaacs/cliui/node_modules/string-width/package.json\\nnode_modules/@isaacs/cliui/node_modules/strip-ansi/package.json\\nnode_modules/@isaacs/cliui/node_modules/wrap-ansi/package.json\\nnode_modules/@isaacs/cliui/package.json\\nnode_modules/@isaacs/string-locale-compare/package.json\\nnode_modules/@istanbuljs/load-nyc-config/node_modules/argparse/package.json\\nnode_modules/@istanbuljs/load-nyc-config/node_modules/esprima/package.json\\nnode_modules/@istanbuljs/load-nyc-config/node_modules/find-up/package.json\\nnode_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml/package.json\\nnode_modules/@istanbuljs/load-nyc-config/node_modules/locate-path/package.json\\nnode_modules/@istanbuljs/load-nyc-config/node_modules/p-limit/package.json\\nnode_modules/@istanbuljs/load-nyc-config/node_modules/p-locate/package.json\\nnode_modules/@istanbuljs/load-nyc-config/package.json\\nnode_modules/@istanbuljs/schema/package.json\\nnode_modules/@jridgewell/gen-mapping/package.json\\nnode_modules/@jridgewell/remapping/package.json\\nnode_modules/@jridgewell/resolve-uri/package.json\\nnode_modules/@jridgewell/sourcemap-codec/package.json\\nnode_modules/@jridgewell/trace-mapping/package.json\\nnode_modules/@lerna/child-process/package.json\\nnode_modules/@lerna/collect-updates/node_modules/ansi-regex/package.json\\nnode_modules/@lerna/collect-updates/node_modules/aproba/package.json\\nnode_modules/@lerna/collect-updates/node_modules/are-we-there-yet/package.json\\nnode_modules/@lerna/collect-updates/node_modules/brace-expansion/package.json\\nnode_modules/@lerna/collect-updates/node_modules/gauge/package.json\\nnode_modules/@lerna/collect-updates/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/@lerna/collect-updates/node_modules/isarray/package.json\\nnode_modules/@lerna/collect-updates/node_modules/minimatch/package.json\\nnode_modules/@lerna/collect-updates/node_modules/npmlog/package.json\\nnode_modules/@lerna/collect-updates/node_modules/readable-stream/package.json\\nnode_modules/@lerna/collect-updates/node_modules/safe-buffer/package.json\\nnode_modules/@lerna/collect-updates/node_modules/string-width/package.json\\nnode_modules/@lerna/collect-updates/node_modules/string_decoder/package.json\\nnode_modules/@lerna/collect-updates/node_modules/strip-ansi/package.json\\nnode_modules/@lerna/collect-updates/package.json\\nnode_modules/@lerna/describe-ref/node_modules/ansi-regex/package.json\\nnode_modules/@lerna/describe-ref/node_modules/aproba/package.json\\nnode_modules/@lerna/describe-ref/node_modules/are-we-there-yet/package.json\\nnode_modules/@lerna/describe-ref/node_modules/gauge/package.json\\nnode_modules/@lerna/describe-ref/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/@lerna/describe-ref/node_modules/isarray/package.json\\nnode_modules/@lerna/describe-ref/node_modules/npmlog/package.json\\nnode_modules/@lerna/describe-ref/node_modules/readable-stream/package.json\\nnode_modules/@lerna/describe-ref/node_modules/safe-buffer/package.json\\nnode_modules/@lerna/describe-ref/node_modules/string-width/package.json\\nnode_modules/@lerna/describe-ref/node_modules/string_decoder/package.json\\nnode_modules/@lerna/describe-ref/node_modules/strip-ansi/package.json\\nnode_modules/@lerna/describe-ref/package.json\\nnode_modules/@lerna/package-graph/node_modules/ansi-regex/package.json\\nnode_modules/@lerna/package-graph/node_modules/aproba/package.json\\nnode_modules/@lerna/package-graph/node_modules/are-we-there-yet/package.json\\nnode_modules/@lerna/package-graph/node_modules/gauge/package.json\\nnode_modules/@lerna/package-graph/node_modules/hosted-git-info/package.json\\nnode_modules/@lerna/package-graph/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/@lerna/package-graph/node_modules/isarray/package.json\\nnode_modules/@lerna/package-graph/node_modules/lru-cache/package.json\\nnode_modules/@lerna/package-graph/node_modules/npm-package-arg/package.json\\nnode_modules/@lerna/package-graph/node_modules/npmlog/package.json\\nnode_modules/@lerna/package-graph/node_modules/readable-stream/package.json\\nnode_modules/@lerna/package-graph/node_modules/safe-buffer/package.json\\nnode_modules/@lerna/package-graph/node_modules/string-width/package.json\\nnode_modules/@lerna/package-graph/node_modules/string_decoder/package.json\\nnode_modules/@lerna/package-graph/node_modules/strip-ansi/package.json\\nnode_modules/@lerna/package-graph/node_modules/validate-npm-package-name/package.json\\nnode_modules/@lerna/package-graph/package.json\\nnode_modules/@lerna/package/node_modules/hosted-git-info/package.json\\nnode_modules/@lerna/package/node_modules/lru-cache/package.json\\nnode_modules/@lerna/package/node_modules/npm-package-arg/package.json\\nnode_modules/@lerna/package/node_modules/validate-npm-package-name/package.json\\nnode_modules/@lerna/package/package.json\\nnode_modules/@lerna/prerelease-id-from-version/package.json\\nnode_modules/@lerna/query-graph/package.json\\nnode_modules/@lerna/run-topologically/package.json\\nnode_modules/@lerna/validation-error/node_modules/ansi-regex/package.json\\nnode_modules/@lerna/validation-error/node_modules/aproba/package.json\\nnode_modules/@lerna/validation-error/node_modules/are-we-there-yet/package.json\\nnode_modules/@lerna/validation-error/node_modules/gauge/package.json\\nnode_modules/@lerna/validation-error/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/@lerna/validation-error/node_modules/isarray/package.json\\nnode_modules/@lerna/validation-error/node_modules/npmlog/package.json\\nnode_modules/@lerna/validation-error/node_modules/readable-stream/package.json\\nnode_modules/@lerna/validation-error/node_modules/safe-buffer/package.json\\nnode_modules/@lerna/validation-error/node_modules/string-width/package.json\\nnode_modules/@lerna/validation-error/node_modules/string_decoder/package.json\\nnode_modules/@lerna/validation-error/node_modules/strip-ansi/package.json\\nnode_modules/@lerna/validation-error/package.json\\nnode_modules/@nodelib/fs.scandir/package.json\\nnode_modules/@nodelib/fs.stat/package.json\\nnode_modules/@nodelib/fs.walk/package.json\\nnode_modules/@npmcli/arborist/node_modules/@npmcli/package-json/package.json\\nnode_modules/@npmcli/arborist/node_modules/foreground-child/package.json\\nnode_modules/@npmcli/arborist/node_modules/glob/package.json\\nnode_modules/@npmcli/arborist/node_modules/jackspeak/package.json\\nnode_modules/@npmcli/arborist/node_modules/minipass/package.json\\nnode_modules/@npmcli/arborist/node_modules/signal-exit/package.json\\nnode_modules/@npmcli/arborist/package.json\\nnode_modules/@npmcli/eslint-config/package.json\\nnode_modules/@npmcli/fs/package.json\\nnode_modules/@npmcli/git/package.json\\nnode_modules/@npmcli/installed-package-contents/package.json\\nnode_modules/@npmcli/map-workspaces/node_modules/foreground-child/package.json\\nnode_modules/@npmcli/map-workspaces/node_modules/glob/package.json\\nnode_modules/@npmcli/map-workspaces/node_modules/jackspeak/package.json\\nnode_modules/@npmcli/map-workspaces/node_modules/minipass/package.json\\nnode_modules/@npmcli/map-workspaces/node_modules/signal-exit/package.json\\nnode_modules/@npmcli/map-workspaces/package.json\\nnode_modules/@npmcli/metavuln-calculator/package.json\\nnode_modules/@npmcli/move-file/package.json\\nnode_modules/@npmcli/name-from-folder/package.json\\nnode_modules/@npmcli/node-gyp/package.json\\nnode_modules/@npmcli/package-json/node_modules/foreground-child/package.json\\nnode_modules/@npmcli/package-json/node_modules/glob/package.json\\nnode_modules/@npmcli/package-json/node_modules/jackspeak/package.json\\nnode_modules/@npmcli/package-json/node_modules/minipass/package.json\\nnode_modules/@npmcli/package-json/node_modules/signal-exit/package.json\\nnode_modules/@npmcli/package-json/package.json\\nnode_modules/@npmcli/promise-spawn/package.json\\nnode_modules/@npmcli/query/package.json\\nnode_modules/@npmcli/run-script/package.json\\nnode_modules/@npmcli/template-oss/package.json\\nnode_modules/@octokit/auth-token/package.json\\nnode_modules/@octokit/core/package.json\\nnode_modules/@octokit/endpoint/package.json\\nnode_modules/@octokit/graphql/package.json\\nnode_modules/@octokit/openapi-types/package.json\\nnode_modules/@octokit/plugin-paginate-rest/package.json\\nnode_modules/@octokit/plugin-request-log/package.json\\nnode_modules/@octokit/plugin-rest-endpoint-methods/node_modules/@octokit/types/package.json\\nnode_modules/@octokit/plugin-rest-endpoint-methods/package.json\\nnode_modules/@octokit/request-error/package.json\\nnode_modules/@octokit/request/package.json\\nnode_modules/@octokit/rest/package.json\\nnode_modules/@octokit/tsconfig/package.json\\nnode_modules/@octokit/types/package.json\\nnode_modules/@pkgjs/parseargs/package.json\\nnode_modules/@rtsao/scc/package.json\\nnode_modules/@sigstore/bundle/package.json\\nnode_modules/@sigstore/protobuf-specs/package.json\\nnode_modules/@sigstore/sign/node_modules/make-fetch-happen/package.json\\nnode_modules/@sigstore/sign/node_modules/minipass-fetch/node_modules/minipass/package.json\\nnode_modules/@sigstore/sign/node_modules/minipass-fetch/package.json\\nnode_modules/@sigstore/sign/package.json\\nnode_modules/@sigstore/tuf/package.json\\nnode_modules/@tootallnate/once/package.json\\nnode_modules/@tsconfig/node10/package.json\\nnode_modules/@tsconfig/node12/package.json\\nnode_modules/@tsconfig/node14/package.json\\nnode_modules/@tsconfig/node16/package.json\\nnode_modules/@tufjs/canonical-json/package.json\\nnode_modules/@tufjs/models/package.json\\nnode_modules/@types/json5/package.json\\nnode_modules/@types/minimist/package.json\\nnode_modules/@types/node/package.json\\nnode_modules/@types/normalize-package-data/package.json\\nnode_modules/@types/npm-package-arg/package.json\\nnode_modules/@types/unist/package.json\\nnode_modules/@types/yargs-parser/package.json\\nnode_modules/@types/yargs/package.json\\nnode_modules/@ungap/structured-clone/package.json\\nnode_modules/@xmldom/xmldom/package.json\\nnode_modules/JSONStream/package.json\\nnode_modules/abbrev/package.json\\nnode_modules/acorn-jsx/package.json\\nnode_modules/acorn-walk/package.json\\nnode_modules/acorn/package.json\\nnode_modules/agent-base/package.json\\nnode_modules/agentkeepalive/package.json\\nnode_modules/aggregate-error/package.json\\nnode_modules/ajv/package.json\\nnode_modules/ansi-regex/package.json\\nnode_modules/ansi-styles/package.json\\nnode_modules/anymatch/package.json\\nnode_modules/append-transform/package.json\\nnode_modules/aproba/package.json\\nnode_modules/archy/package.json\\nnode_modules/are-we-there-yet/package.json\\nnode_modules/arg/package.json\\nnode_modules/argparse/package.json\\nnode_modules/array-buffer-byte-length/package.json\\nnode_modules/array-ify/package.json\\nnode_modules/array-includes/package.json\\nnode_modules/array.prototype.findlastindex/package.json\\nnode_modules/array.prototype.flat/package.json\\nnode_modules/array.prototype.flatmap/package.json\\nnode_modules/arraybuffer.prototype.slice/package.json\\nnode_modules/arrify/package.json\\nnode_modules/async-function/package.json\\nnode_modules/async-hook-domain/package.json\\nnode_modules/async-retry/node_modules/retry/package.json\\nnode_modules/async-retry/package.json\\nnode_modules/available-typed-arrays/package.json\\nnode_modules/balanced-match/package.json\\nnode_modules/baseline-browser-mapping/package.json\\nnode_modules/before-after-hook/package.json\\nnode_modules/bin-links/package.json\\nnode_modules/binary-extensions/package.json\\nnode_modules/bind-obj-methods/package.json\\nnode_modules/boolbase/package.json\\nnode_modules/brace-expansion/package.json\\nnode_modules/braces/package.json\\nnode_modules/browserslist/package.json\\nnode_modules/buffer-from/package.json\\nnode_modules/builtins/package.json\\nnode_modules/cacache/node_modules/foreground-child/package.json\\nnode_modules/cacache/node_modules/fs-minipass/package.json\\nnode_modules/cacache/node_modules/glob/package.json\\nnode_modules/cacache/node_modules/jackspeak/package.json\\nnode_modules/cacache/node_modules/minipass/package.json\\nnode_modules/cacache/node_modules/signal-exit/package.json\\nnode_modules/cacache/package.json\\nnode_modules/caching-transform/node_modules/write-file-atomic/package.json\\nnode_modules/caching-transform/package.json\\nnode_modules/call-bind-apply-helpers/package.json\\nnode_modules/call-bind/package.json\\nnode_modules/call-bound/package.json\\nnode_modules/callsites/package.json\\nnode_modules/camelcase-keys/package.json\\nnode_modules/camelcase/package.json\\nnode_modules/caniuse-lite/package.json\\nnode_modules/chalk/package.json\\nnode_modules/chmodr/package.json\\nnode_modules/chokidar/node_modules/glob-parent/package.json\\nnode_modules/chokidar/package.json\\nnode_modules/chownr/package.json\\nnode_modules/clean-stack/package.json\\nnode_modules/cliui/package.json\\nnode_modules/cmd-shim/package.json\\nnode_modules/code-point-at/package.json\\nnode_modules/code-suggester/node_modules/brace-expansion/package.json\\nnode_modules/code-suggester/node_modules/glob/package.json\\nnode_modules/code-suggester/node_modules/minimatch/package.json\\nnode_modules/code-suggester/node_modules/yargs/package.json\\nnode_modules/code-suggester/package.json\\nnode_modules/color-convert/package.json\\nnode_modules/color-name/package.json\\nnode_modules/color-support/package.json\\nnode_modules/common-ancestor-path/package.json\\nnode_modules/commondir/package.json\\nnode_modules/compare-func/package.json\\nnode_modules/concat-map/package.json\\nnode_modules/console-control-strings/package.json\\nnode_modules/conventional-changelog-angular/package.json\\nnode_modules/conventional-changelog-conventionalcommits/package.json\\nnode_modules/conventional-changelog-writer/node_modules/semver/package.json\\nnode_modules/conventional-changelog-writer/package.json\\nnode_modules/conventional-commits-filter/package.json\\nnode_modules/conventional-commits-parser/package.json\\nnode_modules/convert-source-map/package.json\\nnode_modules/core-util-is/package.json\\nnode_modules/cosmiconfig-typescript-loader/package.json\\nnode_modules/cosmiconfig/package.json\\nnode_modules/create-require/package.json\\nnode_modules/cross-spawn/node_modules/which/package.json\\nnode_modules/cross-spawn/package.json\\nnode_modules/css-select/package.json\\nnode_modules/css-what/package.json\\nnode_modules/cssesc/package.json\\nnode_modules/dargs/package.json\\nnode_modules/data-view-buffer/package.json\\nnode_modules/data-view-byte-length/package.json\\nnode_modules/data-view-byte-offset/package.json\\nnode_modules/dateformat/package.json\\nnode_modules/debug/package.json\\nnode_modules/decamelize-keys/node_modules/map-obj/package.json\\nnode_modules/decamelize-keys/package.json\\nnode_modules/decamelize/package.json\\nnode_modules/deep-is/package.json\\nnode_modules/default-require-extensions/package.json\\nnode_modules/define-data-property/package.json\\nnode_modules/define-properties/package.json\\nnode_modules/delegates/package.json\\nnode_modules/deprecation/package.json\\nnode_modules/detect-indent/package.json\\nnode_modules/diff/package.json\\nnode_modules/doctrine/package.json\\nnode_modules/dom-serializer/package.json\\nnode_modules/domelementtype/package.json\\nnode_modules/domhandler/package.json\\nnode_modules/domutils/package.json\\nnode_modules/dot-prop/package.json\\nnode_modules/dunder-proto/package.json\\nnode_modules/duplexer/package.json\\nnode_modules/eastasianwidth/package.json\\nnode_modules/electron-to-chromium/package.json\\nnode_modules/emoji-regex/package.json\\nnode_modules/encoding/package.json\\nnode_modules/end-of-stream/package.json\\nnode_modules/entities/package.json\\nnode_modules/env-paths/package.json\\nnode_modules/err-code/package.json\\nnode_modules/error-ex/package.json\\nnode_modules/es-abstract-get/package.json\\nnode_modules/es-abstract/package.json\\nnode_modules/es-define-property/package.json\\nnode_modules/es-errors/package.json\\nnode_modules/es-object-atoms/package.json\\nnode_modules/es-set-tostringtag/package.json\\nnode_modules/es-shim-unscopables/package.json\\nnode_modules/es-to-primitive/package.json\\nnode_modules/es6-error/package.json\\nnode_modules/escalade/package.json\\nnode_modules/escape-string-regexp/package.json\\nnode_modules/escodegen/node_modules/esprima/package.json\\nnode_modules/escodegen/package.json\\nnode_modules/eslint-import-resolver-node/node_modules/debug/package.json\\nnode_modules/eslint-import-resolver-node/package.json\\nnode_modules/eslint-module-utils/node_modules/debug/package.json\\nnode_modules/eslint-module-utils/package.json\\nnode_modules/eslint-plugin-es/package.json\\nnode_modules/eslint-plugin-import/node_modules/brace-expansion/package.json\\nnode_modules/eslint-plugin-import/node_modules/debug/package.json\\nnode_modules/eslint-plugin-import/node_modules/doctrine/package.json\\nnode_modules/eslint-plugin-import/node_modules/minimatch/package.json\\nnode_modules/eslint-plugin-import/node_modules/semver/package.json\\nnode_modules/eslint-plugin-import/package.json\\nnode_modules/eslint-plugin-node/node_modules/brace-expansion/package.json\\nnode_modules/eslint-plugin-node/node_modules/minimatch/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/test/resolver/baz/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/test/resolver/false_main/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/eslint-plugin-node/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json\\nnode_modules/eslint-plugin-node/node_modules/semver/package.json\\nnode_modules/eslint-plugin-node/package.json\\nnode_modules/eslint-plugin-promise/package.json\\nnode_modules/eslint-scope/package.json\\nnode_modules/eslint-utils/node_modules/eslint-visitor-keys/package.json\\nnode_modules/eslint-utils/package.json\\nnode_modules/eslint-visitor-keys/package.json\\nnode_modules/eslint/node_modules/ajv/package.json\\nnode_modules/eslint/node_modules/brace-expansion/package.json\\nnode_modules/eslint/node_modules/json-schema-traverse/package.json\\nnode_modules/eslint/node_modules/minimatch/package.json\\nnode_modules/eslint/package.json\\nnode_modules/espree/package.json\\nnode_modules/esprima/package.json\\nnode_modules/esquery/package.json\\nnode_modules/esrecurse/package.json\\nnode_modules/estraverse/package.json\\nnode_modules/esutils/package.json\\nnode_modules/eventemitter3/package.json\\nnode_modules/events-to-array/package.json\\nnode_modules/execa/package.json\\nnode_modules/exponential-backoff/package.json\\nnode_modules/fast-deep-equal/package.json\\nnode_modules/fast-json-stable-stringify/package.json\\nnode_modules/fast-levenshtein/package.json\\nnode_modules/fast-uri/benchmark/package.json\\nnode_modules/fast-uri/package.json\\nnode_modules/fastq/package.json\\nnode_modules/figures/node_modules/escape-string-regexp/package.json\\nnode_modules/figures/package.json\\nnode_modules/file-entry-cache/package.json\\nnode_modules/fill-range/package.json\\nnode_modules/find-cache-dir/package.json\\nnode_modules/find-up/package.json\\nnode_modules/findit/package.json\\nnode_modules/flat-cache/package.json\\nnode_modules/flatted/package.json\\nnode_modules/for-each/package.json\\nnode_modules/foreground-child/package.json\\nnode_modules/fromentries/package.json\\nnode_modules/fs-exists-cached/package.json\\nnode_modules/fs-extra/package.json\\nnode_modules/fs-minipass/node_modules/minipass/package.json\\nnode_modules/fs-minipass/package.json\\nnode_modules/fs.realpath/package.json\\nnode_modules/function-bind/package.json\\nnode_modules/function-loop/package.json\\nnode_modules/function.prototype.name/package.json\\nnode_modules/functions-have-names/package.json\\nnode_modules/gauge/node_modules/signal-exit/package.json\\nnode_modules/gauge/package.json\\nnode_modules/generator-function/package.json\\nnode_modules/gensync/package.json\\nnode_modules/get-caller-file/package.json\\nnode_modules/get-intrinsic/package.json\\nnode_modules/get-package-type/package.json\\nnode_modules/get-proto/package.json\\nnode_modules/get-stream/package.json\\nnode_modules/get-symbol-description/package.json\\nnode_modules/git-raw-commits/package.json\\nnode_modules/glob-parent/package.json\\nnode_modules/glob/node_modules/minimatch/package.json\\nnode_modules/glob/package.json\\nnode_modules/global-dirs/node_modules/ini/package.json\\nnode_modules/global-dirs/package.json\\nnode_modules/globals/package.json\\nnode_modules/globalthis/package.json\\nnode_modules/gopd/package.json\\nnode_modules/graceful-fs/package.json\\nnode_modules/graphemer/package.json\\nnode_modules/handlebars/package.json\\nnode_modules/hard-rejection/package.json\\nnode_modules/has-bigints/package.json\\nnode_modules/has-flag/package.json\\nnode_modules/has-property-descriptors/package.json\\nnode_modules/has-proto/package.json\\nnode_modules/has-symbols/package.json\\nnode_modules/has-tostringtag/package.json\\nnode_modules/has-unicode/package.json\\nnode_modules/hasha/node_modules/type-fest/package.json\\nnode_modules/hasha/package.json\\nnode_modules/hasown/package.json\\nnode_modules/he/package.json\\nnode_modules/hosted-git-info/package.json\\nnode_modules/html-escaper/package.json\\nnode_modules/http-cache-semantics/package.json\\nnode_modules/http-proxy-agent/package.json\\nnode_modules/https-proxy-agent/package.json\\nnode_modules/human-signals/package.json\\nnode_modules/humanize-ms/package.json\\nnode_modules/iconv-lite/package.json\\nnode_modules/ignore-walk/package.json\\nnode_modules/ignore/package.json\\nnode_modules/import-fresh/node_modules/resolve-from/package.json\\nnode_modules/import-fresh/package.json\\nnode_modules/imurmurhash/package.json\\nnode_modules/indent-string/package.json\\nnode_modules/infer-owner/package.json\\nnode_modules/inflight/package.json\\nnode_modules/inherits/package.json\\nnode_modules/ini/package.json\\nnode_modules/internal-slot/package.json\\nnode_modules/ip-address/package.json\\nnode_modules/is-array-buffer/package.json\\nnode_modules/is-arrayish/package.json\\nnode_modules/is-async-function/package.json\\nnode_modules/is-bigint/package.json\\nnode_modules/is-binary-path/package.json\\nnode_modules/is-boolean-object/package.json\\nnode_modules/is-callable/package.json\\nnode_modules/is-core-module/package.json\\nnode_modules/is-data-view/package.json\\nnode_modules/is-date-object/package.json\\nnode_modules/is-document.all/package.json\\nnode_modules/is-extglob/package.json\\nnode_modules/is-finalizationregistry/package.json\\nnode_modules/is-fullwidth-code-point/package.json\\nnode_modules/is-generator-function/package.json\\nnode_modules/is-glob/package.json\\nnode_modules/is-lambda/package.json\\nnode_modules/is-map/package.json\\nnode_modules/is-negative-zero/package.json\\nnode_modules/is-number-object/package.json\\nnode_modules/is-number/package.json\\nnode_modules/is-obj/package.json\\nnode_modules/is-path-inside/package.json\\nnode_modules/is-plain-obj/package.json\\nnode_modules/is-plain-object/package.json\\nnode_modules/is-regex/package.json\\nnode_modules/is-set/package.json\\nnode_modules/is-shared-array-buffer/package.json\\nnode_modules/is-stream/package.json\\nnode_modules/is-string/package.json\\nnode_modules/is-symbol/package.json\\nnode_modules/is-text-path/package.json\\nnode_modules/is-typed-array/package.json\\nnode_modules/is-typedarray/package.json\\nnode_modules/is-weakmap/package.json\\nnode_modules/is-weakref/package.json\\nnode_modules/is-weakset/package.json\\nnode_modules/is-windows/package.json\\nnode_modules/isarray/package.json\\nnode_modules/isexe/package.json\\nnode_modules/istanbul-lib-coverage/package.json\\nnode_modules/istanbul-lib-hook/package.json\\nnode_modules/istanbul-lib-instrument/node_modules/semver/package.json\\nnode_modules/istanbul-lib-instrument/package.json\\nnode_modules/istanbul-lib-processinfo/node_modules/p-map/package.json\\nnode_modules/istanbul-lib-processinfo/package.json\\nnode_modules/istanbul-lib-report/node_modules/make-dir/package.json\\nnode_modules/istanbul-lib-report/package.json\\nnode_modules/istanbul-lib-source-maps/package.json\\nnode_modules/istanbul-reports/package.json\\nnode_modules/jackspeak/package.json\\nnode_modules/js-tokens/package.json\\nnode_modules/js-yaml/package.json\\nnode_modules/jsesc/package.json\\nnode_modules/json-buffer/package.json\\nnode_modules/json-parse-even-better-errors/package.json\\nnode_modules/json-schema-traverse/package.json\\nnode_modules/json-stable-stringify-without-jsonify/package.json\\nnode_modules/json-stringify-nice/package.json\\nnode_modules/json-stringify-safe/package.json\\nnode_modules/json5/package.json\\nnode_modules/jsonfile/package.json\\nnode_modules/jsonparse/package.json\\nnode_modules/jsonpath/package.json\\nnode_modules/just-deep-map-values/package.json\\nnode_modules/just-diff-apply/package.json\\nnode_modules/just-diff/package.json\\nnode_modules/keyv/package.json\\nnode_modules/kind-of/package.json\\nnode_modules/levn/package.json\\nnode_modules/libtap/node_modules/diff/package.json\\nnode_modules/libtap/node_modules/minipass/package.json\\nnode_modules/libtap/package.json\\nnode_modules/lines-and-columns/package.json\\nnode_modules/load-json-file/node_modules/type-fest/package.json\\nnode_modules/load-json-file/package.json\\nnode_modules/locate-path/package.json\\nnode_modules/lodash.camelcase/package.json\\nnode_modules/lodash.flattendeep/package.json\\nnode_modules/lodash.isfunction/package.json\\nnode_modules/lodash.ismatch/package.json\\nnode_modules/lodash.isplainobject/package.json\\nnode_modules/lodash.kebabcase/package.json\\nnode_modules/lodash.merge/package.json\\nnode_modules/lodash.mergewith/package.json\\nnode_modules/lodash.snakecase/package.json\\nnode_modules/lodash.startcase/package.json\\nnode_modules/lodash.uniq/package.json\\nnode_modules/lodash.upperfirst/package.json\\nnode_modules/lodash/package.json\\nnode_modules/lru-cache/package.json\\nnode_modules/make-dir/node_modules/semver/package.json\\nnode_modules/make-dir/package.json\\nnode_modules/make-error/package.json\\nnode_modules/make-fetch-happen/node_modules/@npmcli/fs/package.json\\nnode_modules/make-fetch-happen/node_modules/cacache/package.json\\nnode_modules/make-fetch-happen/node_modules/minipass/package.json\\nnode_modules/make-fetch-happen/node_modules/ssri/package.json\\nnode_modules/make-fetch-happen/node_modules/unique-filename/package.json\\nnode_modules/make-fetch-happen/node_modules/unique-slug/package.json\\nnode_modules/make-fetch-happen/package.json\\nnode_modules/map-obj/package.json\\nnode_modules/math-intrinsics/package.json\\nnode_modules/meow/node_modules/hosted-git-info/package.json\\nnode_modules/meow/node_modules/lru-cache/package.json\\nnode_modules/meow/node_modules/normalize-package-data/package.json\\nnode_modules/meow/node_modules/type-fest/package.json\\nnode_modules/meow/package.json\\nnode_modules/merge-stream/package.json\\nnode_modules/mimic-fn/package.json\\nnode_modules/min-indent/package.json\\nnode_modules/minimatch/package.json\\nnode_modules/minimist-options/package.json\\nnode_modules/minimist/package.json\\nnode_modules/minipass-collect/node_modules/minipass/package.json\\nnode_modules/minipass-collect/package.json\\nnode_modules/minipass-fetch/node_modules/minipass/package.json\\nnode_modules/minipass-fetch/package.json\\nnode_modules/minipass-flush/node_modules/minipass/package.json\\nnode_modules/minipass-flush/package.json\\nnode_modules/minipass-json-stream/node_modules/minipass/package.json\\nnode_modules/minipass-json-stream/package.json\\nnode_modules/minipass-pipeline/node_modules/minipass/package.json\\nnode_modules/minipass-pipeline/package.json\\nnode_modules/minipass-sized/node_modules/minipass/package.json\\nnode_modules/minipass-sized/package.json\\nnode_modules/minipass/package.json\\nnode_modules/minizlib/node_modules/minipass/package.json\\nnode_modules/minizlib/package.json\\nnode_modules/mkdirp/package.json\\nnode_modules/modify-values/package.json\\nnode_modules/ms/package.json\\nnode_modules/mutate-fs/package.json\\nnode_modules/natural-compare/package.json\\nnode_modules/negotiator/package.json\\nnode_modules/neo-async/package.json\\nnode_modules/nock/package.json\\nnode_modules/node-exports-info/node_modules/semver/package.json\\nnode_modules/node-exports-info/package.json\\nnode_modules/node-fetch/package.json\\nnode_modules/node-gyp/node_modules/abbrev/package.json\\nnode_modules/node-gyp/node_modules/are-we-there-yet/package.json\\nnode_modules/node-gyp/node_modules/brace-expansion/package.json\\nnode_modules/node-gyp/node_modules/gauge/package.json\\nnode_modules/node-gyp/node_modules/glob/package.json\\nnode_modules/node-gyp/node_modules/minimatch/package.json\\nnode_modules/node-gyp/node_modules/nopt/package.json\\nnode_modules/node-gyp/node_modules/npmlog/package.json\\nnode_modules/node-gyp/node_modules/which/package.json\\nnode_modules/node-gyp/package.json\\nnode_modules/node-html-parser/package.json\\nnode_modules/node-preload/package.json\\nnode_modules/node-releases/package.json\\nnode_modules/nopt/package.json\\nnode_modules/normalize-package-data/package.json\\nnode_modules/normalize-path/package.json\\nnode_modules/npm-bundled/package.json\\nnode_modules/npm-install-checks/package.json\\nnode_modules/npm-normalize-package-bin/package.json\\nnode_modules/npm-package-arg/package.json\\nnode_modules/npm-packlist/package.json\\nnode_modules/npm-pick-manifest/package.json\\nnode_modules/npm-registry-fetch/node_modules/make-fetch-happen/package.json\\nnode_modules/npm-registry-fetch/node_modules/minipass-fetch/node_modules/minipass/package.json\\nnode_modules/npm-registry-fetch/node_modules/minipass-fetch/package.json\\nnode_modules/npm-registry-fetch/package.json\\nnode_modules/npm-run-path/package.json\\nnode_modules/npmlog/package.json\\nnode_modules/nth-check/package.json\\nnode_modules/number-is-nan/package.json\\nnode_modules/nyc/node_modules/brace-expansion/package.json\\nnode_modules/nyc/node_modules/cliui/package.json\\nnode_modules/nyc/node_modules/find-up/package.json\\nnode_modules/nyc/node_modules/glob/package.json\\nnode_modules/nyc/node_modules/locate-path/package.json\\nnode_modules/nyc/node_modules/minimatch/package.json\\nnode_modules/nyc/node_modules/p-limit/package.json\\nnode_modules/nyc/node_modules/p-locate/package.json\\nnode_modules/nyc/node_modules/p-map/package.json\\nnode_modules/nyc/node_modules/wrap-ansi/package.json\\nnode_modules/nyc/node_modules/y18n/package.json\\nnode_modules/nyc/node_modules/yargs-parser/package.json\\nnode_modules/nyc/node_modules/yargs/package.json\\nnode_modules/nyc/package.json\\nnode_modules/object-assign/package.json\\nnode_modules/object-inspect/package.json\\nnode_modules/object-keys/package.json\\nnode_modules/object.assign/package.json\\nnode_modules/object.entries/package.json\\nnode_modules/object.fromentries/package.json\\nnode_modules/object.groupby/package.json\\nnode_modules/object.values/package.json\\nnode_modules/once/package.json\\nnode_modules/onetime/package.json\\nnode_modules/opener/package.json\\nnode_modules/optionator/package.json\\nnode_modules/own-keys/package.json\\nnode_modules/own-or-env/package.json\\nnode_modules/own-or/package.json\\nnode_modules/p-finally/package.json\\nnode_modules/p-limit/package.json\\nnode_modules/p-locate/package.json\\nnode_modules/p-map/package.json\\nnode_modules/p-queue/package.json\\nnode_modules/p-timeout/package.json\\nnode_modules/p-try/package.json\\nnode_modules/package-hash/package.json\\nnode_modules/package-json-from-dist/package.json\\nnode_modules/pacote/node_modules/fs-minipass/node_modules/minipass/package.json\\nnode_modules/pacote/node_modules/fs-minipass/package.json\\nnode_modules/pacote/package.json\\nnode_modules/parent-module/package.json\\nnode_modules/parse-conflict-json/node_modules/just-diff/package.json\\nnode_modules/parse-conflict-json/package.json\\nnode_modules/parse-diff/package.json\\nnode_modules/parse-github-repo-url/package.json\\nnode_modules/parse-json/node_modules/json-parse-even-better-errors/package.json\\nnode_modules/parse-json/package.json\\nnode_modules/path-exists/package.json\\nnode_modules/path-is-absolute/package.json\\nnode_modules/path-key/package.json\\nnode_modules/path-parse/package.json\\nnode_modules/path-scurry/node_modules/lru-cache/package.json\\nnode_modules/path-scurry/package.json\\nnode_modules/path-type/package.json\\nnode_modules/picocolors/package.json\\nnode_modules/picomatch/package.json\\nnode_modules/pify/package.json\\nnode_modules/pkg-dir/node_modules/find-up/package.json\\nnode_modules/pkg-dir/node_modules/locate-path/package.json\\nnode_modules/pkg-dir/node_modules/p-limit/package.json\\nnode_modules/pkg-dir/node_modules/p-locate/package.json\\nnode_modules/pkg-dir/package.json\\nnode_modules/possible-typed-array-names/package.json\\nnode_modules/postcss-selector-parser/package.json\\nnode_modules/prelude-ls/package.json\\nnode_modules/proc-log/package.json\\nnode_modules/process-nextick-args/package.json\\nnode_modules/process-on-spawn/package.json\\nnode_modules/promise-all-reject-late/package.json\\nnode_modules/promise-call-limit/package.json\\nnode_modules/promise-inflight/package.json\\nnode_modules/promise-retry/package.json\\nnode_modules/propagate/package.json\\nnode_modules/punycode/package.json\\nnode_modules/q/package.json\\nnode_modules/queue-microtask/package.json\\nnode_modules/quick-lru/package.json\\nnode_modules/read-cmd-shim/package.json\\nnode_modules/read-package-json-fast/package.json\\nnode_modules/read-package-json/node_modules/foreground-child/package.json\\nnode_modules/read-package-json/node_modules/glob/package.json\\nnode_modules/read-package-json/node_modules/jackspeak/package.json\\nnode_modules/read-package-json/node_modules/minipass/package.json\\nnode_modules/read-package-json/node_modules/signal-exit/package.json\\nnode_modules/read-package-json/package.json\\nnode_modules/read-pkg-up/node_modules/find-up/package.json\\nnode_modules/read-pkg-up/node_modules/locate-path/package.json\\nnode_modules/read-pkg-up/node_modules/p-limit/package.json\\nnode_modules/read-pkg-up/node_modules/p-locate/package.json\\nnode_modules/read-pkg-up/node_modules/type-fest/package.json\\nnode_modules/read-pkg-up/package.json\\nnode_modules/read-pkg/node_modules/hosted-git-info/package.json\\nnode_modules/read-pkg/node_modules/normalize-package-data/package.json\\nnode_modules/read-pkg/node_modules/resolve/package.json\\nnode_modules/read-pkg/node_modules/resolve/test/resolver/baz/package.json\\nnode_modules/read-pkg/node_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/read-pkg/node_modules/resolve/test/resolver/false_main/package.json\\nnode_modules/read-pkg/node_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/read-pkg/node_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/read-pkg/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/read-pkg/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/read-pkg/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json\\nnode_modules/read-pkg/node_modules/semver/package.json\\nnode_modules/read-pkg/node_modules/type-fest/package.json\\nnode_modules/read-pkg/package.json\\nnode_modules/readable-stream/package.json\\nnode_modules/readdirp/package.json\\nnode_modules/redent/package.json\\nnode_modules/reflect.getprototypeof/package.json\\nnode_modules/regexp.prototype.flags/package.json\\nnode_modules/regexpp/package.json\\nnode_modules/release-please/node_modules/conventional-changelog-conventionalcommits/package.json\\nnode_modules/release-please/node_modules/type-fest/package.json\\nnode_modules/release-please/node_modules/typescript/package.json\\nnode_modules/release-please/package.json\\nnode_modules/release-zalgo/package.json\\nnode_modules/require-directory/package.json\\nnode_modules/require-from-string/package.json\\nnode_modules/require-main-filename/package.json\\nnode_modules/resolve-from/package.json\\nnode_modules/resolve-global/package.json\\nnode_modules/resolve/package.json\\nnode_modules/resolve/test/resolver/baz/package.json\\nnode_modules/resolve/test/resolver/browser_field/package.json\\nnode_modules/resolve/test/resolver/false_main/package.json\\nnode_modules/resolve/test/resolver/invalid_main/package.json\\nnode_modules/resolve/test/resolver/multirepo/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-a/package.json\\nnode_modules/resolve/test/resolver/multirepo/packages/package-b/package.json\\nnode_modules/resolve/test/resolver/nested_symlinks/mylib/package.json\\nnode_modules/retry/package.json\\nnode_modules/reusify/package.json\\nnode_modules/rimraf/node_modules/brace-expansion/package.json\\nnode_modules/rimraf/node_modules/glob/package.json\\nnode_modules/rimraf/node_modules/minimatch/package.json\\nnode_modules/rimraf/package.json\\nnode_modules/run-parallel/package.json\\nnode_modules/safe-array-concat/package.json\\nnode_modules/safe-buffer/package.json\\nnode_modules/safe-push-apply/package.json\\nnode_modules/safe-regex-test/package.json\\nnode_modules/safer-buffer/package.json\\nnode_modules/semver/package.json\\nnode_modules/set-blocking/package.json\\nnode_modules/set-function-length/package.json\\nnode_modules/set-function-name/package.json\\nnode_modules/set-proto/package.json\\nnode_modules/shebang-command/package.json\\nnode_modules/shebang-regex/package.json\\nnode_modules/side-channel-list/package.json\\nnode_modules/side-channel-map/package.json\\nnode_modules/side-channel-weakmap/package.json\\nnode_modules/side-channel/package.json\\nnode_modules/signal-exit/package.json\\nnode_modules/sigstore/node_modules/make-fetch-happen/package.json\\nnode_modules/sigstore/node_modules/minipass-fetch/node_modules/minipass/package.json\\nnode_modules/sigstore/node_modules/minipass-fetch/package.json\\nnode_modules/sigstore/package.json\\nnode_modules/slash/package.json\\nnode_modules/smart-buffer/package.json\\nnode_modules/socks-proxy-agent/package.json\\nnode_modules/socks/package.json\\nnode_modules/sort-keys/package.json\\nnode_modules/source-map-support/package.json\\nnode_modules/source-map/package.json\\nnode_modules/spawn-wrap/node_modules/which/package.json\\nnode_modules/spawn-wrap/package.json\\nnode_modules/spdx-correct/package.json\\nnode_modules/spdx-exceptions/package.json\\nnode_modules/spdx-expression-parse/package.json\\nnode_modules/spdx-license-ids/package.json\\nnode_modules/split/package.json\\nnode_modules/split2/package.json\\nnode_modules/sprintf-js/package.json\\nnode_modules/ssri/node_modules/minipass/package.json\\nnode_modules/ssri/package.json\\nnode_modules/stack-utils/node_modules/escape-string-regexp/package.json\\nnode_modules/stack-utils/package.json\\nnode_modules/static-eval/package.json\\nnode_modules/stop-iteration-iterator/package.json\\nnode_modules/string-width-cjs/package.json\\nnode_modules/string-width/package.json\\nnode_modules/string.prototype.trim/package.json\\nnode_modules/string.prototype.trimend/package.json\\nnode_modules/string.prototype.trimstart/package.json\\nnode_modules/string_decoder/package.json\\nnode_modules/strip-ansi-cjs/package.json\\nnode_modules/strip-ansi/package.json\\nnode_modules/strip-bom/package.json\\nnode_modules/strip-final-newline/package.json\\nnode_modules/strip-indent/package.json\\nnode_modules/strip-json-comments/package.json\\nnode_modules/strong-log-transformer/package.json\\nnode_modules/supports-color/package.json\\nnode_modules/supports-preserve-symlinks-flag/package.json\\nnode_modules/tap-mocha-reporter/node_modules/brace-expansion/package.json\\nnode_modules/tap-mocha-reporter/node_modules/diff/package.json\\nnode_modules/tap-mocha-reporter/node_modules/escape-string-regexp/package.json\\nnode_modules/tap-mocha-reporter/node_modules/glob/package.json\\nnode_modules/tap-mocha-reporter/node_modules/minimatch/package.json\\nnode_modules/tap-mocha-reporter/package.json\\nnode_modules/tap-parser/node_modules/events-to-array/package.json\\nnode_modules/tap-parser/node_modules/minipass/package.json\\nnode_modules/tap-parser/package.json\\nnode_modules/tap-yaml/node_modules/yaml/package.json\\nnode_modules/tap-yaml/package.json\\nnode_modules/tap/node_modules/@ampproject/remapping/package.json\\nnode_modules/tap/node_modules/@babel/code-frame/package.json\\nnode_modules/tap/node_modules/@babel/compat-data/package.json\\nnode_modules/tap/node_modules/@babel/core/package.json\\nnode_modules/tap/node_modules/@babel/generator/package.json\\nnode_modules/tap/node_modules/@babel/helper-annotate-as-pure/package.json\\nnode_modules/tap/node_modules/@babel/helper-compilation-targets/package.json\\nnode_modules/tap/node_modules/@babel/helper-environment-visitor/package.json\\nnode_modules/tap/node_modules/@babel/helper-function-name/package.json\\nnode_modules/tap/node_modules/@babel/helper-hoist-variables/package.json\\nnode_modules/tap/node_modules/@babel/helper-module-imports/package.json\\nnode_modules/tap/node_modules/@babel/helper-module-transforms/package.json\\nnode_modules/tap/node_modules/@babel/helper-plugin-utils/package.json\\nnode_modules/tap/node_modules/@babel/helper-simple-access/package.json\\nnode_modules/tap/node_modules/@babel/helper-split-export-declaration/package.json\\nnode_modules/tap/node_modules/@babel/helper-string-parser/package.json\\nnode_modules/tap/node_modules/@babel/helper-validator-identifier/package.json\\nnode_modules/tap/node_modules/@babel/helper-validator-option/package.json\\nnode_modules/tap/node_modules/@babel/helpers/package.json\\nnode_modules/tap/node_modules/@babel/highlight/package.json\\nnode_modules/tap/node_modules/@babel/parser/package.json\\nnode_modules/tap/node_modules/@babel/plugin-proposal-object-rest-spread/package.json\\nnode_modules/tap/node_modules/@babel/plugin-syntax-jsx/package.json\\nnode_modules/tap/node_modules/@babel/plugin-syntax-object-rest-spread/package.json\\nnode_modules/tap/node_modules/@babel/plugin-transform-destructuring/package.json\\nnode_modules/tap/node_modules/@babel/plugin-transform-parameters/package.json\\nnode_modules/tap/node_modules/@babel/plugin-transform-react-jsx/package.json\\nnode_modules/tap/node_modules/@babel/template/package.json\\nnode_modules/tap/node_modules/@babel/traverse/package.json\\nnode_modules/tap/node_modules/@babel/types/package.json\\nnode_modules/tap/node_modules/@isaacs/import-jsx/package.json\\nnode_modules/tap/node_modules/@jridgewell/gen-mapping/package.json\\nnode_modules/tap/node_modules/@jridgewell/resolve-uri/package.json\\nnode_modules/tap/node_modules/@jridgewell/set-array/package.json\\nnode_modules/tap/node_modules/@jridgewell/sourcemap-codec/package.json\\nnode_modules/tap/node_modules/@jridgewell/trace-mapping/package.json\\nnode_modules/tap/node_modules/@types/prop-types/package.json\\nnode_modules/tap/node_modules/@types/react/package.json\\nnode_modules/tap/node_modules/@types/scheduler/package.json\\nnode_modules/tap/node_modules/@types/yoga-layout/package.json\\nnode_modules/tap/node_modules/ansi-escapes/node_modules/type-fest/package.json\\nnode_modules/tap/node_modules/ansi-escapes/package.json\\nnode_modules/tap/node_modules/ansi-regex/package.json\\nnode_modules/tap/node_modules/ansi-styles/package.json\\nnode_modules/tap/node_modules/ansicolors/package.json\\nnode_modules/tap/node_modules/astral-regex/package.json\\nnode_modules/tap/node_modules/auto-bind/package.json\\nnode_modules/tap/node_modules/balanced-match/package.json\\nnode_modules/tap/node_modules/brace-expansion/package.json\\nnode_modules/tap/node_modules/browserslist/package.json\\nnode_modules/tap/node_modules/caller-callsite/package.json\\nnode_modules/tap/node_modules/caller-path/package.json\\nnode_modules/tap/node_modules/callsites/package.json\\nnode_modules/tap/node_modules/caniuse-lite/package.json\\nnode_modules/tap/node_modules/cardinal/package.json\\nnode_modules/tap/node_modules/chalk/package.json\\nnode_modules/tap/node_modules/ci-info/package.json\\nnode_modules/tap/node_modules/cli-boxes/package.json\\nnode_modules/tap/node_modules/cli-cursor/package.json\\nnode_modules/tap/node_modules/cli-truncate/package.json\\nnode_modules/tap/node_modules/code-excerpt/package.json\\nnode_modules/tap/node_modules/color-convert/package.json\\nnode_modules/tap/node_modules/color-name/package.json\\nnode_modules/tap/node_modules/commondir/package.json\\nnode_modules/tap/node_modules/concat-map/package.json\\nnode_modules/tap/node_modules/convert-source-map/package.json\\nnode_modules/tap/node_modules/convert-to-spaces/package.json\\nnode_modules/tap/node_modules/csstype/package.json\\nnode_modules/tap/node_modules/debug/package.json\\nnode_modules/tap/node_modules/electron-to-chromium/package.json\\nnode_modules/tap/node_modules/emoji-regex/package.json\\nnode_modules/tap/node_modules/escalade/package.json\\nnode_modules/tap/node_modules/escape-string-regexp/package.json\\nnode_modules/tap/node_modules/esprima/package.json\\nnode_modules/tap/node_modules/events-to-array/package.json\\nnode_modules/tap/node_modules/find-cache-dir/package.json\\nnode_modules/tap/node_modules/find-up/package.json\\nnode_modules/tap/node_modules/fs.realpath/package.json\\nnode_modules/tap/node_modules/gensync/package.json\\nnode_modules/tap/node_modules/glob/package.json\\nnode_modules/tap/node_modules/globals/package.json\\nnode_modules/tap/node_modules/has-flag/package.json\\nnode_modules/tap/node_modules/indent-string/package.json\\nnode_modules/tap/node_modules/inflight/package.json\\nnode_modules/tap/node_modules/inherits/package.json\\nnode_modules/tap/node_modules/ink/node_modules/ansi-styles/package.json\\nnode_modules/tap/node_modules/ink/node_modules/chalk/package.json\\nnode_modules/tap/node_modules/ink/node_modules/color-convert/package.json\\nnode_modules/tap/node_modules/ink/node_modules/color-name/package.json\\nnode_modules/tap/node_modules/ink/node_modules/has-flag/package.json\\nnode_modules/tap/node_modules/ink/node_modules/supports-color/package.json\\nnode_modules/tap/node_modules/ink/package.json\\nnode_modules/tap/node_modules/is-ci/package.json\\nnode_modules/tap/node_modules/is-fullwidth-code-point/package.json\\nnode_modules/tap/node_modules/js-tokens/package.json\\nnode_modules/tap/node_modules/jsesc/package.json\\nnode_modules/tap/node_modules/json5/package.json\\nnode_modules/tap/node_modules/locate-path/package.json\\nnode_modules/tap/node_modules/lodash/package.json\\nnode_modules/tap/node_modules/loose-envify/package.json\\nnode_modules/tap/node_modules/lru-cache/package.json\\nnode_modules/tap/node_modules/make-dir/package.json\\nnode_modules/tap/node_modules/mimic-fn/package.json\\nnode_modules/tap/node_modules/minimatch/package.json\\nnode_modules/tap/node_modules/minipass/node_modules/yallist/package.json\\nnode_modules/tap/node_modules/minipass/package.json\\nnode_modules/tap/node_modules/ms/package.json\\nnode_modules/tap/node_modules/node-releases/package.json\\nnode_modules/tap/node_modules/object-assign/package.json\\nnode_modules/tap/node_modules/once/package.json\\nnode_modules/tap/node_modules/onetime/package.json\\nnode_modules/tap/node_modules/p-limit/package.json\\nnode_modules/tap/node_modules/p-locate/package.json\\nnode_modules/tap/node_modules/p-try/package.json\\nnode_modules/tap/node_modules/patch-console/package.json\\nnode_modules/tap/node_modules/path-exists/package.json\\nnode_modules/tap/node_modules/path-is-absolute/package.json\\nnode_modules/tap/node_modules/picocolors/package.json\\nnode_modules/tap/node_modules/pkg-dir/package.json\\nnode_modules/tap/node_modules/punycode/package.json\\nnode_modules/tap/node_modules/react-devtools-core/package.json\\nnode_modules/tap/node_modules/react-reconciler/package.json\\nnode_modules/tap/node_modules/react/package.json\\nnode_modules/tap/node_modules/redeyed/package.json\\nnode_modules/tap/node_modules/resolve-from/package.json\\nnode_modules/tap/node_modules/restore-cursor/package.json\\nnode_modules/tap/node_modules/rimraf/package.json\\nnode_modules/tap/node_modules/scheduler/package.json\\nnode_modules/tap/node_modules/semver/package.json\\nnode_modules/tap/node_modules/shell-quote/package.json\\nnode_modules/tap/node_modules/signal-exit/package.json\\nnode_modules/tap/node_modules/slice-ansi/node_modules/ansi-styles/package.json\\nnode_modules/tap/node_modules/slice-ansi/node_modules/color-convert/package.json\\nnode_modules/tap/node_modules/slice-ansi/node_modules/color-name/package.json\\nnode_modules/tap/node_modules/slice-ansi/package.json\\nnode_modules/tap/node_modules/stack-utils/node_modules/escape-string-regexp/package.json\\nnode_modules/tap/node_modules/stack-utils/package.json\\nnode_modules/tap/node_modules/string-width/package.json\\nnode_modules/tap/node_modules/strip-ansi/package.json\\nnode_modules/tap/node_modules/supports-color/package.json\\nnode_modules/tap/node_modules/tap-parser/package.json\\nnode_modules/tap/node_modules/tap-yaml/package.json\\nnode_modules/tap/node_modules/to-fast-properties/package.json\\nnode_modules/tap/node_modules/treport/node_modules/ansi-styles/package.json\\nnode_modules/tap/node_modules/treport/node_modules/chalk/package.json\\nnode_modules/tap/node_modules/treport/node_modules/color-convert/package.json\\nnode_modules/tap/node_modules/treport/node_modules/color-name/package.json\\nnode_modules/tap/node_modules/treport/node_modules/has-flag/package.json\\nnode_modules/tap/node_modules/treport/node_modules/supports-color/package.json\\nnode_modules/tap/node_modules/treport/package.json\\nnode_modules/tap/node_modules/type-fest/package.json\\nnode_modules/tap/node_modules/unicode-length/package.json\\nnode_modules/tap/node_modules/update-browserslist-db/package.json\\nnode_modules/tap/node_modules/which/package.json\\nnode_modules/tap/node_modules/widest-line/package.json\\nnode_modules/tap/node_modules/wrap-ansi/node_modules/ansi-styles/package.json\\nnode_modules/tap/node_modules/wrap-ansi/node_modules/color-convert/package.json\\nnode_modules/tap/node_modules/wrap-ansi/node_modules/color-name/package.json\\nnode_modules/tap/node_modules/wrap-ansi/package.json\\nnode_modules/tap/node_modules/wrappy/package.json\\nnode_modules/tap/node_modules/ws/package.json\\nnode_modules/tap/node_modules/yallist/package.json\\nnode_modules/tap/node_modules/yaml/package.json\\nnode_modules/tap/node_modules/yoga-layout-prebuilt/package.json\\nnode_modules/tap/package.json\\nnode_modules/tar/package.json\\nnode_modules/tcompare/node_modules/diff/package.json\\nnode_modules/tcompare/package.json\\nnode_modules/test-exclude/node_modules/brace-expansion/package.json\\nnode_modules/test-exclude/node_modules/glob/package.json\\nnode_modules/test-exclude/node_modules/minimatch/package.json\\nnode_modules/test-exclude/package.json\\nnode_modules/text-extensions/package.json\\nnode_modules/text-table/package.json\\nnode_modules/through/package.json\\nnode_modules/through2/package.json\\nnode_modules/to-regex-range/package.json\\nnode_modules/tr46/package.json\\nnode_modules/treeverse/package.json\\nnode_modules/trim-newlines/package.json\\nnode_modules/trivial-deferred/package.json\\nnode_modules/ts-node/node_modules/diff/package.json\\nnode_modules/ts-node/package.json\\nnode_modules/tsconfig-paths/node_modules/json5/package.json\\nnode_modules/tsconfig-paths/node_modules/strip-bom/package.json\\nnode_modules/tsconfig-paths/package.json\\nnode_modules/tuf-js/node_modules/make-fetch-happen/package.json\\nnode_modules/tuf-js/node_modules/minipass-fetch/node_modules/minipass/package.json\\nnode_modules/tuf-js/node_modules/minipass-fetch/package.json\\nnode_modules/tuf-js/package.json\\nnode_modules/tunnel/package.json\\nnode_modules/type-check/package.json\\nnode_modules/type-fest/package.json\\nnode_modules/typed-array-buffer/package.json\\nnode_modules/typed-array-byte-length/package.json\\nnode_modules/typed-array-byte-offset/package.json\\nnode_modules/typed-array-length/package.json\\nnode_modules/typedarray-to-buffer/package.json\\nnode_modules/typescript/package.json\\nnode_modules/uglify-js/package.json\\nnode_modules/unbox-primitive/package.json\\nnode_modules/underscore/package.json\\nnode_modules/undici/package.json\\nnode_modules/unicode-length/package.json\\nnode_modules/unique-filename/package.json\\nnode_modules/unique-slug/package.json\\nnode_modules/unist-util-is/package.json\\nnode_modules/unist-util-visit-parents/package.json\\nnode_modules/unist-util-visit/package.json\\nnode_modules/universal-user-agent/package.json\\nnode_modules/universalify/package.json\\nnode_modules/update-browserslist-db/package.json\\nnode_modules/uri-js/package.json\\nnode_modules/util-deprecate/package.json\\nnode_modules/uuid/package.json\\nnode_modules/v8-compile-cache-lib/package.json\\nnode_modules/validate-npm-package-license/package.json\\nnode_modules/validate-npm-package-name/package.json\\nnode_modules/walk-up-path/package.json\\nnode_modules/webidl-conversions/package.json\\nnode_modules/whatwg-url/package.json\\nnode_modules/which-boxed-primitive/package.json\\nnode_modules/which-builtin-type/package.json\\nnode_modules/which-collection/package.json\\nnode_modules/which-module/package.json\\nnode_modules/which-typed-array/package.json\\nnode_modules/which/package.json\\nnode_modules/wide-align/package.json\\nnode_modules/word-wrap/package.json\\nnode_modules/wordwrap/package.json\\nnode_modules/wrap-ansi-cjs/package.json\\nnode_modules/wrap-ansi/package.json\\nnode_modules/wrappy/package.json\\nnode_modules/write-file-atomic/node_modules/signal-exit/package.json\\nnode_modules/write-file-atomic/package.json\\nnode_modules/write-json-file/node_modules/detect-indent/package.json\\nnode_modules/write-json-file/node_modules/make-dir/package.json\\nnode_modules/write-json-file/node_modules/semver/package.json\\nnode_modules/write-json-file/node_modules/write-file-atomic/package.json\\nnode_modules/write-json-file/package.json\\nnode_modules/write-pkg/node_modules/type-fest/package.json\\nnode_modules/write-pkg/package.json\\nnode_modules/xpath/package.json\\nnode_modules/y18n/package.json\\nnode_modules/yallist/package.json\\nnode_modules/yaml/package.json\\nnode_modules/yargs-parser/package.json\\nnode_modules/yargs/node_modules/cliui/package.json\\nnode_modules/yargs/node_modules/yargs-parser/package.json\\nnode_modules/yargs/package.json\\nnode_modules/yn/package.json\\nnode_modules/yocto-queue/package.json"
      }
    ]
  },
  "components": [
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "yocto-queue",
      "version": "0.1.0",
      "description": "Tiny queue data structure",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yocto-queue@0.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/yocto-queue@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yocto-queue/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yocto-queue/package.json"
              }
            ],
            "concludedValue": "node_modules/yocto-queue/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "yn",
      "version": "3.1.1",
      "description": "Parse yes/no like values",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yn@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/yn@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yn/package.json"
              }
            ],
            "concludedValue": "node_modules/yn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "yargs-parser",
      "version": "20.2.9",
      "description": "the mighty option parser used by yargs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs-parser@20.2.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yargs/yargs-parser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@20.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yargs-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yargs-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/yargs-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yargs",
      "version": "17.7.3",
      "description": "yargs the modern, pirate-themed, successor to optimist.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs@17.7.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://yargs.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/yargs/yargs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@17.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yargs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yargs/package.json"
              }
            ],
            "concludedValue": "node_modules/yargs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "yargs-parser",
      "version": "21.1.1",
      "description": "the mighty option parser used by yargs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs-parser@21.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yargs/yargs-parser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@21.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yargs/node_modules/yargs-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yargs/node_modules/yargs-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/yargs/node_modules/yargs-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "cliui",
      "version": "8.0.1",
      "description": "easily create complex multi-column command-line-interfaces",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cliui@8.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/cliui@8.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yargs/node_modules/cliui/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yargs/node_modules/cliui/package.json"
              }
            ],
            "concludedValue": "node_modules/yargs/node_modules/cliui/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Eemeli Aro <eemeli@gmail.com>"
        }
      ],
      "group": "",
      "name": "yaml",
      "version": "2.9.0",
      "description": "JavaScript parser and stringifier for YAML",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yaml@2.9.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://eemeli.org/yaml/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yaml@2.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yaml/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/yaml/package.json"
              }
            ],
            "concludedValue": "node_modules/yaml/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "yallist",
      "version": "4.0.0",
      "description": "Yet Another Linked List",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yallist@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/yallist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yallist@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/yallist/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "yallist"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/minipass/node_modules/yallist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/minipass/node_modules/yallist/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/minipass/node_modules/yallist/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/pack.js",
            "line": 31
          },
          {
            "location": "lib/parse.js",
            "line": 26
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <bencoe@gmail.com>"
        }
      ],
      "group": "",
      "name": "y18n",
      "version": "5.0.8",
      "description": "the bare-bones internationalization library used by yargs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/y18n@5.0.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yargs/y18n"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@5.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/y18n/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/y18n/package.json"
              }
            ],
            "concludedValue": "node_modules/y18n/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Cameron McCormack"
        }
      ],
      "group": "",
      "name": "xpath",
      "version": "0.0.32",
      "description": "DOM 3 XPath implemention and helper for node.js.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/xpath@0.0.32",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/goto100/xpath.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xpath@0.0.32",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/xpath/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/xpath/package.json"
              }
            ],
            "concludedValue": "node_modules/xpath/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "write-pkg",
      "version": "4.0.0",
      "description": "Write a package.json file",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/write-pkg@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/write-pkg@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/write-pkg/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/write-pkg/package.json"
              }
            ],
            "concludedValue": "node_modules/write-pkg/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "type-fest",
      "version": "0.4.1",
      "description": "A collection of essential TypeScript types",
      "scope": "optional",
      "licenses": [
        {
          "expression": "MIT OR CC0-1.0"
        }
      ],
      "purl": "pkg:npm/type-fest@0.4.1",
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/write-pkg/node_modules/type-fest/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/write-pkg/node_modules/type-fest/package.json"
              }
            ],
            "concludedValue": "node_modules/write-pkg/node_modules/type-fest/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "write-json-file",
      "version": "3.2.0",
      "description": "Stringify and write JSON to a file atomically",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/write-json-file@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/write-json-file@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/write-json-file/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/write-json-file/package.json"
              }
            ],
            "concludedValue": "node_modules/write-json-file/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org> (http://re-becca.org)"
        }
      ],
      "group": "",
      "name": "write-file-atomic",
      "version": "2.4.3",
      "description": "Write files in an atomic fashion w/configurable ownership",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/write-file-atomic@2.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/iarna/write-file-atomic"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/write-file-atomic@2.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/write-json-file/node_modules/write-file-atomic/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/write-json-file/node_modules/write-file-atomic/package.json"
              }
            ],
            "concludedValue": "node_modules/write-json-file/node_modules/write-file-atomic/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "semver",
      "version": "5.7.2",
      "description": "The semantic version parser used by npm.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/semver@5.7.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/node-semver.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@5.7.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/write-json-file/node_modules/semver/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg/node_modules/semver/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/read-pkg/node_modules/semver/package.json"
              }
            ],
            "concludedValue": "node_modules/read-pkg/node_modules/semver/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "make-dir",
      "version": "2.1.0",
      "description": "Make a directory and its parents if needed - Think `mkdir -p`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/make-dir@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/make-dir@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/write-json-file/node_modules/make-dir/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/write-json-file/node_modules/make-dir/package.json"
              }
            ],
            "concludedValue": "node_modules/write-json-file/node_modules/make-dir/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "detect-indent",
      "version": "5.0.0",
      "description": "Detect the indentation of code",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/detect-indent@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/detect-indent@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/write-json-file/node_modules/detect-indent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/write-json-file/node_modules/detect-indent/package.json"
              }
            ],
            "concludedValue": "node_modules/write-json-file/node_modules/detect-indent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "write-file-atomic",
      "version": "5.0.1",
      "description": "Write files in an atomic fashion w/configurable ownership",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/write-file-atomic@5.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/write-file-atomic"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/write-file-atomic.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/write-file-atomic@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/write-file-atomic/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/write-file-atomic/package.json"
              }
            ],
            "concludedValue": "node_modules/write-file-atomic/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "signal-exit",
      "version": "4.1.0",
      "description": "when you want to fire an event no matter how a process exits.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/signal-exit@4.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tapjs/signal-exit.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/write-file-atomic/node_modules/signal-exit/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/read-package-json/node_modules/signal-exit/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/gauge/node_modules/signal-exit/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/cacache/node_modules/signal-exit/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/package-json/node_modules/signal-exit/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/map-workspaces/node_modules/signal-exit/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/arborist/node_modules/signal-exit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/arborist/node_modules/signal-exit/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/arborist/node_modules/signal-exit/package.json"
          }
        ]
      },
      "tags": [
        "event"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "description": "Callback wrapping utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/wrappy"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/wrappy"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wrappy/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/wrappy/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/wrappy/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/wrappy/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "wrap-ansi",
      "version": "7.0.0",
      "description": "Wordwrap a string with ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wrap-ansi@7.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wrap-ansi-cjs/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/wrap-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wrap-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/wrap-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "wordwrap",
      "version": "1.0.0",
      "description": "Wrap those words. Show them at what columns to start and stop.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wordwrap@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-wordwrap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wordwrap@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wordwrap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wordwrap/package.json"
              }
            ],
            "concludedValue": "node_modules/wordwrap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "word-wrap",
      "version": "1.2.5",
      "description": "Wrap words to a specified length.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/word-wrap@1.2.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/word-wrap"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/word-wrap@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/word-wrap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/word-wrap/package.json"
              }
            ],
            "concludedValue": "node_modules/word-wrap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org> (http://re-becca.org/)"
        }
      ],
      "group": "",
      "name": "wide-align",
      "version": "1.1.5",
      "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wide-align@1.1.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/iarna/wide-align"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wide-align@1.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/wide-align/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/wide-align/package.json"
              }
            ],
            "concludedValue": "node_modules/wide-align/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "which-typed-array",
      "version": "1.1.22",
      "description": "Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which-typed-array@1.1.22",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/which-typed-array.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-typed-array@1.1.22",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/which-typed-array/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/which-typed-array/package.json"
              }
            ],
            "concludedValue": "node_modules/which-typed-array/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "nexdrew"
        }
      ],
      "group": "",
      "name": "which-module",
      "version": "2.0.1",
      "description": "Find the module object for something that was require()d",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which-module@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nexdrew/which-module#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/nexdrew/which-module.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-module@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/which-module/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/which-module/package.json"
              }
            ],
            "concludedValue": "node_modules/which-module/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "which-collection",
      "version": "1.0.2",
      "description": "Which kind of Collection (Map, Set, WeakMap, WeakSet) is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which-collection@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/which-collection#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/which-collection.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-collection@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/which-collection/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/which-collection/package.json"
              }
            ],
            "concludedValue": "node_modules/which-collection/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "which-builtin-type",
      "version": "1.2.1",
      "description": "What is the type of this builtin JS value?",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which-builtin-type@1.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/which-builtin-type#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/which-builtin-type.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-builtin-type@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/which-builtin-type/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/which-builtin-type/package.json"
              }
            ],
            "concludedValue": "node_modules/which-builtin-type/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "which-boxed-primitive",
      "version": "1.1.1",
      "description": "Which kind of boxed JS primitive is this?",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which-boxed-primitive@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/which-boxed-primitive#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/which-boxed-primitive.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-boxed-primitive@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/which-boxed-primitive/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/which-boxed-primitive/package.json"
              }
            ],
            "concludedValue": "node_modules/which-boxed-primitive/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "which",
      "version": "3.0.1",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/node-which.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/which/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/which/package.json"
              }
            ],
            "concludedValue": "node_modules/which/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sebastian Mayr <github@smayr.name>"
        }
      ],
      "group": "",
      "name": "whatwg-url",
      "version": "5.0.0",
      "description": "An implementation of the WHATWG URL Standard's URL API and parsing machinery",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/whatwg-url@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/whatwg-url@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/whatwg-url/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/whatwg-url/package.json"
              }
            ],
            "concludedValue": "node_modules/whatwg-url/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Domenic Denicola <d@domenic.me> (https://domenic.me/)"
        }
      ],
      "group": "",
      "name": "webidl-conversions",
      "version": "3.0.1",
      "description": "Implements the WebIDL algorithms for converting to and from JavaScript values",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/webidl-conversions@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/webidl-conversions@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/webidl-conversions/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/webidl-conversions/package.json"
              }
            ],
            "concludedValue": "node_modules/webidl-conversions/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "walk-up-path",
      "version": "3.0.1",
      "description": "Given a path string, return a generator that walks up the path, emitting each dirname.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/walk-up-path@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/walk-up-path"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/walk-up-path@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/walk-up-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/walk-up-path/package.json"
              }
            ],
            "concludedValue": "node_modules/walk-up-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "validate-npm-package-name",
      "version": "5.0.1",
      "description": "Give me a string and I'll tell you if it's a valid npm package name",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/validate-npm-package-name@5.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/validate-npm-package-name"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/validate-npm-package-name.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/validate-npm-package-name@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/validate-npm-package-name/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/validate-npm-package-name/package.json"
              }
            ],
            "concludedValue": "node_modules/validate-npm-package-name/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com)"
        }
      ],
      "group": "",
      "name": "validate-npm-package-license",
      "version": "3.0.4",
      "description": "Give me a string and I'll tell you if it's a valid npm package license string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/validate-npm-package-license@3.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/validate-npm-package-license@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/validate-npm-package-license/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/validate-npm-package-license/package.json"
              }
            ],
            "concludedValue": "node_modules/validate-npm-package-license/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrew Bradley <cspotcode@gmail.com>"
        }
      ],
      "group": "",
      "name": "v8-compile-cache-lib",
      "version": "3.0.1",
      "description": "Require hook for automatic V8 compile cache persistence",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/v8-compile-cache-lib@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/cspotcode/v8-compile-cache-lib.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/v8-compile-cache-lib@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/v8-compile-cache-lib/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/v8-compile-cache-lib/package.json"
              }
            ],
            "concludedValue": "node_modules/v8-compile-cache-lib/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "uuid",
      "version": "8.3.2",
      "description": "RFC4122 (v1, v4, and v5) UUIDs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uuid@8.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/uuidjs/uuid.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uuid@8.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/uuid/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/uuid/package.json"
              }
            ],
            "concludedValue": "node_modules/uuid/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)"
        }
      ],
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "description": "The Node.js `util.deprecate()` function with browser support",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/TooTallNate/util-deprecate"
        },
        {
          "type": "vcs",
          "url": "git://github.com/TooTallNate/util-deprecate.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/util-deprecate/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/util-deprecate/package.json"
              }
            ],
            "concludedValue": "node_modules/util-deprecate/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Gary Court <gary.court@gmail.com>"
        }
      ],
      "group": "",
      "name": "uri-js",
      "version": "4.4.1",
      "description": "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving library for JavaScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uri-js@4.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/garycourt/uri-js"
        },
        {
          "type": "vcs",
          "url": "http://github.com/garycourt/uri-js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/uri-js@4.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/uri-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/uri-js/package.json"
              }
            ],
            "concludedValue": "node_modules/uri-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrey Sitnik <andrey@sitnik.es>"
        }
      ],
      "group": "",
      "name": "update-browserslist-db",
      "version": "1.3.2",
      "description": "CLI tool to update caniuse-lite to refresh target browsers from Browserslist config",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/update-browserslist-db@1.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/update-browserslist-db@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/update-browserslist-db/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/update-browserslist-db/package.json"
              }
            ],
            "concludedValue": "node_modules/update-browserslist-db/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ryan Zimmerman <opensrc@ryanzim.com>"
        }
      ],
      "group": "",
      "name": "universalify",
      "version": "2.0.1",
      "description": "Make a callback- or promise-based function support both promises and callbacks.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/universalify@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/RyanZim/universalify#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/RyanZim/universalify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/universalify@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/universalify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/universalify/package.json"
              }
            ],
            "concludedValue": "node_modules/universalify/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universal-user-agent",
      "version": "6.0.1",
      "description": "Get a user agent string in both browser and node",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/universal-user-agent@6.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/universal-user-agent@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/universal-user-agent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/universal-user-agent/package.json"
              }
            ],
            "concludedValue": "node_modules/universal-user-agent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)"
        }
      ],
      "group": "",
      "name": "unist-util-visit-parents",
      "version": "3.1.1",
      "description": "unist utility to recursively walk over nodes, with ancestral information",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unist-util-visit-parents@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/unist-util-visit-parents@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/unist-util-visit-parents/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/unist-util-visit-parents/package.json"
              }
            ],
            "concludedValue": "node_modules/unist-util-visit-parents/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)"
        }
      ],
      "group": "",
      "name": "unist-util-visit",
      "version": "2.0.3",
      "description": "unist utility to visit nodes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unist-util-visit@2.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/unist-util-visit@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/unist-util-visit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/unist-util-visit/package.json"
              }
            ],
            "concludedValue": "node_modules/unist-util-visit/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Titus Wormer <tituswormer@gmail.com> (https://wooorm.com)"
        }
      ],
      "group": "",
      "name": "unist-util-is",
      "version": "4.1.0",
      "description": "unist utility to check if a node passes a test",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unist-util-is@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/unist-util-is@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/unist-util-is/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/unist-util-is/package.json"
              }
            ],
            "concludedValue": "node_modules/unist-util-is/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "unique-slug",
      "version": "4.0.0",
      "description": "Generate a unique character string suitible for use in files and URLs.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unique-slug@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/unique-slug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-slug@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/unique-slug/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/unique-slug/package.json"
              }
            ],
            "concludedValue": "node_modules/unique-slug/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "unique-filename",
      "version": "3.0.0",
      "description": "Generate a unique filename for use in temporary directories or caches.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unique-filename@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/iarna/unique-filename"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/unique-filename.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-filename@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/unique-filename/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/unique-filename/package.json"
              }
            ],
            "concludedValue": "node_modules/unique-filename/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Juan Cruz Viotti <jv@jviotti.com>"
        }
      ],
      "group": "",
      "name": "unicode-length",
      "version": "2.1.0",
      "description": "Get the length of unicode strings",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unicode-length@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jviotti/unicode-length"
        },
        {
          "type": "vcs",
          "url": "git://github.com/jviotti/unicode-length.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unicode-length@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/unicode-length/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/unicode-length/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/unicode-length/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/unicode-length/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "undici",
      "version": "5.29.0",
      "description": "An HTTP/1.1 client, written from scratch for Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/undici@5.29.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://undici.nodejs.org"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/nodejs/undici.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/undici@5.29.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/undici/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/undici/package.json"
              }
            ],
            "concludedValue": "node_modules/undici/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jeremy Ashkenas <jeremy@documentcloud.org>"
        }
      ],
      "group": "",
      "name": "underscore",
      "version": "1.13.6",
      "description": "JavaScript's functional programming helper library.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/underscore@1.13.6",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://underscorejs.org"
        },
        {
          "type": "vcs",
          "url": "git://github.com/jashkenas/underscore.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.13.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/underscore/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/underscore/package.json"
              }
            ],
            "concludedValue": "node_modules/underscore/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "unbox-primitive",
      "version": "1.1.0",
      "description": "Unbox a boxed JS primitive value.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unbox-primitive@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/unbox-primitive#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/unbox-primitive.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unbox-primitive@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/unbox-primitive/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/unbox-primitive/package.json"
              }
            ],
            "concludedValue": "node_modules/unbox-primitive/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mihai Bazon <mihai.bazon@gmail.com> (http://lisperator.net/)"
        }
      ],
      "group": "",
      "name": "uglify-js",
      "version": "3.19.3",
      "description": "JavaScript parser, mangler/compressor and beautifier toolkit",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/uglify-js@3.19.3",
      "type": "library",
      "bom-ref": "pkg:npm/uglify-js@3.19.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/uglify-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/uglify-js/package.json"
              }
            ],
            "concludedValue": "node_modules/uglify-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Microsoft Corp."
        }
      ],
      "group": "",
      "name": "typescript",
      "version": "5.9.3",
      "description": "TypeScript is a language for application scale JavaScript development",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typescript@5.9.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.typescriptlang.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/microsoft/TypeScript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@5.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/typescript/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/typescript/package.json"
              }
            ],
            "concludedValue": "node_modules/typescript/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org/)"
        }
      ],
      "group": "",
      "name": "typedarray-to-buffer",
      "version": "3.1.5",
      "description": "Convert a typed array to a Buffer without a copy",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typedarray-to-buffer@3.1.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://feross.org"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/typedarray-to-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typedarray-to-buffer@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/typedarray-to-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/typedarray-to-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/typedarray-to-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "typed-array-length",
      "version": "1.0.8",
      "description": "Robustly get the length of a Typed Array",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typed-array-length@1.0.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/typed-array-length#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/typed-array-length.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typed-array-length@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/typed-array-length/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/typed-array-length/package.json"
              }
            ],
            "concludedValue": "node_modules/typed-array-length/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "typed-array-byte-offset",
      "version": "1.0.4",
      "description": "Robustly get the byte offset of a Typed Array",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typed-array-byte-offset@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/typed-array-byte-offset#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/typed-array-byte-offset.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typed-array-byte-offset@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/typed-array-byte-offset/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/typed-array-byte-offset/package.json"
              }
            ],
            "concludedValue": "node_modules/typed-array-byte-offset/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "typed-array-byte-length",
      "version": "1.0.3",
      "description": "Robustly get the byte length of a Typed Array",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typed-array-byte-length@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/typed-array-byte-length#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/typed-array-byte-length.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typed-array-byte-length@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/typed-array-byte-length/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/typed-array-byte-length/package.json"
              }
            ],
            "concludedValue": "node_modules/typed-array-byte-length/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "typed-array-buffer",
      "version": "1.0.3",
      "description": "Get the ArrayBuffer out of a TypedArray, robustly.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typed-array-buffer@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/typed-array-buffer#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/typed-array-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typed-array-buffer@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/typed-array-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/typed-array-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/typed-array-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "type-fest",
      "version": "0.20.2",
      "description": "A collection of essential TypeScript types",
      "scope": "optional",
      "licenses": [
        {
          "expression": "MIT OR CC0-1.0"
        }
      ],
      "purl": "pkg:npm/type-fest@0.20.2",
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.20.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/type-fest/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/type-fest/package.json"
              }
            ],
            "concludedValue": "node_modules/type-fest/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "type-check",
      "version": "0.4.0",
      "description": "type-check allows you to check the types of JavaScript values at runtime with a Haskell like type syntax.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/type-check@0.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gkz/type-check"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/type-check.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/type-check@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/type-check/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/type-check/package.json"
              }
            ],
            "concludedValue": "node_modules/type-check/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Koichi Kobayashi <koichik@improvement.jp>"
        }
      ],
      "group": "",
      "name": "tunnel",
      "version": "0.0.6",
      "description": "Node HTTP/HTTPS Agents for tunneling proxies",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tunnel@0.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/koichik/node-tunnel/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/koichik/node-tunnel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tunnel@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tunnel/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tunnel/package.json"
              }
            ],
            "concludedValue": "node_modules/tunnel/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "bdehamer@github.com"
        }
      ],
      "group": "",
      "name": "tuf-js",
      "version": "1.1.7",
      "description": "JavaScript implementation of The Update Framework (TUF)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tuf-js@1.1.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/theupdateframework/tuf-js/tree/main/packages/client#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/theupdateframework/tuf-js.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/tuf-js@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tuf-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tuf-js/package.json"
              }
            ],
            "concludedValue": "node_modules/tuf-js/package.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "minipass-fetch",
      "version": "3.0.5",
      "description": "An implementation of window.fetch in Node.js using Minipass streams",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minipass-fetch@3.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/minipass-fetch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass-fetch@3.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tuf-js/node_modules/minipass-fetch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/sigstore/node_modules/minipass-fetch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/npm-registry-fetch/node_modules/minipass-fetch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@sigstore/sign/node_modules/minipass-fetch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@sigstore/sign/node_modules/minipass-fetch/package.json"
              }
            ],
            "concludedValue": "node_modules/@sigstore/sign/node_modules/minipass-fetch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "minipass",
      "version": "7.1.3",
      "description": "minimal implementation of a PassThrough stream",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minipass@7.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/minipass@7.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tuf-js/node_modules/minipass-fetch/node_modules/minipass/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "minipass"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/ssri/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/sigstore/node_modules/minipass-fetch/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/read-package-json/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/pacote/node_modules/fs-minipass/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/npm-registry-fetch/node_modules/minipass-fetch/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/cacache/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@sigstore/sign/node_modules/minipass-fetch/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/package-json/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/map-workspaces/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/arborist/node_modules/minipass/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/arborist/node_modules/minipass/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/arborist/node_modules/minipass/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/pack.js",
            "line": 25
          },
          {
            "location": "lib/read-entry.js",
            "line": 2
          },
          {
            "location": "lib/write-entry.js",
            "line": 2
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "make-fetch-happen",
      "version": "11.1.1",
      "description": "Opinionated, caching, retrying fetch client",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/make-fetch-happen@11.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/make-fetch-happen.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-fetch-happen@11.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tuf-js/node_modules/make-fetch-happen/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/sigstore/node_modules/make-fetch-happen/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/npm-registry-fetch/node_modules/make-fetch-happen/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@sigstore/sign/node_modules/make-fetch-happen/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@sigstore/sign/node_modules/make-fetch-happen/package.json"
              }
            ],
            "concludedValue": "node_modules/@sigstore/sign/node_modules/make-fetch-happen/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jonas Kello"
        }
      ],
      "group": "",
      "name": "tsconfig-paths",
      "version": "3.15.0",
      "description": "Load node modules according to tsconfig paths, in run-time or via API.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tsconfig-paths@3.15.0",
      "type": "library",
      "bom-ref": "pkg:npm/tsconfig-paths@3.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tsconfig-paths/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tsconfig-paths/package.json"
              }
            ],
            "concludedValue": "node_modules/tsconfig-paths/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-bom",
      "version": "3.0.0",
      "description": "Strip UTF-8 byte order mark (BOM) from a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-bom@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tsconfig-paths/node_modules/strip-bom/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tsconfig-paths/node_modules/strip-bom/package.json"
              }
            ],
            "concludedValue": "node_modules/tsconfig-paths/node_modules/strip-bom/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Aseem Kishore <aseem.kishore@gmail.com>"
        }
      ],
      "group": "",
      "name": "json5",
      "version": "1.0.2",
      "description": "JSON for humans.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json5@1.0.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://json5.org/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/json5/json5.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json5@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tsconfig-paths/node_modules/json5/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tsconfig-paths/node_modules/json5/package.json"
              }
            ],
            "concludedValue": "node_modules/tsconfig-paths/node_modules/json5/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Blake Embrey <hello@blakeembrey.com> (http://blakeembrey.me)"
        }
      ],
      "group": "",
      "name": "ts-node",
      "version": "10.9.2",
      "description": "TypeScript execution environment and REPL for node.js, with source map support",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ts-node@10.9.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://typestrong.org/ts-node"
        },
        {
          "type": "vcs",
          "url": "git://github.com/TypeStrong/ts-node.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ts-node@10.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ts-node/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ts-node/package.json"
              }
            ],
            "concludedValue": "node_modules/ts-node/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "4.0.4",
      "description": "A javascript text diff implementation.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/diff@4.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/kpdecker/jsdiff.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ts-node/node_modules/diff/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tcompare/node_modules/diff/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap-mocha-reporter/node_modules/diff/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/libtap/node_modules/diff/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/libtap/node_modules/diff/package.json"
              }
            ],
            "concludedValue": "node_modules/libtap/node_modules/diff/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "trivial-deferred",
      "version": "1.1.2",
      "description": "The most dead-simple trivial Deferred implementation",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/trivial-deferred@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/trivial-deferred.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/trivial-deferred@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/trivial-deferred/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/trivial-deferred/package.json"
              }
            ],
            "concludedValue": "node_modules/trivial-deferred/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "trim-newlines",
      "version": "3.0.1",
      "description": "Trim newlines from the start and/or end of a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/trim-newlines@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/trim-newlines@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/trim-newlines/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/trim-newlines/package.json"
              }
            ],
            "concludedValue": "node_modules/trim-newlines/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "treeverse",
      "version": "3.0.0",
      "description": "Walk any kind of tree structure depth- or breadth-first. Supports promises and advanced map-reduce operations with a very small API.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/treeverse@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/treeverse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/treeverse@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/treeverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/treeverse/package.json"
              }
            ],
            "concludedValue": "node_modules/treeverse/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Sebastian Mayr <npm@smayr.name>"
        }
      ],
      "group": "",
      "name": "tr46",
      "version": "0.0.3",
      "description": "An implementation of the Unicode TR46 spec",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tr46@0.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Sebmaster/tr46.js#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/Sebmaster/tr46.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tr46@0.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tr46/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tr46/package.json"
              }
            ],
            "concludedValue": "node_modules/tr46/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "to-regex-range",
      "version": "5.0.1",
      "description": "Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/to-regex-range@5.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/to-regex-range"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-regex-range@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/to-regex-range/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/to-regex-range/package.json"
              }
            ],
            "concludedValue": "node_modules/to-regex-range/package.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Rod Vagg <r@va.gg> (https://github.com/rvagg)"
        }
      ],
      "group": "",
      "name": "through2",
      "version": "4.0.2",
      "description": "A tiny wrapper around Node.js streams.Transform (Streams2/3) to avoid explicit subclassing noise",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/through2@4.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/rvagg/through2.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through2@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/through2/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/through2/package.json"
              }
            ],
            "concludedValue": "node_modules/through2/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com)"
        }
      ],
      "group": "",
      "name": "through",
      "version": "2.3.8",
      "description": "simplified stream construction",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/through@2.3.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dominictarr/through"
        },
        {
          "type": "vcs",
          "url": "https://github.com/dominictarr/through.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/through/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/through/package.json"
              }
            ],
            "concludedValue": "node_modules/through/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "text-table",
      "version": "0.2.0",
      "description": "borderless text tables with alignment",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/text-table@0.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/substack/text-table"
        },
        {
          "type": "vcs",
          "url": "git://github.com/substack/text-table.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/text-table@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/text-table/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/text-table/package.json"
              }
            ],
            "concludedValue": "node_modules/text-table/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "text-extensions",
      "version": "1.9.0",
      "description": "List of text file extensions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/text-extensions@1.9.0",
      "type": "library",
      "bom-ref": "pkg:npm/text-extensions@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/text-extensions/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/text-extensions/package.json"
              }
            ],
            "concludedValue": "node_modules/text-extensions/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "test-exclude",
      "version": "6.0.0",
      "description": "test for inclusion or exclusion of paths using globs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/test-exclude@6.0.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://istanbul.js.org/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/istanbuljs/test-exclude.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-exclude@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/test-exclude/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/test-exclude/package.json"
              }
            ],
            "concludedValue": "node_modules/test-exclude/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "minimatch",
      "version": "3.1.5",
      "description": "a glob matcher in javascript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@3.1.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/minimatch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/test-exclude/node_modules/minimatch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap-mocha-reporter/node_modules/minimatch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/rimraf/node_modules/minimatch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/minimatch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/node-gyp/node_modules/minimatch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/minimatch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-import/node_modules/minimatch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint/node_modules/minimatch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/code-suggester/node_modules/minimatch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/collect-updates/node_modules/minimatch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@humanwhocodes/config-array/node_modules/minimatch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/eslintrc/node_modules/minimatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/eslintrc/node_modules/minimatch/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/eslintrc/node_modules/minimatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "glob",
      "version": "7.2.3",
      "description": "a little globber",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@7.2.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-glob.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@7.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/test-exclude/node_modules/glob/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap-mocha-reporter/node_modules/glob/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/glob/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/rimraf/node_modules/glob/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/glob/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/node-gyp/node_modules/glob/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/code-suggester/node_modules/glob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/code-suggester/node_modules/glob/package.json"
              }
            ],
            "concludedValue": "node_modules/code-suggester/node_modules/glob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.18",
      "description": "Brace expansion as known from sh/bash",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.18",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/brace-expansion"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/brace-expansion.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/test-exclude/node_modules/brace-expansion/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap-mocha-reporter/node_modules/brace-expansion/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/rimraf/node_modules/brace-expansion/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/brace-expansion/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/node-gyp/node_modules/brace-expansion/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/brace-expansion/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-import/node_modules/brace-expansion/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint/node_modules/brace-expansion/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/code-suggester/node_modules/brace-expansion/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/collect-updates/node_modules/brace-expansion/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@humanwhocodes/config-array/node_modules/brace-expansion/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/eslintrc/node_modules/brace-expansion/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/eslintrc/node_modules/brace-expansion/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/eslintrc/node_modules/brace-expansion/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "tcompare",
      "version": "5.0.7",
      "description": "A comprehensive comparison library, for use in test frameworks",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tcompare@5.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/tapjs/tcompare.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/tcompare@5.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tcompare/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tcompare/package.json"
              }
            ],
            "concludedValue": "node_modules/tcompare/package.json"
          }
        ]
      },
      "tags": [
        "framework",
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "tar",
      "version": "6.2.1",
      "description": "tar for node",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tar@6.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/node-tar.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar@6.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tar/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tar/package.json"
              }
            ],
            "concludedValue": "node_modules/tar/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "tap-yaml",
      "version": "1.0.2",
      "description": "Yaml handling for TAP parsers and generators",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tap-yaml@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/tapjs/tap-yaml.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tap-yaml@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap-yaml/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/tap-yaml/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/tap-yaml/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/tap-yaml/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Eemeli Aro <eemeli@gmail.com>"
        }
      ],
      "group": "",
      "name": "yaml",
      "version": "1.10.3",
      "description": "JavaScript parser and stringifier for YAML",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yaml@1.10.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://eemeli.org/yaml/v1/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yaml@1.10.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap-yaml/node_modules/yaml/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap-yaml/node_modules/yaml/package.json"
              }
            ],
            "concludedValue": "node_modules/tap-yaml/node_modules/yaml/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tap-parser",
      "version": "11.0.2",
      "description": "parse the test anything protocol",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tap-parser@11.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tapjs/tap-parser"
        },
        {
          "type": "vcs",
          "url": "git://github.com/tapjs/tap-parser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tap-parser@11.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap-parser/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/tap-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/tap-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/tap-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse",
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "minipass",
      "version": "3.3.6",
      "description": "minimal implementation of a PassThrough stream",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minipass@3.3.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/minipass.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass@3.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap-parser/node_modules/minipass/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "minipass"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/minizlib/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/minipass-sized/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/minipass-pipeline/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/minipass-json-stream/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/minipass-flush/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/minipass-fetch/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/minipass-collect/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/make-fetch-happen/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/libtap/node_modules/minipass/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/fs-minipass/node_modules/minipass/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fs-minipass/node_modules/minipass/package.json"
              }
            ],
            "concludedValue": "node_modules/fs-minipass/node_modules/minipass/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/pack.js",
            "line": 25
          },
          {
            "location": "lib/read-entry.js",
            "line": 2
          },
          {
            "location": "lib/write-entry.js",
            "line": 2
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "events-to-array",
      "version": "1.1.2",
      "description": "Put a bunch of emitted events in an array, for testing.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/events-to-array@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/events-to-array"
        },
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/events-to-array"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events-to-array@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap-parser/node_modules/events-to-array/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/events-to-array/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/events-to-array/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/events-to-array/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "tap-mocha-reporter",
      "version": "5.0.4",
      "description": "Format a TAP stream using Mocha's set of reporters",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tap-mocha-reporter@5.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/tap-mocha-reporter"
        },
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/tap-mocha-reporter"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tap-mocha-reporter@5.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap-mocha-reporter/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap-mocha-reporter/package.json"
              }
            ],
            "concludedValue": "node_modules/tap-mocha-reporter/package.json"
          }
        ]
      },
      "tags": [
        "stream",
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "escape-string-regexp",
      "version": "2.0.0",
      "description": "Escape RegExp special characters",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap-mocha-reporter/node_modules/escape-string-regexp/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/stack-utils/node_modules/escape-string-regexp/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/stack-utils/node_modules/escape-string-regexp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stack-utils/node_modules/escape-string-regexp/package.json"
              }
            ],
            "concludedValue": "node_modules/stack-utils/node_modules/escape-string-regexp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "tap",
      "version": "16.3.10",
      "description": "A Test-Anything-Protocol library for JavaScript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tap@16.3.10",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://www.node-tap.org/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tap@16.3.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Vadim Demedes <vdemedes@gmail.com> (github.com/vadimdemedes)"
        }
      ],
      "group": "",
      "name": "yoga-layout-prebuilt",
      "version": "1.10.0",
      "description": "Prebuilt yoga-layout package",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yoga-layout-prebuilt@1.10.0",
      "type": "library",
      "bom-ref": "pkg:npm/yoga-layout-prebuilt@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/yoga-layout-prebuilt/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/yoga-layout-prebuilt/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/yoga-layout-prebuilt/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Eemeli Aro <eemeli@gmail.com>"
        }
      ],
      "group": "",
      "name": "yaml",
      "version": "1.10.2",
      "description": "JavaScript parser and stringifier for YAML",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yaml@1.10.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://eemeli.org/yaml/v1/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yaml@1.10.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/yaml/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/yaml/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/yaml/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "yallist",
      "version": "3.1.1",
      "description": "Yet Another Linked List",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yallist@3.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/yallist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yallist@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/yallist/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "yallist"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/helper-compilation-targets/node_modules/yallist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/helper-compilation-targets/node_modules/yallist/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/helper-compilation-targets/node_modules/yallist/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/pack.js",
            "line": 31
          },
          {
            "location": "lib/parse.js",
            "line": 26
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Einar Otto Stangvik <einaros@gmail.com> (http://2x.io)"
        }
      ],
      "group": "",
      "name": "ws",
      "version": "7.5.9",
      "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ws@7.5.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/websockets/ws"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ws@7.5.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/ws/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/ws/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/ws/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "wrap-ansi",
      "version": "6.2.0",
      "description": "Wordwrap a string with ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wrap-ansi@6.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@6.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/wrap-ansi/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/wrap-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/wrap-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/wrap-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "DY <dfcreative@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-name",
      "version": "1.1.4",
      "description": "A list of color names and its values",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-name@1.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/colorjs/color-name"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/wrap-ansi/node_modules/color-name/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/treport/node_modules/color-name/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/slice-ansi/node_modules/color-name/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/ink/node_modules/color-name/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/color-name/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/color-name/package.json"
              }
            ],
            "concludedValue": "node_modules/color-name/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Heather Arthur <fayearthur@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-convert",
      "version": "2.0.1",
      "description": "Plain color conversion functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-convert@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/wrap-ansi/node_modules/color-convert/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/treport/node_modules/color-convert/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/slice-ansi/node_modules/color-convert/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/ink/node_modules/color-convert/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/color-convert/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/color-convert/package.json"
              }
            ],
            "concludedValue": "node_modules/color-convert/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-styles",
      "version": "4.3.0",
      "description": "ANSI escape codes for styling strings in the terminal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@4.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/wrap-ansi/node_modules/ansi-styles/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/treport/node_modules/ansi-styles/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/slice-ansi/node_modules/ansi-styles/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/ink/node_modules/ansi-styles/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/ansi-styles/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ansi-styles/package.json"
              }
            ],
            "concludedValue": "node_modules/ansi-styles/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "widest-line",
      "version": "3.1.0",
      "description": "Get the visual width of the widest line in a string - the number of columns required to display it",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/widest-line@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/widest-line@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/widest-line/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/widest-line/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/widest-line/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "which",
      "version": "2.0.2",
      "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/which@2.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-which.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/which/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/spawn-wrap/node_modules/which/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/node-gyp/node_modules/which/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/cross-spawn/node_modules/which/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cross-spawn/node_modules/which/package.json"
              }
            ],
            "concludedValue": "node_modules/cross-spawn/node_modules/which/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrey Sitnik <andrey@sitnik.ru>"
        }
      ],
      "group": "",
      "name": "update-browserslist-db",
      "version": "1.0.13",
      "description": "CLI tool to update caniuse-lite to refresh target browsers from Browserslist config",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/update-browserslist-db@1.0.13",
      "type": "library",
      "bom-ref": "pkg:npm/update-browserslist-db@1.0.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/update-browserslist-db/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/update-browserslist-db/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/update-browserslist-db/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "type-fest",
      "version": "0.12.0",
      "description": "A collection of essential TypeScript types",
      "scope": "optional",
      "licenses": [
        {
          "expression": "MIT OR CC0-1.0"
        }
      ],
      "purl": "pkg:npm/type-fest@0.12.0",
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/type-fest/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/type-fest/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/type-fest/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "treport",
      "version": "3.0.4",
      "description": "Reporters for node-tap",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/treport@3.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/treport@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/treport/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/treport/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/treport/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "supports-color",
      "version": "7.2.0",
      "description": "Detect whether a terminal supports color",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-color@7.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/treport/node_modules/supports-color/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/ink/node_modules/supports-color/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/supports-color/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/supports-color/package.json"
              }
            ],
            "concludedValue": "node_modules/supports-color/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "has-flag",
      "version": "4.0.0",
      "description": "Check if argv has a specific flag",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-flag@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/treport/node_modules/has-flag/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/ink/node_modules/has-flag/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/has-flag/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-flag/package.json"
              }
            ],
            "concludedValue": "node_modules/has-flag/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "3.0.0",
      "description": "Terminal string styling done right",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chalk@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/chalk@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/treport/node_modules/chalk/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/treport/node_modules/chalk/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/treport/node_modules/chalk/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "to-fast-properties",
      "version": "2.0.0",
      "description": "Force V8 to use fast properties for an object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/to-fast-properties@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/to-fast-properties@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/to-fast-properties/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/to-fast-properties/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/to-fast-properties/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "supports-color",
      "version": "5.5.0",
      "description": "Detect whether a terminal supports color",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-color@5.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/supports-color@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/supports-color/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/supports-color/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/supports-color/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-ansi",
      "version": "6.0.1",
      "description": "Strip ANSI escape codes from a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@6.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/strip-ansi/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/strip-ansi-cjs/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/strip-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/strip-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/strip-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "string-width",
      "version": "4.2.3",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string-width@4.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/string-width/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/string-width-cjs/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/string-width/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string-width/package.json"
              }
            ],
            "concludedValue": "node_modules/string-width/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Talmage <james@talmage.io> (github.com/jamestalmage)"
        }
      ],
      "group": "",
      "name": "stack-utils",
      "version": "2.0.6",
      "description": "Captures and cleans stack traces",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stack-utils@2.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/stack-utils@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/stack-utils/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/stack-utils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stack-utils/package.json"
              }
            ],
            "concludedValue": "node_modules/stack-utils/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slice-ansi",
      "version": "3.0.0",
      "description": "Slice a string with ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/slice-ansi@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/slice-ansi@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/slice-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/slice-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/slice-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "signal-exit",
      "version": "3.0.7",
      "description": "when you want to fire an event no matter how a process exits.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/signal-exit@3.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tapjs/signal-exit"
        },
        {
          "type": "vcs",
          "url": "https://github.com/tapjs/signal-exit.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/signal-exit@3.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/signal-exit/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/signal-exit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/signal-exit/package.json"
              }
            ],
            "concludedValue": "node_modules/signal-exit/package.json"
          }
        ]
      },
      "tags": [
        "event"
      ]
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "shell-quote",
      "version": "1.8.1",
      "description": "quote and parse shell commands",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shell-quote@1.8.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/shell-quote"
        },
        {
          "type": "vcs",
          "url": "http://github.com/ljharb/shell-quote.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/shell-quote@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/shell-quote/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/shell-quote/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/shell-quote/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "semver",
      "version": "6.3.1",
      "description": "The semantic version parser used by npm.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/semver@6.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/node-semver.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@6.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/semver/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/node-exports-info/node_modules/semver/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/make-dir/node_modules/semver/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/istanbul-lib-instrument/node_modules/semver/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/semver/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-import/node_modules/semver/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/conventional-changelog-writer/node_modules/semver/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/helper-compilation-targets/node_modules/semver/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/core/node_modules/semver/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/core/node_modules/semver/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/core/node_modules/semver/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "scheduler",
      "version": "0.20.2",
      "description": "Cooperative scheduler for the browser environment.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/scheduler@0.20.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://reactjs.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/facebook/react.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/scheduler@0.20.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/scheduler/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/scheduler/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/scheduler/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "rimraf",
      "version": "3.0.2",
      "description": "A deep deletion module for node (like `rm -rf`)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/rimraf@3.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/rimraf@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/rimraf/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/rimraf/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/rimraf/package.json"
              }
            ],
            "concludedValue": "node_modules/rimraf/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "restore-cursor",
      "version": "3.1.0",
      "description": "Gracefully restore the CLI cursor on exit",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/restore-cursor@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/restore-cursor@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/restore-cursor/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/restore-cursor/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/restore-cursor/package.json"
          }
        ]
      },
      "tags": [
        "cli"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "resolve-from",
      "version": "3.0.0",
      "description": "Resolve the path of a module like `require.resolve()` but from a given path",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve-from@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/resolve-from/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/resolve-from/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/resolve-from/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (thlorenz.com)"
        }
      ],
      "group": "",
      "name": "redeyed",
      "version": "2.1.1",
      "description": "Takes JavaScript code, along with a config and returns the original code with tokens wrapped as configured.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/redeyed@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/redeyed.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/redeyed@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/redeyed/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/redeyed/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/redeyed/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "react-reconciler",
      "version": "0.26.2",
      "description": "React package for creating custom renderers.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-reconciler@0.26.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://reactjs.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/facebook/react.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-reconciler@0.26.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/react-reconciler/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/react-reconciler/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/react-reconciler/package.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react-devtools-core",
      "version": "4.28.5",
      "description": "Use react-devtools outside of the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react-devtools-core@4.28.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/facebook/react.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react-devtools-core@4.28.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/react-devtools-core/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/react-devtools-core/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/react-devtools-core/package.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "react",
      "version": "17.0.2",
      "description": "React is a JavaScript library for building user interfaces.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/react@17.0.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://reactjs.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/facebook/react.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/react@17.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/react/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/react/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/react/package.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "punycode",
      "version": "2.3.1",
      "description": "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891, and works on nearly all JavaScript platforms.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/punycode@2.3.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/punycode"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/punycode.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/punycode@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/punycode/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/punycode/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/punycode/package.json"
              }
            ],
            "concludedValue": "node_modules/punycode/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "pkg-dir",
      "version": "4.2.0",
      "description": "Find the root directory of a Node.js project or npm package",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pkg-dir@4.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/pkg-dir@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/pkg-dir/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/pkg-dir/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/pkg-dir/package.json"
              }
            ],
            "concludedValue": "node_modules/pkg-dir/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alexey Raspopov"
        }
      ],
      "group": "",
      "name": "picocolors",
      "version": "1.0.0",
      "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/picocolors@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/picocolors@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/picocolors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/picocolors/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/picocolors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-is-absolute",
      "version": "1.0.1",
      "description": "Node.js 0.12 path.isAbsolute() ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-is-absolute@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/path-is-absolute@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/path-is-absolute/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/path-is-absolute/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-is-absolute/package.json"
              }
            ],
            "concludedValue": "node_modules/path-is-absolute/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-exists",
      "version": "4.0.0",
      "description": "Check if a path exists",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-exists@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-exists@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/path-exists/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/path-exists/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-exists/package.json"
              }
            ],
            "concludedValue": "node_modules/path-exists/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "vdemedes <vdemedes@gmail.com> (https://github.com/vadimdemedes)"
        }
      ],
      "group": "",
      "name": "patch-console",
      "version": "1.0.0",
      "description": "Patch console methods to intercept output",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/patch-console@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/patch-console@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/patch-console/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/patch-console/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/patch-console/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-try",
      "version": "2.2.0",
      "description": "`Start a promise chain",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-try@2.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-try@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/p-try/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/p-try/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-try/package.json"
              }
            ],
            "concludedValue": "node_modules/p-try/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-locate",
      "version": "4.1.0",
      "description": "Get the first fulfilled promise that satisfies the provided testing function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-locate@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/p-locate/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg-up/node_modules/p-locate/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/pkg-dir/node_modules/p-locate/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/p-locate/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/p-locate/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/p-locate/package.json"
              }
            ],
            "concludedValue": "node_modules/@istanbuljs/load-nyc-config/node_modules/p-locate/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-limit",
      "version": "2.3.0",
      "description": "Run multiple promise-returning & async functions with limited concurrency",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-limit@2.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/p-limit/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg-up/node_modules/p-limit/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/pkg-dir/node_modules/p-limit/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/p-limit/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/p-limit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/p-limit/package.json"
              }
            ],
            "concludedValue": "node_modules/@istanbuljs/load-nyc-config/node_modules/p-limit/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "onetime",
      "version": "5.1.2",
      "description": "Ensure a function is only called once",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/onetime@5.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/onetime@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/onetime/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/onetime/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/onetime/package.json"
              }
            ],
            "concludedValue": "node_modules/onetime/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "description": "Run a function exactly one time",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/once"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/once/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/once/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/once/package.json"
              }
            ],
            "concludedValue": "node_modules/once/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "description": "ES2015 `Object.assign()` ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/object-assign/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/object-assign/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object-assign/package.json"
              }
            ],
            "concludedValue": "node_modules/object-assign/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sergey Rubanov <chi187@gmail.com>"
        }
      ],
      "group": "",
      "name": "node-releases",
      "version": "2.0.14",
      "description": "Node.js releases data",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-releases@2.0.14",
      "type": "library",
      "bom-ref": "pkg:npm/node-releases@2.0.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/node-releases/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/node-releases/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/node-releases/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.2",
      "description": "Tiny millisecond conversion utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ms@2.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/ms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/ms/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/ms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "minimatch",
      "version": "3.1.2",
      "description": "a glob matcher in javascript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@3.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/minimatch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/minimatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/minimatch/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/minimatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "mimic-fn",
      "version": "2.1.0",
      "description": "Make a function mimic another one",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mimic-fn@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/mimic-fn@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/mimic-fn/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/mimic-fn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mimic-fn/package.json"
              }
            ],
            "concludedValue": "node_modules/mimic-fn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "make-dir",
      "version": "3.1.0",
      "description": "Make a directory and its parents if needed - Think `mkdir -p`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/make-dir@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/make-dir@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/make-dir/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/make-dir/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/make-dir/package.json"
              }
            ],
            "concludedValue": "node_modules/make-dir/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "lru-cache",
      "version": "5.1.1",
      "description": "A cache object that deletes the least-recently-used items.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@5.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/lru-cache/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/helper-compilation-targets/node_modules/lru-cache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/helper-compilation-targets/node_modules/lru-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/helper-compilation-targets/node_modules/lru-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andres Suarez <zertosh@gmail.com>"
        }
      ],
      "group": "",
      "name": "loose-envify",
      "version": "1.4.0",
      "description": "Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/loose-envify@1.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/zertosh/loose-envify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/zertosh/loose-envify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/loose-envify@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/loose-envify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/loose-envify/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/loose-envify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com>"
        }
      ],
      "group": "",
      "name": "lodash",
      "version": "4.17.21",
      "description": "Lodash modular utilities.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash@4.17.21",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.17.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/lodash/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/lodash/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/lodash/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "locate-path",
      "version": "5.0.0",
      "description": "Get the first path that exists on disk of multiple paths",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/locate-path@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/locate-path/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg-up/node_modules/locate-path/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/pkg-dir/node_modules/locate-path/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/locate-path/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/locate-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/locate-path/package.json"
              }
            ],
            "concludedValue": "node_modules/@istanbuljs/load-nyc-config/node_modules/locate-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Aseem Kishore <aseem.kishore@gmail.com>"
        }
      ],
      "group": "",
      "name": "json5",
      "version": "2.2.3",
      "description": "JSON for Humans",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json5@2.2.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://json5.org/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/json5/json5.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json5@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/json5/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/json5/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json5/package.json"
              }
            ],
            "concludedValue": "node_modules/json5/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "jsesc",
      "version": "2.5.2",
      "description": "Given some data, jsesc returns the shortest possible stringified & ASCII-safe representation of that data.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsesc@2.5.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/jsesc"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/jsesc.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsesc@2.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/jsesc/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/jsesc/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/jsesc/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Simon Lydell"
        }
      ],
      "group": "",
      "name": "js-tokens",
      "version": "4.0.0",
      "description": "A regex that tokenizes JavaScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-tokens@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/js-tokens@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/js-tokens/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/js-tokens/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/js-tokens/package.json"
              }
            ],
            "concludedValue": "node_modules/js-tokens/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "3.0.0",
      "description": "Check if the character represented by a given Unicode code point is fullwidth",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/is-fullwidth-code-point/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/is-fullwidth-code-point/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-fullwidth-code-point/package.json"
              }
            ],
            "concludedValue": "node_modules/is-fullwidth-code-point/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thomas Watson Steen <w@tson.dk> (https://twitter.com/wa7son)"
        }
      ],
      "group": "",
      "name": "is-ci",
      "version": "2.0.0",
      "description": "Detect if the current environment is a CI server",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-ci@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/watson/is-ci"
        },
        {
          "type": "vcs",
          "url": "https://github.com/watson/is-ci.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-ci@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/is-ci/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/is-ci/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/is-ci/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "vdemedes <vdemedes@gmail.com> (https://github.com/vadimdemedes)"
        }
      ],
      "group": "",
      "name": "ink",
      "version": "3.2.0",
      "description": "React for CLI",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ink@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/ink@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/ink/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/ink/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/ink/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "4.1.2",
      "description": "Terminal string styling done right",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chalk@4.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/chalk@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/ink/node_modules/chalk/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/chalk/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chalk/package.json"
              }
            ],
            "concludedValue": "node_modules/chalk/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/inherits/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/inherits/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/inherits/package.json"
              }
            ],
            "concludedValue": "node_modules/inherits/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "inflight",
      "version": "1.0.6",
      "description": "Add callbacks to requests in flight to avoid async duplication",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inflight@1.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/inflight"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/inflight.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/inflight/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/inflight/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/inflight/package.json"
              }
            ],
            "concludedValue": "node_modules/inflight/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "indent-string",
      "version": "4.0.0",
      "description": "Indent each line in a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/indent-string@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/indent-string@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/indent-string/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/indent-string/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/indent-string/package.json"
              }
            ],
            "concludedValue": "node_modules/indent-string/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "has-flag",
      "version": "3.0.0",
      "description": "Check if argv has a specific flag",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-flag@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/has-flag@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/has-flag/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/has-flag/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/has-flag/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "globals",
      "version": "11.12.0",
      "description": "Global identifiers from different JavaScript environments",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globals@11.12.0",
      "type": "library",
      "bom-ref": "pkg:npm/globals@11.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/globals/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/globals/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/globals/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Logan Smyth <loganfsmyth@gmail.com>"
        }
      ],
      "group": "",
      "name": "gensync",
      "version": "1.0.0-beta.2",
      "description": "Allows users to use generators in order to write common functions that can be both sync or async.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gensync@1.0.0-beta.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/loganfsmyth/gensync"
        },
        {
          "type": "vcs",
          "url": "https://github.com/loganfsmyth/gensync.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gensync@1.0.0-beta.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/gensync/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/gensync/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/gensync/package.json"
              }
            ],
            "concludedValue": "node_modules/gensync/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "fs.realpath",
      "version": "1.0.0",
      "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fs.realpath@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/fs.realpath.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs.realpath@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/fs.realpath/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/fs.realpath/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fs.realpath/package.json"
              }
            ],
            "concludedValue": "node_modules/fs.realpath/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "find-up",
      "version": "4.1.0",
      "description": "Find a file or directory by walking up parent directories",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/find-up@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/find-up@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/find-up/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg-up/node_modules/find-up/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/pkg-dir/node_modules/find-up/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/find-up/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/find-up/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/find-up/package.json"
              }
            ],
            "concludedValue": "node_modules/@istanbuljs/load-nyc-config/node_modules/find-up/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "find-cache-dir",
      "version": "3.3.2",
      "description": "Finds the common standard cache directory",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/find-cache-dir@3.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/find-cache-dir@3.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/find-cache-dir/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/find-cache-dir/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/find-cache-dir/package.json"
              }
            ],
            "concludedValue": "node_modules/find-cache-dir/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ariya Hidayat <ariya.hidayat@gmail.com>"
        }
      ],
      "group": "",
      "name": "esprima",
      "version": "4.0.1",
      "description": "ECMAScript parsing infrastructure for multipurpose analysis",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esprima@4.0.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://esprima.org"
        },
        {
          "type": "vcs",
          "url": "https://github.com/jquery/esprima.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/esprima/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/escodegen/node_modules/esprima/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/esprima/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/esprima/package.json"
              }
            ],
            "concludedValue": "node_modules/@istanbuljs/load-nyc-config/node_modules/esprima/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.5",
      "description": "Escape RegExp special characters",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/escape-string-regexp/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/figures/node_modules/escape-string-regexp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/figures/node_modules/escape-string-regexp/package.json"
              }
            ],
            "concludedValue": "node_modules/figures/node_modules/escape-string-regexp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)"
        }
      ],
      "group": "",
      "name": "escalade",
      "version": "3.1.1",
      "description": "A tiny (183B to 210B) and fast utility to ascend parent directories",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escalade@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/escalade@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/escalade/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/escalade/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/escalade/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "emoji-regex",
      "version": "8.0.0",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/emoji-regex@8.0.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/emoji-regex"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/emoji-regex.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@8.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/emoji-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/emoji-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/emoji-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/emoji-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kilian Valkhof"
        }
      ],
      "group": "",
      "name": "electron-to-chromium",
      "version": "1.4.614",
      "description": "Provides a list of electron-to-chromium version mappings",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/electron-to-chromium@1.4.614",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/kilian/electron-to-chromium/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/electron-to-chromium@1.4.614",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/electron-to-chromium/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/electron-to-chromium/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/electron-to-chromium/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Josh Junon <josh.junon@protonmail.com>"
        }
      ],
      "group": "",
      "name": "debug",
      "version": "4.3.4",
      "description": "Lightweight debugging utility for Node.js and the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@4.3.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/debug-js/debug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/debug/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/debug/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/debug/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Fredrik Nicol <fredrik.nicol@gmail.com>"
        }
      ],
      "group": "",
      "name": "csstype",
      "version": "3.1.3",
      "description": "Strict TypeScript and Flow types for style based on MDN data",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/csstype@3.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/csstype@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/csstype/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/csstype/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/csstype/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Vadim Demedes <vdemedes@gmail.com>"
        }
      ],
      "group": "",
      "name": "convert-to-spaces",
      "version": "1.0.2",
      "description": "Convert tabs to spaces in a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/convert-to-spaces@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/convert-to-spaces@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/convert-to-spaces/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/convert-to-spaces/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/convert-to-spaces/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "convert-source-map",
      "version": "2.0.0",
      "description": "Converts a source-map from/to  different formats and allows adding/changing properties.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thlorenz/convert-source-map"
        },
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/convert-source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/convert-source-map/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/core/node_modules/convert-source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/core/node_modules/convert-source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/core/node_modules/convert-source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "concat-map",
      "version": "0.0.1",
      "description": "concatenative mapdashery",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/concat-map@0.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/substack/node-concat-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/concat-map@0.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/concat-map/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/concat-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/concat-map/package.json"
              }
            ],
            "concludedValue": "node_modules/concat-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "commondir",
      "version": "1.0.1",
      "description": "compute the closest common parent for file paths",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/commondir@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/node-commondir.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commondir@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/commondir/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/commondir/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/commondir/package.json"
              }
            ],
            "concludedValue": "node_modules/commondir/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "DY <dfcreative@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-name",
      "version": "1.1.3",
      "description": "A list of color names and its values",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-name@1.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dfcreative/color-name"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-name@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/color-name/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/color-name/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/color-name/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Heather Arthur <fayearthur@gmail.com>"
        }
      ],
      "group": "",
      "name": "color-convert",
      "version": "1.9.3",
      "description": "Plain color conversion functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-convert@1.9.3",
      "type": "library",
      "bom-ref": "pkg:npm/color-convert@1.9.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/color-convert/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/color-convert/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/color-convert/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "vdemedes <vdemedes@gmail.com> (github.com/vadimdemedes)"
        }
      ],
      "group": "",
      "name": "code-excerpt",
      "version": "3.0.0",
      "description": "Extract code excerpts",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/code-excerpt@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/code-excerpt@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/code-excerpt/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/code-excerpt/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/code-excerpt/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "cli-truncate",
      "version": "2.1.0",
      "description": "Truncate a string to a specific width in the terminal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cli-truncate@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/cli-truncate@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/cli-truncate/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/cli-truncate/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/cli-truncate/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "cli-cursor",
      "version": "3.1.0",
      "description": "Toggle the CLI cursor",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cli-cursor@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/cli-cursor@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/cli-cursor/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/cli-cursor/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/cli-cursor/package.json"
          }
        ]
      },
      "tags": [
        "cli"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "cli-boxes",
      "version": "2.2.1",
      "description": "Boxes for use in the terminal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cli-boxes@2.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/cli-boxes@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/cli-boxes/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/cli-boxes/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/cli-boxes/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thomas Watson Steen <w@tson.dk> (https://twitter.com/wa7son)"
        }
      ],
      "group": "",
      "name": "ci-info",
      "version": "2.0.0",
      "description": "Get details about the current Continuous Integration environment",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ci-info@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/watson/ci-info"
        },
        {
          "type": "vcs",
          "url": "https://github.com/watson/ci-info.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ci-info@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/ci-info/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/ci-info/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/ci-info/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "chalk",
      "version": "2.4.2",
      "description": "Terminal string styling done right",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chalk@2.4.2",
      "type": "library",
      "bom-ref": "pkg:npm/chalk@2.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/chalk/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/chalk/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/chalk/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (thlorenz.com)"
        }
      ],
      "group": "",
      "name": "cardinal",
      "version": "2.1.1",
      "description": "Syntax highlights JavaScript code with ANSI colors to be printed to the terminal.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cardinal@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/cardinal.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cardinal@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/cardinal/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/cardinal/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/cardinal/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Briggs <beneb.info@gmail.com> (http://beneb.info)"
        }
      ],
      "group": "",
      "name": "caniuse-lite",
      "version": "1.0.30001570",
      "description": "A smaller version of caniuse-db, with only the essentials!",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "CC-BY-4.0",
            "url": "https://opensource.org/licenses/CC-BY-4.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/caniuse-lite@1.0.30001570",
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-lite@1.0.30001570",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/caniuse-lite/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/caniuse-lite/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/caniuse-lite/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "callsites",
      "version": "3.1.0",
      "description": "Get callsites from the V8 stack trace API",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/callsites@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/callsites@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/callsites/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/callsites/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/callsites/package.json"
              }
            ],
            "concludedValue": "node_modules/callsites/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "caller-path",
      "version": "3.0.1",
      "description": "Get the path of the caller function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/caller-path@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/caller-path@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/caller-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/caller-path/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/caller-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "caller-callsite",
      "version": "4.1.0",
      "description": "Get the callsite of the caller function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/caller-callsite@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/caller-callsite@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/caller-callsite/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/caller-callsite/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/caller-callsite/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrey Sitnik <andrey@sitnik.ru>"
        }
      ],
      "group": "",
      "name": "browserslist",
      "version": "4.22.2",
      "description": "Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-preset",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserslist@4.22.2",
      "type": "library",
      "bom-ref": "pkg:npm/browserslist@4.22.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/browserslist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/browserslist/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/browserslist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "brace-expansion",
      "version": "1.1.11",
      "description": "Brace expansion as known from sh/bash",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@1.1.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/brace-expansion"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/brace-expansion.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@1.1.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/brace-expansion/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/brace-expansion/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/brace-expansion/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "balanced-match",
      "version": "1.0.2",
      "description": "Match balanced character pairs, like \"{\" and \"}\"",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/balanced-match@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/balanced-match"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/balanced-match.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/balanced-match@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/balanced-match/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/balanced-match/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/balanced-match/package.json"
              }
            ],
            "concludedValue": "node_modules/balanced-match/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "auto-bind",
      "version": "4.0.0",
      "description": "Automatically bind methods to their class instance",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/auto-bind@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/auto-bind@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/auto-bind/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/auto-bind/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/auto-bind/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)"
        }
      ],
      "group": "",
      "name": "astral-regex",
      "version": "2.0.0",
      "description": "Regular expression for matching astral symbols",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/astral-regex@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/astral-regex@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/astral-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/astral-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/astral-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (thlorenz.com)"
        }
      ],
      "group": "",
      "name": "ansicolors",
      "version": "0.3.2",
      "description": "Functions that surround a string with ansicolor codes so it prints in color.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansicolors@0.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/ansicolors.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ansicolors@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/ansicolors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/ansicolors/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/ansicolors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-styles",
      "version": "3.2.1",
      "description": "ANSI escape codes for styling strings in the terminal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@3.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@3.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/ansi-styles/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/ansi-styles/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/ansi-styles/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-regex",
      "version": "5.0.1",
      "description": "Regular expression for matching ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@5.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/ansi-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/ansi-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ansi-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/ansi-regex/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-escapes",
      "version": "4.3.2",
      "description": "ANSI escape codes for manipulating the terminal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-escapes@4.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-escapes@4.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/ansi-escapes/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/ansi-escapes/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/ansi-escapes/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "type-fest",
      "version": "0.21.3",
      "description": "A collection of essential TypeScript types",
      "scope": "optional",
      "licenses": [
        {
          "expression": "MIT OR CC0-1.0"
        }
      ],
      "purl": "pkg:npm/type-fest@0.21.3",
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.21.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/ansi-escapes/node_modules/type-fest/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/ansi-escapes/node_modules/type-fest/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/ansi-escapes/node_modules/type-fest/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "yoga-layout",
      "version": "1.9.2",
      "description": "TypeScript definitions for yoga-layout",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/yoga-layout@1.9.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/yoga-layout@1.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@types/yoga-layout/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@types/yoga-layout/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@types/yoga-layout/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "scheduler",
      "version": "0.16.8",
      "description": "TypeScript definitions for scheduler",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/scheduler@0.16.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/scheduler"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/scheduler@0.16.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@types/scheduler/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@types/scheduler/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@types/scheduler/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "react",
      "version": "17.0.73",
      "description": "TypeScript definitions for react",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/react@17.0.73",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/react"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/react@17.0.73",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@types/react/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@types/react/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@types/react/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "prop-types",
      "version": "15.7.11",
      "description": "TypeScript definitions for prop-types",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/prop-types@15.7.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/prop-types"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/prop-types@15.7.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@types/prop-types/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@types/prop-types/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@types/prop-types/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.20",
      "description": "Trace the original position through a source map",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.20",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/jridgewell/trace-mapping.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@jridgewell/trace-mapping/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@jridgewell/trace-mapping/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@jridgewell/trace-mapping/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rich Harris"
        }
      ],
      "group": "@jridgewell",
      "name": "sourcemap-codec",
      "version": "1.4.15",
      "description": "Encode/decode sourcemap mappings",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.15",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/jridgewell/sourcemap-codec.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@jridgewell/sourcemap-codec/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@jridgewell/sourcemap-codec/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@jridgewell/sourcemap-codec/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "set-array",
      "version": "1.1.2",
      "description": "Like a Set, but provides the index of the `key` in the backing array",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/set-array@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/set-array@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@jridgewell/set-array/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@jridgewell/set-array/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@jridgewell/set-array/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "resolve-uri",
      "version": "3.1.1",
      "description": "Resolve a URI relative to an optional base URI",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@jridgewell/resolve-uri/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@jridgewell/resolve-uri/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@jridgewell/resolve-uri/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "gen-mapping",
      "version": "0.3.3",
      "description": "Generate source maps",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@jridgewell/gen-mapping/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@jridgewell/gen-mapping/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@jridgewell/gen-mapping/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Vadim Demedes <vdemedes@gmail.com> (github.com/vadimdemedes)"
        }
      ],
      "group": "@isaacs",
      "name": "import-jsx",
      "version": "4.0.1",
      "description": "Require and transpile JSX on the fly (fork of import-jsx for node 17 support)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40isaacs/import-jsx@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/@isaacs/import-jsx@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@isaacs/import-jsx/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@isaacs/import-jsx/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@isaacs/import-jsx/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "types",
      "version": "7.23.6",
      "description": "Babel Types is a Lodash-esque utility library for AST nodes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/types@7.23.6",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-types"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/types@7.23.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/types/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/types/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/types/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "traverse",
      "version": "7.23.6",
      "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/traverse@7.23.6",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-traverse"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/traverse@7.23.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/traverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/traverse/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/traverse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "template",
      "version": "7.22.15",
      "description": "Generate an AST from a string template.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/template@7.22.15",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-template"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/template@7.22.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/template/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/template/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/template/package.json"
          }
        ]
      },
      "tags": [
        "template"
      ]
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "plugin-transform-react-jsx",
      "version": "7.23.4",
      "description": "Turn JSX into React function calls",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-react-jsx@7.23.4",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-plugin-transform-react-jsx"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-react-jsx@7.23.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/plugin-transform-react-jsx/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/plugin-transform-react-jsx/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/plugin-transform-react-jsx/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "plugin-transform-parameters",
      "version": "7.23.3",
      "description": "Compile ES2015 default and rest parameters to ES5",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-parameters@7.23.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-plugin-transform-parameters"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-parameters@7.23.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/plugin-transform-parameters/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/plugin-transform-parameters/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/plugin-transform-parameters/package.json"
          }
        ]
      },
      "tags": [
        "rest"
      ]
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "plugin-transform-destructuring",
      "version": "7.23.3",
      "description": "Compile ES2015 destructuring to ES5",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-transform-destructuring@7.23.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-plugin-transform-destructuring"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-transform-destructuring@7.23.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/plugin-transform-destructuring/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/plugin-transform-destructuring/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/plugin-transform-destructuring/package.json"
          }
        ]
      }
    },
    {
      "group": "@babel",
      "name": "plugin-syntax-object-rest-spread",
      "version": "7.8.3",
      "description": "Allow parsing of object rest/spread",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-object-rest-spread@7.8.3",
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-object-rest-spread@7.8.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/plugin-syntax-object-rest-spread/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/plugin-syntax-object-rest-spread/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/plugin-syntax-object-rest-spread/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "plugin-syntax-jsx",
      "version": "7.23.3",
      "description": "Allow parsing of jsx",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-syntax-jsx@7.23.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-plugin-syntax-jsx"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-syntax-jsx@7.23.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/plugin-syntax-jsx/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/plugin-syntax-jsx/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/plugin-syntax-jsx/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "plugin-proposal-object-rest-spread",
      "version": "7.20.7",
      "description": "Compile object rest and spread to ES5",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/plugin-proposal-object-rest-spread@7.20.7",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-plugin-proposal-object-rest-spread"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/plugin-proposal-object-rest-spread@7.20.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/plugin-proposal-object-rest-spread/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/plugin-proposal-object-rest-spread/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/plugin-proposal-object-rest-spread/package.json"
          }
        ]
      },
      "tags": [
        "rest"
      ]
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "parser",
      "version": "7.23.6",
      "description": "A JavaScript parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/parser@7.23.6",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-parser"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/parser@7.23.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/parser/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "highlight",
      "version": "7.23.4",
      "description": "Syntax highlight JavaScript strings for output in terminals.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/highlight@7.23.4",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-highlight"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/highlight@7.23.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/highlight/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/highlight/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/highlight/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helpers",
      "version": "7.23.6",
      "description": "Collection of helper functions used by Babel transforms.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helpers@7.23.6",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-helpers"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helpers@7.23.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/helpers/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/helpers/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/helpers/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-validator-option",
      "version": "7.23.5",
      "description": "Validate plugin/preset options",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-option@7.23.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-option@7.23.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/helper-validator-option/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/helper-validator-option/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/helper-validator-option/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-validator-identifier",
      "version": "7.22.20",
      "description": "Validate identifier/keywords name",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.22.20",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-identifier@7.22.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/helper-validator-identifier/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/helper-validator-identifier/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/helper-validator-identifier/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-string-parser",
      "version": "7.23.4",
      "description": "A utility package to parse strings",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-string-parser@7.23.4",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-helper-string-parser"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-string-parser@7.23.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/helper-string-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/helper-string-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/helper-string-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-split-export-declaration",
      "version": "7.22.6",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-split-export-declaration@7.22.6",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-helper-split-export-declaration"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-split-export-declaration@7.22.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/helper-split-export-declaration/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/helper-split-export-declaration/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/helper-split-export-declaration/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-simple-access",
      "version": "7.22.5",
      "description": "Babel helper for ensuring that access to a given value is performed through simple accesses",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-simple-access@7.22.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-helper-simple-access"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-simple-access@7.22.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/helper-simple-access/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/helper-simple-access/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/helper-simple-access/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-plugin-utils",
      "version": "7.22.5",
      "description": "General utilities for plugins to use",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-plugin-utils@7.22.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-helper-plugin-utils"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-plugin-utils@7.22.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/helper-plugin-utils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/helper-plugin-utils/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/helper-plugin-utils/package.json"
          }
        ]
      },
      "tags": [
        "plugins"
      ]
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-module-transforms",
      "version": "7.23.3",
      "description": "Babel helper functions for implementing ES6 module transformations",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-module-transforms@7.23.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-helper-module-transforms"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-module-transforms@7.23.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/helper-module-transforms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/helper-module-transforms/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/helper-module-transforms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-module-imports",
      "version": "7.22.15",
      "description": "Babel helper functions for inserting module loads",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-module-imports@7.22.15",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-helper-module-imports"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-module-imports@7.22.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/helper-module-imports/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/helper-module-imports/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/helper-module-imports/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-hoist-variables",
      "version": "7.22.5",
      "description": "Helper function to hoist variables",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-hoist-variables@7.22.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-helper-hoist-variables"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-hoist-variables@7.22.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/helper-hoist-variables/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/helper-hoist-variables/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/helper-hoist-variables/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-function-name",
      "version": "7.23.0",
      "description": "Helper function to change the property 'name' of every function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-function-name@7.23.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-helper-function-name"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-function-name@7.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/helper-function-name/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/helper-function-name/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/helper-function-name/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-environment-visitor",
      "version": "7.22.20",
      "description": "Helper visitor to only visit nodes in the current 'this' context",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-environment-visitor@7.22.20",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-helper-environment-visitor"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-environment-visitor@7.22.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/helper-environment-visitor/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/helper-environment-visitor/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/helper-environment-visitor/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-compilation-targets",
      "version": "7.23.6",
      "description": "Helper functions on Babel compilation targets",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-compilation-targets@7.23.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-compilation-targets@7.23.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/helper-compilation-targets/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/helper-compilation-targets/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/helper-compilation-targets/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-annotate-as-pure",
      "version": "7.22.5",
      "description": "Helper function to annotate paths and nodes with #__PURE__ comment",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-annotate-as-pure@7.22.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-helper-annotate-as-pure"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-annotate-as-pure@7.22.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/helper-annotate-as-pure/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/helper-annotate-as-pure/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/helper-annotate-as-pure/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "generator",
      "version": "7.23.6",
      "description": "Turns an AST into code.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/generator@7.23.6",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-generator"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/generator@7.23.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/generator/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/generator/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/generator/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "core",
      "version": "7.23.6",
      "description": "Babel compiler core.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/core@7.23.6",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-core"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/core@7.23.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/core/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/core/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/core/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "compat-data",
      "version": "7.23.5",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/compat-data@7.23.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/compat-data@7.23.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/compat-data/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/compat-data/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/compat-data/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "code-frame",
      "version": "7.23.5",
      "description": "Generate errors that contain a code frame that point to source locations.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/code-frame@7.23.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-code-frame"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/code-frame@7.23.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@babel/code-frame/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@babel/code-frame/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@babel/code-frame/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <jridgewell@google.com>"
        }
      ],
      "group": "@ampproject",
      "name": "remapping",
      "version": "2.2.1",
      "description": "Remap sequential sourcemaps through transformations to point at the original source code",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40ampproject/remapping@2.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/ampproject/remapping.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@ampproject/remapping@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/tap/node_modules/@ampproject/remapping/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/tap/node_modules/@ampproject/remapping/package.json"
              }
            ],
            "concludedValue": "node_modules/tap/node_modules/@ampproject/remapping/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "supports-preserve-symlinks-flag",
      "version": "1.0.0",
      "description": "Determine if the current node version supports the `--preserve-symlinks` flag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/node-supports-preserve-symlinks-flag.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/supports-preserve-symlinks-flag/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/supports-preserve-symlinks-flag/package.json"
              }
            ],
            "concludedValue": "node_modules/supports-preserve-symlinks-flag/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ryan Graham <ryan@strongloop.com>"
        }
      ],
      "group": "",
      "name": "strong-log-transformer",
      "version": "2.1.0",
      "description": "Stream transformer that prefixes lines with timestamps and other things.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strong-log-transformer@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/strongloop/strong-log-transformer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/strongloop/strong-log-transformer"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strong-log-transformer@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/strong-log-transformer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/strong-log-transformer/package.json"
              }
            ],
            "concludedValue": "node_modules/strong-log-transformer/package.json"
          }
        ]
      },
      "tags": [
        "transform"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-json-comments",
      "version": "3.1.1",
      "description": "Strip comments from JSON. Lets you use comments in your JSON files!",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-json-comments@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-json-comments@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/strip-json-comments/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/strip-json-comments/package.json"
              }
            ],
            "concludedValue": "node_modules/strip-json-comments/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-indent",
      "version": "3.0.0",
      "description": "Strip leading whitespace from each line in a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-indent@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-indent@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/strip-indent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/strip-indent/package.json"
              }
            ],
            "concludedValue": "node_modules/strip-indent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-final-newline",
      "version": "2.0.0",
      "description": "Strip the final newline character from a string/buffer",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-final-newline@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-final-newline@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/strip-final-newline/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/strip-final-newline/package.json"
              }
            ],
            "concludedValue": "node_modules/strip-final-newline/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-bom",
      "version": "4.0.0",
      "description": "Strip UTF-8 byte order mark (BOM) from a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-bom@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-bom@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/strip-bom/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/strip-bom/package.json"
              }
            ],
            "concludedValue": "node_modules/strip-bom/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.3.0",
      "description": "The string_decoder module from Node core",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodejs/string_decoder"
        },
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/string_decoder.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/string_decoder/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string_decoder/package.json"
              }
            ],
            "concludedValue": "node_modules/string_decoder/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "string.prototype.trimstart",
      "version": "1.0.8",
      "description": "ES2019 spec-compliant String.prototype.trimStart shim.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string.prototype.trimstart@1.0.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/String.prototype.trimStart.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.trimstart@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/string.prototype.trimstart/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string.prototype.trimstart/package.json"
              }
            ],
            "concludedValue": "node_modules/string.prototype.trimstart/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "string.prototype.trimend",
      "version": "1.0.10",
      "description": "ES2019 spec-compliant String.prototype.trimEnd shim.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string.prototype.trimend@1.0.10",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/String.prototype.trimEnd.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.trimend@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/string.prototype.trimend/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string.prototype.trimend/package.json"
              }
            ],
            "concludedValue": "node_modules/string.prototype.trimend/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "string.prototype.trim",
      "version": "1.2.11",
      "description": "ES5 spec-compliant shim for String.prototype.trim",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string.prototype.trim@1.2.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/String.prototype.trim.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string.prototype.trim@1.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/string.prototype.trim/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/string.prototype.trim/package.json"
              }
            ],
            "concludedValue": "node_modules/string.prototype.trim/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "stop-iteration-iterator",
      "version": "1.1.0",
      "description": "Firefox 17-26 iterators throw a StopIteration object to indicate \"done\". This normalizes it.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stop-iteration-iterator@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/stop-iteration-iterator#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/stop-iteration-iterator.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stop-iteration-iterator@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/stop-iteration-iterator/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/stop-iteration-iterator/package.json"
              }
            ],
            "concludedValue": "node_modules/stop-iteration-iterator/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "static-eval",
      "version": "2.1.1",
      "description": "evaluate statically-analyzable expressions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/static-eval@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/browserify/static-eval"
        },
        {
          "type": "vcs",
          "url": "git://github.com/browserify/static-eval.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/static-eval@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/static-eval/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/static-eval/package.json"
              }
            ],
            "concludedValue": "node_modules/static-eval/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "ssri",
      "version": "10.0.6",
      "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ssri@10.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/ssri.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ssri@10.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ssri/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ssri/package.json"
              }
            ],
            "concludedValue": "node_modules/ssri/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alexandru Marasteanu <hello@alexei.ro> (http://alexei.ro/)"
        }
      ],
      "group": "",
      "name": "sprintf-js",
      "version": "1.0.3",
      "description": "JavaScript sprintf implementation",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sprintf-js@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/alexei/sprintf.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sprintf-js@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/sprintf-js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/sprintf-js/package.json"
              }
            ],
            "concludedValue": "node_modules/sprintf-js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Matteo Collina <hello@matteocollina.com>"
        }
      ],
      "group": "",
      "name": "split2",
      "version": "3.2.2",
      "description": "split a Text Stream into a Line Stream, using Stream 3",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/split2@3.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mcollina/split2.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/split2@3.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/split2/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/split2/package.json"
              }
            ],
            "concludedValue": "node_modules/split2/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (http://bit.ly/dominictarr)"
        }
      ],
      "group": "",
      "name": "split",
      "version": "1.0.1",
      "description": "split a Text Stream into a Line Stream",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/split@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/dominictarr/split"
        },
        {
          "type": "vcs",
          "url": "git://github.com/dominictarr/split.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/split@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/split/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/split/package.json"
              }
            ],
            "concludedValue": "node_modules/split/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Shinnosuke Watanabe (https://github.com/shinnn)"
        }
      ],
      "group": "",
      "name": "spdx-license-ids",
      "version": "3.0.23",
      "description": "A list of SPDX license identifiers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "CC0-1.0",
            "url": "https://opensource.org/licenses/CC0-1.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Public Domain"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@3.0.23",
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@3.0.23",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/spdx-license-ids/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Public Domain"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/spdx-license-ids/package.json"
              }
            ],
            "concludedValue": "node_modules/spdx-license-ids/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kyle E. Mitchell <kyle@kemitchell.com> (https://kemitchell.com)"
        }
      ],
      "group": "",
      "name": "spdx-expression-parse",
      "version": "3.0.1",
      "description": "parse SPDX license expressions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/spdx-expression-parse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/spdx-expression-parse/package.json"
              }
            ],
            "concludedValue": "node_modules/spdx-expression-parse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Linux Foundation"
        }
      ],
      "group": "",
      "name": "spdx-exceptions",
      "version": "2.5.0",
      "description": "list of SPDX standard license exceptions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "CC-BY-3.0",
            "url": "https://opensource.org/licenses/CC-BY-3.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spdx-exceptions@2.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/spdx-exceptions@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/spdx-exceptions/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/spdx-exceptions/package.json"
              }
            ],
            "concludedValue": "node_modules/spdx-exceptions/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-correct",
      "version": "3.2.0",
      "description": "correct invalid SPDX expressions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spdx-correct@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/spdx-correct@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/spdx-correct/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/spdx-correct/package.json"
              }
            ],
            "concludedValue": "node_modules/spdx-correct/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "spawn-wrap",
      "version": "2.0.0",
      "description": "Wrap all spawned Node.js child processes by adding environs and arguments ahead of the main JavaScript file argument.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/spawn-wrap@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/istanbuljs/spawn-wrap#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/istanbuljs/spawn-wrap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spawn-wrap@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/spawn-wrap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/spawn-wrap/package.json"
              }
            ],
            "concludedValue": "node_modules/spawn-wrap/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-support",
      "version": "0.5.21",
      "description": "Fixes stack traces for files with source maps",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map-support@0.5.21",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/evanw/node-source-map-support"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-support@0.5.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/source-map-support/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/source-map-support/package.json"
              }
            ],
            "concludedValue": "node_modules/source-map-support/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nick Fitzgerald <nfitzgerald@mozilla.com>"
        }
      ],
      "group": "",
      "name": "source-map",
      "version": "0.6.1",
      "description": "Generates and consumes source maps",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mozilla/source-map"
        },
        {
          "type": "vcs",
          "url": "http://github.com/mozilla/source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "sort-keys",
      "version": "2.0.0",
      "description": "Sort the keys of an object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sort-keys@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/sort-keys@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/sort-keys/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/sort-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/sort-keys/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)"
        }
      ],
      "group": "",
      "name": "socks-proxy-agent",
      "version": "7.0.0",
      "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/socks-proxy-agent@7.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/TooTallNate/node-socks-proxy-agent#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/TooTallNate/node-socks-proxy-agent.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socks-proxy-agent@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/socks-proxy-agent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/socks-proxy-agent/package.json"
              }
            ],
            "concludedValue": "node_modules/socks-proxy-agent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Josh Glazebrook"
        }
      ],
      "group": "",
      "name": "socks",
      "version": "2.8.9",
      "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/socks@2.8.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/JoshGlazebrook/socks/"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/JoshGlazebrook/socks.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/socks@2.8.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/socks/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/socks/package.json"
              }
            ],
            "concludedValue": "node_modules/socks/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Josh Glazebrook"
        }
      ],
      "group": "",
      "name": "smart-buffer",
      "version": "4.2.0",
      "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/smart-buffer@4.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/JoshGlazebrook/smart-buffer/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/JoshGlazebrook/smart-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/smart-buffer@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/smart-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/smart-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/smart-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "slash",
      "version": "3.0.0",
      "description": "Convert Windows backslash paths to slash paths",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/slash@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/slash@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/slash/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/slash/package.json"
              }
            ],
            "concludedValue": "node_modules/slash/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "bdehamer@github.com"
        }
      ],
      "group": "",
      "name": "sigstore",
      "version": "1.9.0",
      "description": "code-signing for npm packages",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sigstore@1.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/client#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sigstore/sigstore-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sigstore@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/sigstore/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/sigstore/package.json"
              }
            ],
            "concludedValue": "node_modules/sigstore/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "side-channel-weakmap",
      "version": "1.0.2",
      "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/side-channel-weakmap@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/side-channel-weakmap#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/side-channel-weakmap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel-weakmap@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/side-channel-weakmap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/side-channel-weakmap/package.json"
              }
            ],
            "concludedValue": "node_modules/side-channel-weakmap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "side-channel-map",
      "version": "1.0.1",
      "description": "Store information about any JS value in a side channel, using a Map",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/side-channel-map@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/side-channel-map#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/side-channel-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel-map@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/side-channel-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/side-channel-map/package.json"
              }
            ],
            "concludedValue": "node_modules/side-channel-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "side-channel-list",
      "version": "1.0.1",
      "description": "Store information about any JS value in a side channel, using a linked list",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/side-channel-list@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/side-channel-list#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/side-channel-list.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel-list@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/side-channel-list/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/side-channel-list/package.json"
              }
            ],
            "concludedValue": "node_modules/side-channel-list/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "side-channel",
      "version": "1.1.1",
      "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/side-channel@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/side-channel#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/side-channel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/side-channel@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/side-channel/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/side-channel/package.json"
              }
            ],
            "concludedValue": "node_modules/side-channel/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "shebang-regex",
      "version": "3.0.0",
      "description": "Regular expression for matching a shebang line",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shebang-regex@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/shebang-regex@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shebang-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shebang-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/shebang-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)"
        }
      ],
      "group": "",
      "name": "shebang-command",
      "version": "2.0.0",
      "description": "Get the command from a shebang",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/shebang-command@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/shebang-command@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/shebang-command/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/shebang-command/package.json"
              }
            ],
            "concludedValue": "node_modules/shebang-command/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "set-proto",
      "version": "1.0.0",
      "description": "Robustly set the [[Prototype]] of an object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/set-proto@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/set-proto#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/set-proto.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-proto@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/set-proto/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/set-proto/package.json"
              }
            ],
            "concludedValue": "node_modules/set-proto/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "set-function-name",
      "version": "2.0.2",
      "description": "Set a function's name property",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/set-function-name@2.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/set-function-name#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/set-function-name.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-function-name@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/set-function-name/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/set-function-name/package.json"
              }
            ],
            "concludedValue": "node_modules/set-function-name/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "set-function-length",
      "version": "1.2.2",
      "description": "Set a function's length property",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/set-function-length@1.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/set-function-length#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/set-function-length.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-function-length@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/set-function-length/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/set-function-length/package.json"
              }
            ],
            "concludedValue": "node_modules/set-function-length/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "set-blocking",
      "version": "2.0.0",
      "description": "set blocking stdio and stderr ensuring that terminal output does not truncate",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/set-blocking@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yargs/set-blocking#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/yargs/set-blocking.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/set-blocking@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/set-blocking/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/set-blocking/package.json"
              }
            ],
            "concludedValue": "node_modules/set-blocking/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "semver",
      "version": "7.8.5",
      "description": "The semantic version parser used by npm.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/semver@7.8.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/node-semver.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@7.8.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/semver/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/semver/package.json"
              }
            ],
            "concludedValue": "node_modules/semver/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nikita Skovoroda <chalkerx@gmail.com> (https://github.com/ChALkeR)"
        }
      ],
      "group": "",
      "name": "safer-buffer",
      "version": "2.1.2",
      "description": "Modern Buffer API polyfill without footguns",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safer-buffer@2.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/ChALkeR/safer-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safer-buffer@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/safer-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/safer-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/safer-buffer/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "safe-regex-test",
      "version": "1.1.0",
      "description": "Give a regex, get a robust predicate function that tests it against a string.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-regex-test@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/safe-regex-test#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/safe-regex-test.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-regex-test@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/safe-regex-test/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/safe-regex-test/package.json"
              }
            ],
            "concludedValue": "node_modules/safe-regex-test/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "safe-push-apply",
      "version": "1.0.0",
      "description": "Push an array of items into an array, while being robust against prototype modification",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-push-apply@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/safe-push-apply#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/safe-push-apply.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-push-apply@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/safe-push-apply/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/safe-push-apply/package.json"
              }
            ],
            "concludedValue": "node_modules/safe-push-apply/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "description": "Safer Node.js Buffer API",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/safe-buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/safe-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/safe-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/safe-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/safe-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "safe-array-concat",
      "version": "1.1.4",
      "description": "`Array.prototype.concat`, but made safe by ignoring Symbol.isConcatSpreadable",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-array-concat@1.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/safe-array-concat#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/safe-array-concat.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-array-concat@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/safe-array-concat/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/safe-array-concat/package.json"
              }
            ],
            "concludedValue": "node_modules/safe-array-concat/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "run-parallel",
      "version": "1.2.0",
      "description": "Run an array of functions in parallel",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/run-parallel@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/run-parallel"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/run-parallel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/run-parallel@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/run-parallel/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/run-parallel/package.json"
              }
            ],
            "concludedValue": "node_modules/run-parallel/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Matteo Collina <hello@matteocollina.com>"
        }
      ],
      "group": "",
      "name": "reusify",
      "version": "1.1.0",
      "description": "Reuse objects and functions with style",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/reusify@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mcollina/reusify#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mcollina/reusify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/reusify@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/reusify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/reusify/package.json"
              }
            ],
            "concludedValue": "node_modules/reusify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Tim Koschützki <tim@debuggable.com> (http://debuggable.com/)"
        }
      ],
      "group": "",
      "name": "retry",
      "version": "0.12.0",
      "description": "Abstraction for exponential and custom retry strategies for failed operations.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/retry@0.12.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tim-kos/node-retry"
        },
        {
          "type": "vcs",
          "url": "git://github.com/tim-kos/node-retry.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/retry@0.12.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/retry/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/retry/package.json"
              }
            ],
            "concludedValue": "node_modules/retry/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "resolve-global",
      "version": "1.0.0",
      "description": "Resolve the path of a globally installed module",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve-global@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/resolve-global@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve-global/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/resolve-global/package.json"
              }
            ],
            "concludedValue": "node_modules/resolve-global/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "resolve-from",
      "version": "5.0.0",
      "description": "Resolve the path of a module like `require.resolve()` but from a given path",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve-from@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve-from/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/resolve-from/package.json"
              }
            ],
            "concludedValue": "node_modules/resolve-from/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "resolve",
      "version": "2.0.0-next.7",
      "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve@2.0.0-next.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "ssh://github.com/browserify/resolve.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@2.0.0-next.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/resolve/package.json"
              }
            ],
            "concludedValue": "node_modules/resolve/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mylib",
      "version": "0.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mylib@0.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/mylib@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ljharb-monorepo-symlink-test",
      "version": "0.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/test/resolver/multirepo/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg/node_modules/resolve/test/resolver/multirepo/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/package.json"
          }
        ]
      }
    },
    {
      "group": "@my-scope",
      "name": "package-b",
      "version": "0.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40my-scope/package-b@0.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/@my-scope/package-b@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"
          }
        ]
      }
    },
    {
      "group": "@my-scope",
      "name": "package-a",
      "version": "0.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40my-scope/package-a@0.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/@my-scope/package-a@0.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "invalid_main",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/invalid_main",
      "type": "library",
      "bom-ref": "pkg:npm/invalid_main",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/test/resolver/invalid_main/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg/node_modules/resolve/test/resolver/invalid_main/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/invalid_main/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/invalid_main/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/invalid_main/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "false_main",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/false_main",
      "type": "library",
      "bom-ref": "pkg:npm/false_main",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/test/resolver/false_main/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg/node_modules/resolve/test/resolver/false_main/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/false_main/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/false_main/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/false_main/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "browser_field",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/browser_field",
      "type": "library",
      "bom-ref": "pkg:npm/browser_field",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/test/resolver/browser_field/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg/node_modules/resolve/test/resolver/browser_field/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/browser_field/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/browser_field/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/browser_field/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "baz",
      "version": "",
      "scope": "optional",
      "purl": "pkg:npm/baz",
      "type": "library",
      "bom-ref": "pkg:npm/baz",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/resolve/test/resolver/baz/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg/node_modules/resolve/test/resolver/baz/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/baz/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/baz/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/test/resolver/baz/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "require-main-filename",
      "version": "2.0.0",
      "description": "shim for require.main.filename() that works in as many environments as possible",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/require-main-filename@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yargs/require-main-filename#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/yargs/require-main-filename.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-main-filename@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/require-main-filename/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/require-main-filename/package.json"
              }
            ],
            "concludedValue": "node_modules/require-main-filename/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop)"
        }
      ],
      "group": "",
      "name": "require-from-string",
      "version": "2.0.2",
      "description": "Require module from string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/require-from-string@2.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/require-from-string@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/require-from-string/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/require-from-string/package.json"
              }
            ],
            "concludedValue": "node_modules/require-from-string/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Troy Goode <troygoode@gmail.com> (http://github.com/troygoode/)"
        }
      ],
      "group": "",
      "name": "require-directory",
      "version": "2.1.1",
      "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/require-directory@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/troygoode/node-require-directory/"
        },
        {
          "type": "vcs",
          "url": "git://github.com/troygoode/node-require-directory.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-directory@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/require-directory/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/require-directory/package.json"
              }
            ],
            "concludedValue": "node_modules/require-directory/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mark Wubben (https://novemberborn.net/)"
        }
      ],
      "group": "",
      "name": "release-zalgo",
      "version": "1.0.0",
      "description": "Helps you write code with promise-like chains that can run both synchronously and asynchronously",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/release-zalgo@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/novemberborn/release-zalgo#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/novemberborn/release-zalgo.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/release-zalgo@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/release-zalgo/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/release-zalgo/package.json"
              }
            ],
            "concludedValue": "node_modules/release-zalgo/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Google Inc."
        }
      ],
      "group": "@npmcli",
      "name": "release-please",
      "version": "14.2.6",
      "description": "generate release PRs based on the conventionalcommits.org spec",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/release-please@14.2.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/googleapis/release-please#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/release-please@14.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/release-please/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/release-please/package.json"
              }
            ],
            "concludedValue": "node_modules/release-please/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Microsoft Corp."
        }
      ],
      "group": "",
      "name": "typescript",
      "version": "4.9.5",
      "description": "TypeScript is a language for application scale JavaScript development",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/typescript@4.9.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://www.typescriptlang.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/Microsoft/TypeScript.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@4.9.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/release-please/node_modules/typescript/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/release-please/node_modules/typescript/package.json"
              }
            ],
            "concludedValue": "node_modules/release-please/node_modules/typescript/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "type-fest",
      "version": "2.19.0",
      "description": "A collection of essential TypeScript types",
      "scope": "optional",
      "licenses": [
        {
          "expression": "MIT OR CC0-1.0"
        }
      ],
      "purl": "pkg:npm/type-fest@2.19.0",
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@2.19.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/release-please/node_modules/type-fest/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/release-please/node_modules/type-fest/package.json"
              }
            ],
            "concludedValue": "node_modules/release-please/node_modules/type-fest/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe"
        }
      ],
      "group": "",
      "name": "conventional-changelog-conventionalcommits",
      "version": "5.0.0",
      "description": "conventional-changelog conventionalcommits.org preset",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-conventionalcommits@5.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-changelog-conventionalcommits#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/conventional-changelog.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/conventional-changelog-conventionalcommits@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/release-please/node_modules/conventional-changelog-conventionalcommits/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/release-please/node_modules/conventional-changelog-conventionalcommits/package.json"
              }
            ],
            "concludedValue": "node_modules/release-please/node_modules/conventional-changelog-conventionalcommits/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima (https://github.com/mysticatea)"
        }
      ],
      "group": "",
      "name": "regexpp",
      "version": "3.2.0",
      "description": "Regular expression parser for ECMAScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regexpp@3.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mysticatea/regexpp#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mysticatea/regexpp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regexpp@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/regexpp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/regexpp/package.json"
              }
            ],
            "concludedValue": "node_modules/regexpp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "regexp.prototype.flags",
      "version": "1.5.4",
      "description": "ES6 spec-compliant RegExp.prototype.flags shim.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regexp.prototype.flags@1.5.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/RegExp.prototype.flags.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regexp.prototype.flags@1.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/regexp.prototype.flags/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/regexp.prototype.flags/package.json"
              }
            ],
            "concludedValue": "node_modules/regexp.prototype.flags/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "reflect.getprototypeof",
      "version": "1.0.10",
      "description": "An ES2015 mostly-spec-compliant `Reflect.getPrototypeOf` sham/polyfill/replacement that works in as many engines as possible",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/reflect.getprototypeof@1.0.10",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/es-shims/Reflect.getPrototypeOf"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/es-shims/Reflect.getPrototypeOf.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/reflect.getprototypeof@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/reflect.getprototypeof/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/reflect.getprototypeof/package.json"
              }
            ],
            "concludedValue": "node_modules/reflect.getprototypeof/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "redent",
      "version": "3.0.0",
      "description": "Strip redundant indentation and indent the string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/redent@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/redent@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/redent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/redent/package.json"
              }
            ],
            "concludedValue": "node_modules/redent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (thlorenz.com)"
        }
      ],
      "group": "",
      "name": "readdirp",
      "version": "3.6.0",
      "description": "Recursive version of fs.readdir with streaming API.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readdirp@3.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/paulmillr/readdirp"
        },
        {
          "type": "vcs",
          "url": "git://github.com/paulmillr/readdirp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdirp@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/readdirp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/readdirp/package.json"
              }
            ],
            "concludedValue": "node_modules/readdirp/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "3.6.2",
      "description": "Streams3, a user-land copy of the stream library from Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@3.6.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/readable-stream"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@3.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/readable-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/readable-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/readable-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "read-pkg-up",
      "version": "7.0.1",
      "description": "Read the closest package.json file",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/read-pkg-up@7.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg-up@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg-up/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/read-pkg-up/package.json"
              }
            ],
            "concludedValue": "node_modules/read-pkg-up/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "type-fest",
      "version": "0.8.1",
      "description": "A collection of essential TypeScript types",
      "scope": "optional",
      "licenses": [
        {
          "expression": "MIT OR CC0-1.0"
        }
      ],
      "purl": "pkg:npm/type-fest@0.8.1",
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg-up/node_modules/type-fest/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/hasha/node_modules/type-fest/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hasha/node_modules/type-fest/package.json"
              }
            ],
            "concludedValue": "node_modules/hasha/node_modules/type-fest/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "read-pkg",
      "version": "5.2.0",
      "description": "Read a package.json file",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/read-pkg@5.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/read-pkg@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/read-pkg/package.json"
              }
            ],
            "concludedValue": "node_modules/read-pkg/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "type-fest",
      "version": "0.6.0",
      "description": "A collection of essential TypeScript types",
      "scope": "optional",
      "licenses": [
        {
          "expression": "MIT OR CC0-1.0"
        }
      ],
      "purl": "pkg:npm/type-fest@0.6.0",
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg/node_modules/type-fest/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/load-json-file/node_modules/type-fest/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/load-json-file/node_modules/type-fest/package.json"
              }
            ],
            "concludedValue": "node_modules/load-json-file/node_modules/type-fest/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "resolve",
      "version": "1.22.12",
      "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve@1.22.12",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "ssh://github.com/browserify/resolve.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/resolve@1.22.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg/node_modules/resolve/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/node_modules/resolve/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/node_modules/resolve/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/node_modules/resolve/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Meryn Stol <merynstol@gmail.com>"
        }
      ],
      "group": "",
      "name": "normalize-package-data",
      "version": "2.5.0",
      "description": "Normalizes data that can be found in package.json files.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/normalize-package-data@2.5.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/npm/normalize-package-data.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-package-data@2.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg/node_modules/normalize-package-data/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/read-pkg/node_modules/normalize-package-data/package.json"
              }
            ],
            "concludedValue": "node_modules/read-pkg/node_modules/normalize-package-data/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org> (http://re-becca.org)"
        }
      ],
      "group": "",
      "name": "hosted-git-info",
      "version": "2.8.9",
      "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hosted-git-info@2.8.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/hosted-git-info"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/hosted-git-info.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@2.8.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/read-pkg/node_modules/hosted-git-info/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/read-pkg/node_modules/hosted-git-info/package.json"
              }
            ],
            "concludedValue": "node_modules/read-pkg/node_modules/hosted-git-info/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "read-package-json-fast",
      "version": "3.0.2",
      "description": "Like read-package-json, but faster",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/read-package-json-fast@3.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/read-package-json-fast.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-package-json-fast@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/read-package-json-fast/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/read-package-json-fast/package.json"
              }
            ],
            "concludedValue": "node_modules/read-package-json-fast/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "read-package-json",
      "version": "6.0.4",
      "description": "The thing npm uses to read package.json files with semantics and defaults and validation",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/read-package-json@6.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/read-package-json.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-package-json@6.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/read-package-json/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/read-package-json/package.json"
              }
            ],
            "concludedValue": "node_modules/read-package-json/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "jackspeak",
      "version": "3.4.3",
      "description": "A very strict and proper argument parser.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jackspeak@3.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/jackspeak.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jackspeak@3.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/read-package-json/node_modules/jackspeak/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/cacache/node_modules/jackspeak/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/package-json/node_modules/jackspeak/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/map-workspaces/node_modules/jackspeak/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/arborist/node_modules/jackspeak/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/arborist/node_modules/jackspeak/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/arborist/node_modules/jackspeak/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "glob",
      "version": "10.5.0",
      "description": "the most correct and second fastest glob implementation in JavaScript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@10.5.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-glob.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@10.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/read-package-json/node_modules/glob/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/cacache/node_modules/glob/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/package-json/node_modules/glob/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/map-workspaces/node_modules/glob/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/arborist/node_modules/glob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/arborist/node_modules/glob/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/arborist/node_modules/glob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "foreground-child",
      "version": "3.3.1",
      "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/foreground-child@3.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/tapjs/foreground-child.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/foreground-child@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/read-package-json/node_modules/foreground-child/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/cacache/node_modules/foreground-child/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/package-json/node_modules/foreground-child/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/map-workspaces/node_modules/foreground-child/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/arborist/node_modules/foreground-child/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/arborist/node_modules/foreground-child/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/arborist/node_modules/foreground-child/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "read-cmd-shim",
      "version": "4.0.0",
      "description": "Figure out what a cmd-shim is pointing at. This acts as the equivalent of fs.readlink.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/read-cmd-shim@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/read-cmd-shim#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/read-cmd-shim.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/read-cmd-shim@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/read-cmd-shim/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/read-cmd-shim/package.json"
              }
            ],
            "concludedValue": "node_modules/read-cmd-shim/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "quick-lru",
      "version": "4.0.1",
      "description": "Simple \"Least Recently Used\" (LRU) cache",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/quick-lru@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/quick-lru@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/quick-lru/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/quick-lru/package.json"
              }
            ],
            "concludedValue": "node_modules/quick-lru/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "queue-microtask",
      "version": "1.2.3",
      "description": "fast, tiny `queueMicrotask` shim for modern engines",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/queue-microtask@1.2.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/queue-microtask"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/queue-microtask.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/queue-microtask@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/queue-microtask/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/queue-microtask/package.json"
              }
            ],
            "concludedValue": "node_modules/queue-microtask/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kris Kowal <kris@cixar.com> (https://github.com/kriskowal)"
        }
      ],
      "group": "",
      "name": "q",
      "version": "1.5.1",
      "description": "A library for promises (CommonJS/Promises/A,B,D)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/q@1.5.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/kriskowal/q"
        },
        {
          "type": "vcs",
          "url": "git://github.com/kriskowal/q.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/q/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/q/package.json"
              }
            ],
            "concludedValue": "node_modules/q/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Pedro Teixeira <pedro.teixeira@gmail.com>"
        }
      ],
      "group": "",
      "name": "propagate",
      "version": "2.0.1",
      "description": "Propagate events from one event emitter into another",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/propagate@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/nock/propagate#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/propagate@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/propagate/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/propagate/package.json"
              }
            ],
            "concludedValue": "node_modules/propagate/package.json"
          }
        ]
      },
      "tags": [
        "event"
      ]
    },
    {
      "authors": [
        {
          "name": "IndigoUnited <hello@indigounited.com> (http://indigounited.com)"
        }
      ],
      "group": "",
      "name": "promise-retry",
      "version": "2.0.1",
      "description": "Retries a function that returns a promise, leveraging the power of the retry module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/promise-retry@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/IndigoUnited/node-promise-retry.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise-retry@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/promise-retry/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/promise-retry/package.json"
              }
            ],
            "concludedValue": "node_modules/promise-retry/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org> (http://re-becca.org/)"
        }
      ],
      "group": "",
      "name": "promise-inflight",
      "version": "1.0.1",
      "description": "One promise for multiple requests in flight to avoid async duplication",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/promise-inflight@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/iarna/promise-inflight#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/iarna/promise-inflight.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise-inflight@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/promise-inflight/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/promise-inflight/package.json"
              }
            ],
            "concludedValue": "node_modules/promise-inflight/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "promise-call-limit",
      "version": "1.0.2",
      "description": "Call an array of promise-returning functions, restricting concurrency to a specified limit.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/promise-call-limit@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/promise-call-limit"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/promise-call-limit@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/promise-call-limit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/promise-call-limit/package.json"
              }
            ],
            "concludedValue": "node_modules/promise-call-limit/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "promise-all-reject-late",
      "version": "1.0.1",
      "description": "Like Promise.all, but save rejections until all promises are resolved",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/promise-all-reject-late@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/promise-all-reject-late@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/promise-all-reject-late/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/promise-all-reject-late/package.json"
              }
            ],
            "concludedValue": "node_modules/promise-all-reject-late/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Corey Farrell"
        }
      ],
      "group": "",
      "name": "process-on-spawn",
      "version": "1.1.0",
      "description": "Execute callbacks when child processes are spawned",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/process-on-spawn@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/cfware/process-on-spawn#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/cfware/process-on-spawn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-on-spawn@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/process-on-spawn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/process-on-spawn/package.json"
              }
            ],
            "concludedValue": "node_modules/process-on-spawn/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "2.0.1",
      "description": "process.nextTick but always with args",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/process-nextick-args@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/calvinmetcalf/process-nextick-args"
        },
        {
          "type": "vcs",
          "url": "https://github.com/calvinmetcalf/process-nextick-args.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/process-nextick-args/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/process-nextick-args/package.json"
              }
            ],
            "concludedValue": "node_modules/process-nextick-args/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "proc-log",
      "version": "3.0.0",
      "description": "just emit 'log' events on the process object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/proc-log@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/proc-log.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/proc-log@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/proc-log/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/proc-log/package.json"
              }
            ],
            "concludedValue": "node_modules/proc-log/package.json"
          }
        ]
      },
      "tags": [
        "emit"
      ]
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "prelude-ls",
      "version": "1.2.1",
      "description": "prelude.ls is a functionally oriented utility library. It is powerful and flexible. Almost all of its functions are curried. It is written in, and is the recommended base library for, LiveScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/prelude-ls@1.2.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://preludels.com"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/prelude-ls.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prelude-ls@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/prelude-ls/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/prelude-ls/package.json"
              }
            ],
            "concludedValue": "node_modules/prelude-ls/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "postcss-selector-parser",
      "version": "6.1.4",
      "description": "Selector parser with built in methods for working with selector strings.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/postcss-selector-parser@6.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/postcss/postcss-selector-parser"
        },
        {
          "type": "vcs",
          "url": "https://github.com/postcss/postcss-selector-parser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/postcss-selector-parser@6.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/postcss-selector-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/postcss-selector-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/postcss-selector-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "possible-typed-array-names",
      "version": "1.1.0",
      "description": "A simple list of possible Typed Array names.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/possible-typed-array-names@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/possible-typed-array-names#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/possible-typed-array-names.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/possible-typed-array-names@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/possible-typed-array-names/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/possible-typed-array-names/package.json"
              }
            ],
            "concludedValue": "node_modules/possible-typed-array-names/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "pify",
      "version": "4.0.1",
      "description": "Promisify a callback-style function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pify@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/pify@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/pify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/pify/package.json"
              }
            ],
            "concludedValue": "node_modules/pify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "picomatch",
      "version": "2.3.2",
      "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/picomatch@2.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/picomatch"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/picomatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/picomatch/package.json"
              }
            ],
            "concludedValue": "node_modules/picomatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alexey Raspopov"
        }
      ],
      "group": "",
      "name": "picocolors",
      "version": "1.1.1",
      "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/picocolors@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/picocolors@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/picocolors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/picocolors/package.json"
              }
            ],
            "concludedValue": "node_modules/picocolors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-type",
      "version": "4.0.0",
      "description": "Check if a path is a file, directory, or symlink",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-type@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/path-type@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-type/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-type/package.json"
              }
            ],
            "concludedValue": "node_modules/path-type/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "path-scurry",
      "version": "1.11.1",
      "description": "walk paths fast and efficiently",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-scurry@1.11.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/path-scurry"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-scurry@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-scurry/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-scurry/package.json"
              }
            ],
            "concludedValue": "node_modules/path-scurry/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "lru-cache",
      "version": "10.4.3",
      "description": "A cache object that deletes the least-recently-used items.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@10.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-lru-cache.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@10.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-scurry/node_modules/lru-cache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-scurry/node_modules/lru-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/path-scurry/node_modules/lru-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Javier Blanco <http://jbgutierrez.info>"
        }
      ],
      "group": "",
      "name": "path-parse",
      "version": "1.0.7",
      "description": "Node.js path.parse() ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-parse@1.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jbgutierrez/path-parse#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/jbgutierrez/path-parse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/path-parse@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-parse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-parse/package.json"
              }
            ],
            "concludedValue": "node_modules/path-parse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "path-key",
      "version": "3.1.1",
      "description": "Get the PATH environment variable key cross-platform",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/path-key@3.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/path-key@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/path-key/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/path-key/package.json"
              }
            ],
            "concludedValue": "node_modules/path-key/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "parse-json",
      "version": "5.2.0",
      "description": "Parse JSON with more helpful errors",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-json@5.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/parse-json@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parse-json/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parse-json/package.json"
              }
            ],
            "concludedValue": "node_modules/parse-json/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Kat Marchán <kzm@zkat.tech>"
        }
      ],
      "group": "",
      "name": "json-parse-even-better-errors",
      "version": "2.3.1",
      "description": "JSON.parse with context information on error",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-parse-even-better-errors@2.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/json-parse-even-better-errors@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parse-json/node_modules/json-parse-even-better-errors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parse-json/node_modules/json-parse-even-better-errors/package.json"
              }
            ],
            "concludedValue": "node_modules/parse-json/node_modules/json-parse-even-better-errors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)"
        }
      ],
      "group": "",
      "name": "parse-github-repo-url",
      "version": "1.4.1",
      "description": "Parse a GitHub URL for user/project@version",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-github-repo-url@1.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/repo-utils/parse-github-repo-url.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-github-repo-url@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parse-github-repo-url/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parse-github-repo-url/package.json"
              }
            ],
            "concludedValue": "node_modules/parse-github-repo-url/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sergey Todyshev <stodyshev@gmail.com>"
        }
      ],
      "group": "",
      "name": "parse-diff",
      "version": "0.11.1",
      "description": "Unified diff parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-diff@0.11.1",
      "type": "library",
      "bom-ref": "pkg:npm/parse-diff@0.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parse-diff/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parse-diff/package.json"
              }
            ],
            "concludedValue": "node_modules/parse-diff/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "parse-conflict-json",
      "version": "3.0.1",
      "description": "Parse a JSON string that has git merge conflicts, resolving if possible",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parse-conflict-json@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/parse-conflict-json.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/parse-conflict-json@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parse-conflict-json/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parse-conflict-json/package.json"
              }
            ],
            "concludedValue": "node_modules/parse-conflict-json/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Angus Croll"
        }
      ],
      "group": "",
      "name": "just-diff",
      "version": "6.0.2",
      "description": "Return an object representing the diffs between two objects. Supports jsonPatch protocol",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/just-diff@6.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/just-diff@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parse-conflict-json/node_modules/just-diff/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parse-conflict-json/node_modules/just-diff/package.json"
              }
            ],
            "concludedValue": "node_modules/parse-conflict-json/node_modules/just-diff/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "parent-module",
      "version": "1.0.1",
      "description": "Get the path of the parent module",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/parent-module@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/parent-module@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/parent-module/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/parent-module/package.json"
              }
            ],
            "concludedValue": "node_modules/parent-module/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "pacote",
      "version": "15.2.0",
      "description": "JavaScript package downloader",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/pacote@15.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/pacote.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pacote@15.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/pacote/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/pacote/package.json"
              }
            ],
            "concludedValue": "node_modules/pacote/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "fs-minipass",
      "version": "3.0.3",
      "description": "fs read and write streams based on minipass",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fs-minipass@3.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/fs-minipass#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/fs-minipass.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-minipass@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/pacote/node_modules/fs-minipass/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "fs-minipass"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/cacache/node_modules/fs-minipass/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cacache/node_modules/fs-minipass/package.json"
              }
            ],
            "concludedValue": "node_modules/cacache/node_modules/fs-minipass/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/create.js",
            "line": 7
          },
          {
            "location": "lib/extract.js",
            "line": 7
          },
          {
            "location": "lib/list.js",
            "line": 10
          },
          {
            "location": "lib/replace.js",
            "line": 7
          },
          {
            "location": "lib/unpack.js",
            "line": 12
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "package-json-from-dist",
      "version": "1.0.1",
      "description": "Load the local package.json from either src or dist folder",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/package-json-from-dist@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/package-json-from-dist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/package-json-from-dist@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/package-json-from-dist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/package-json-from-dist/package.json"
              }
            ],
            "concludedValue": "node_modules/package-json-from-dist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mark Wubben (https://novemberborn.net/)"
        }
      ],
      "group": "",
      "name": "package-hash",
      "version": "4.0.0",
      "description": "Generates a hash for an installed npm package, useful for salting caches",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/package-hash@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/novemberborn/package-hash#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/novemberborn/package-hash.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/package-hash@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/package-hash/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/package-hash/package.json"
              }
            ],
            "concludedValue": "node_modules/package-hash/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-timeout",
      "version": "3.2.0",
      "description": "Timeout a promise after a specified amount of time",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-timeout@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-timeout@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-timeout/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-timeout/package.json"
              }
            ],
            "concludedValue": "node_modules/p-timeout/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "p-queue",
      "version": "6.6.2",
      "description": "Promise queue with concurrency control",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-queue@6.6.2",
      "type": "library",
      "bom-ref": "pkg:npm/p-queue@6.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-queue/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-queue/package.json"
              }
            ],
            "concludedValue": "node_modules/p-queue/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-map",
      "version": "4.0.0",
      "description": "Map over promises concurrently",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-map@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-map@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-map/package.json"
              }
            ],
            "concludedValue": "node_modules/p-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-locate",
      "version": "5.0.0",
      "description": "Get the first fulfilled promise that satisfies the provided testing function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-locate@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-locate@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-locate/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-locate/package.json"
              }
            ],
            "concludedValue": "node_modules/p-locate/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-limit",
      "version": "3.1.0",
      "description": "Run multiple promise-returning & async functions with limited concurrency",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-limit@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-limit@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-limit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-limit/package.json"
              }
            ],
            "concludedValue": "node_modules/p-limit/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-finally",
      "version": "1.0.0",
      "description": "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-finally@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-finally@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/p-finally/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/p-finally/package.json"
              }
            ],
            "concludedValue": "node_modules/p-finally/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "own-or-env",
      "version": "1.0.2",
      "description": "Use an objects own property, or an environment variable.  Optionally treat as a boolean if the env should be set to 1 or 0.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/own-or-env@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/own-or-env#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/own-or-env.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/own-or-env@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/own-or-env/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/own-or-env/package.json"
              }
            ],
            "concludedValue": "node_modules/own-or-env/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "own-or",
      "version": "1.0.0",
      "description": "Either use the object's own property, or a fallback",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/own-or@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/own-or#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/own-or.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/own-or@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/own-or/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/own-or/package.json"
              }
            ],
            "concludedValue": "node_modules/own-or/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "own-keys",
      "version": "1.0.2",
      "description": "Robustly get an object's own property keys (strings and symbols), including non-enumerables when possible",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/own-keys@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/own-keys#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/own-keys.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/own-keys@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/own-keys/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/own-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/own-keys/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "optionator",
      "version": "0.9.4",
      "description": "option parsing and help generation",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/optionator@0.9.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gkz/optionator"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/optionator.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/optionator@0.9.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/optionator/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/optionator/package.json"
              }
            ],
            "concludedValue": "node_modules/optionator/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Domenic Denicola <d@domenic.me> (https://domenic.me/)"
        }
      ],
      "group": "",
      "name": "opener",
      "version": "1.5.2",
      "description": "Opens stuff, like webpages and files and executables, cross-platform",
      "scope": "optional",
      "licenses": [
        {
          "expression": "WTFPL OR MIT"
        }
      ],
      "purl": "pkg:npm/opener@1.5.2",
      "type": "library",
      "bom-ref": "pkg:npm/opener@1.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/opener/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/opener/package.json"
              }
            ],
            "concludedValue": "node_modules/opener/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "object.values",
      "version": "1.2.1",
      "description": "ES2017 spec-compliant Object.values shim.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object.values@1.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/Object.values.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.values@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object.values/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object.values/package.json"
              }
            ],
            "concludedValue": "node_modules/object.values/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "object.groupby",
      "version": "1.0.3",
      "description": "An ESnext spec-compliant `Object.groupBy` shim/polyfill/replacement that works as far down as ES3.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object.groupby@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/es-shims/Object.groupBy#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/es-shims/Object.groupBy.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.groupby@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object.groupby/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object.groupby/package.json"
              }
            ],
            "concludedValue": "node_modules/object.groupby/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "object.fromentries",
      "version": "2.0.8",
      "description": "ES proposal-spec-compliant Object.fromEntries shim.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object.fromentries@2.0.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/Object.fromEntries.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.fromentries@2.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object.fromentries/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object.fromentries/package.json"
              }
            ],
            "concludedValue": "node_modules/object.fromentries/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband"
        }
      ],
      "group": "",
      "name": "object.entries",
      "version": "1.1.9",
      "description": "ES2017 spec-compliant Object.entries shim.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object.entries@1.1.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/Object.entries.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.entries@1.1.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object.entries/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object.entries/package.json"
              }
            ],
            "concludedValue": "node_modules/object.entries/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband"
        }
      ],
      "group": "",
      "name": "object.assign",
      "version": "4.1.7",
      "description": "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object.assign@4.1.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/object.assign.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object.assign@4.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object.assign/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object.assign/package.json"
              }
            ],
            "concludedValue": "node_modules/object.assign/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "object-keys",
      "version": "1.1.1",
      "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-keys@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/object-keys.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-keys@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object-keys/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/object-keys/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "object-inspect",
      "version": "1.13.4",
      "description": "string representations of objects in node and the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/object-inspect@1.13.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/object-inspect"
        },
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/object-inspect.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-inspect@1.13.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/object-inspect/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/object-inspect/package.json"
              }
            ],
            "concludedValue": "node_modules/object-inspect/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "nyc",
      "version": "15.1.0",
      "description": "the Istanbul command line interface",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/nyc@15.1.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://istanbul.js.org/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nyc@15.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "yargs-parser",
      "version": "18.1.3",
      "description": "the mighty option parser used by yargs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs-parser@18.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yargs/yargs-parser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs-parser@18.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/yargs-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/yargs-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/yargs-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "yargs",
      "version": "15.4.1",
      "description": "yargs the modern, pirate-themed, successor to optimist.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs@15.4.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://yargs.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/yargs/yargs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@15.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/yargs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/yargs/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/yargs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "y18n",
      "version": "4.0.3",
      "description": "the bare-bones internationalization library used by yargs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/y18n@4.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/yargs/y18n"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/y18n@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/y18n/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/y18n/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/y18n/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "p-map",
      "version": "3.0.0",
      "description": "Map over promises concurrently",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/p-map@3.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/p-map@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/p-map/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/istanbul-lib-processinfo/node_modules/p-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/istanbul-lib-processinfo/node_modules/p-map/package.json"
              }
            ],
            "concludedValue": "node_modules/istanbul-lib-processinfo/node_modules/p-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "cliui",
      "version": "6.0.0",
      "description": "easily create complex multi-column command-line-interfaces",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cliui@6.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/yargs/cliui.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cliui@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nyc/node_modules/cliui/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nyc/node_modules/cliui/package.json"
              }
            ],
            "concludedValue": "node_modules/nyc/node_modules/cliui/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "number-is-nan",
      "version": "1.0.1",
      "description": "ES2015 Number.isNaN() ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/number-is-nan@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/number-is-nan@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/number-is-nan/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/number-is-nan/package.json"
              }
            ],
            "concludedValue": "node_modules/number-is-nan/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Boehm <me@feedic.com>"
        }
      ],
      "group": "",
      "name": "nth-check",
      "version": "2.1.1",
      "description": "Parses and compiles CSS nth-checks to highly optimized functions.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/nth-check@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/fb55/nth-check"
        },
        {
          "type": "vcs",
          "url": "https://github.com/fb55/nth-check"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nth-check@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nth-check/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nth-check/package.json"
              }
            ],
            "concludedValue": "node_modules/nth-check/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "npmlog",
      "version": "7.0.1",
      "description": "logger for npm",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/npmlog@7.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/npmlog.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npmlog@7.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/npmlog/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/npmlog/package.json"
              }
            ],
            "concludedValue": "node_modules/npmlog/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "npm-run-path",
      "version": "4.0.1",
      "description": "Get your PATH prepended with locally installed binaries",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/npm-run-path@4.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/npm-run-path@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/npm-run-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/npm-run-path/package.json"
              }
            ],
            "concludedValue": "node_modules/npm-run-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "npm-registry-fetch",
      "version": "14.0.5",
      "description": "Fetch-based http client for use with npm registry APIs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/npm-registry-fetch@14.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/npm-registry-fetch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-registry-fetch@14.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/npm-registry-fetch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/npm-registry-fetch/package.json"
              }
            ],
            "concludedValue": "node_modules/npm-registry-fetch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "npm-pick-manifest",
      "version": "8.0.2",
      "description": "Resolves a matching manifest from a package metadata document according to standard npm semver resolution rules.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/npm-pick-manifest@8.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/npm-pick-manifest.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-pick-manifest@8.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/npm-pick-manifest/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/npm-pick-manifest/package.json"
              }
            ],
            "concludedValue": "node_modules/npm-pick-manifest/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "npm-packlist",
      "version": "7.0.4",
      "description": "Get a list of the files to add from a folder into an npm package",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/npm-packlist@7.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/npm-packlist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-packlist@7.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/npm-packlist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/npm-packlist/package.json"
              }
            ],
            "concludedValue": "node_modules/npm-packlist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "npm-package-arg",
      "version": "10.1.0",
      "description": "Parse the things that can be arguments to `npm install`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/npm-package-arg@10.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/npm-package-arg"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/npm-package-arg.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-package-arg@10.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/npm-package-arg/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/npm-package-arg/package.json"
              }
            ],
            "concludedValue": "node_modules/npm-package-arg/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "npm-normalize-package-bin",
      "version": "3.0.1",
      "description": "Turn any flavor of allowable package.json bin into a normalized object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/npm-normalize-package-bin@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/npm-normalize-package-bin.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-normalize-package-bin@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/npm-normalize-package-bin/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/npm-normalize-package-bin/package.json"
              }
            ],
            "concludedValue": "node_modules/npm-normalize-package-bin/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "npm-install-checks",
      "version": "6.3.0",
      "description": "Check the engines and platform fields in package.json",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/npm-install-checks@6.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/npm-install-checks.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-install-checks@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/npm-install-checks/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/npm-install-checks/package.json"
              }
            ],
            "concludedValue": "node_modules/npm-install-checks/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "npm-bundled",
      "version": "3.0.1",
      "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/npm-bundled@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/npm-bundled.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-bundled@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/npm-bundled/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/npm-bundled/package.json"
              }
            ],
            "concludedValue": "node_modules/npm-bundled/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "normalize-path",
      "version": "3.0.0",
      "description": "Normalize slashes in a file path to be posix/unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes, unless disabled.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/normalize-path@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/normalize-path"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/normalize-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/normalize-path/package.json"
              }
            ],
            "concludedValue": "node_modules/normalize-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "normalize-package-data",
      "version": "5.0.0",
      "description": "Normalizes data that can be found in package.json files.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/normalize-package-data@5.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/normalize-package-data.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-package-data@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/normalize-package-data/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/normalize-package-data/package.json"
              }
            ],
            "concludedValue": "node_modules/normalize-package-data/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "nopt",
      "version": "7.2.1",
      "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/nopt@7.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/nopt.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nopt@7.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nopt/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nopt/package.json"
              }
            ],
            "concludedValue": "node_modules/nopt/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sergey Rubanov <chi187@gmail.com>"
        }
      ],
      "group": "",
      "name": "node-releases",
      "version": "2.0.54",
      "description": "Node.js releases data",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-releases@2.0.54",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/chicoxyzzy/node-releases.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-releases@2.0.54",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/node-releases/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/node-releases/package.json"
              }
            ],
            "concludedValue": "node_modules/node-releases/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Corey Farrell"
        }
      ],
      "group": "",
      "name": "node-preload",
      "version": "0.2.1",
      "description": "Request that Node.js child processes preload modules",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-preload@0.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/cfware/node-preload#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/cfware/node-preload.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-preload@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/node-preload/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/node-preload/package.json"
              }
            ],
            "concludedValue": "node_modules/node-preload/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Xiaoyi Shi <ashi009@gmail.com>"
        }
      ],
      "group": "",
      "name": "node-html-parser",
      "version": "5.4.2",
      "description": "A very fast HTML parser, generating a simplified DOM, with basic element query support.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-html-parser@5.4.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/taoqf/node-fast-html-parser"
        },
        {
          "type": "vcs",
          "url": "https://github.com/taoqf/node-fast-html-parser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-html-parser@5.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/node-html-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/node-html-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/node-html-parser/package.json"
          }
        ]
      },
      "tags": [
        "html",
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Nathan Rajlich <nathan@tootallnate.net> (http://tootallnate.net)"
        }
      ],
      "group": "",
      "name": "node-gyp",
      "version": "9.4.1",
      "description": "Node.js native addon build tool",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-gyp@9.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/node-gyp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-gyp@9.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/node-gyp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/node-gyp/package.json"
              }
            ],
            "concludedValue": "node_modules/node-gyp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "npmlog",
      "version": "6.0.2",
      "description": "logger for npm",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/npmlog@6.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/npmlog.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npmlog@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/node-gyp/node_modules/npmlog/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/node-gyp/node_modules/npmlog/package.json"
              }
            ],
            "concludedValue": "node_modules/node-gyp/node_modules/npmlog/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "nopt",
      "version": "6.0.0",
      "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/nopt@6.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/nopt.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nopt@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/node-gyp/node_modules/nopt/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/node-gyp/node_modules/nopt/package.json"
              }
            ],
            "concludedValue": "node_modules/node-gyp/node_modules/nopt/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "gauge",
      "version": "4.0.4",
      "description": "A terminal based horizontal gauge",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gauge@4.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/gauge"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/gauge.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gauge@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/node-gyp/node_modules/gauge/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/node-gyp/node_modules/gauge/package.json"
              }
            ],
            "concludedValue": "node_modules/node-gyp/node_modules/gauge/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "are-we-there-yet",
      "version": "3.0.1",
      "description": "Keep track of the overall completion of many disparate processes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/are-we-there-yet@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/are-we-there-yet"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/are-we-there-yet.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/are-we-there-yet@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/node-gyp/node_modules/are-we-there-yet/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/node-gyp/node_modules/are-we-there-yet/package.json"
              }
            ],
            "concludedValue": "node_modules/node-gyp/node_modules/are-we-there-yet/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "abbrev",
      "version": "1.1.1",
      "description": "Like ruby's abbrev module, but in js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/abbrev@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/abbrev@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/node-gyp/node_modules/abbrev/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/node-gyp/node_modules/abbrev/package.json"
              }
            ],
            "concludedValue": "node_modules/node-gyp/node_modules/abbrev/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "David Frank"
        }
      ],
      "group": "",
      "name": "node-fetch",
      "version": "2.7.0",
      "description": "A light-weight module that brings window.fetch to node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-fetch@2.7.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/bitinn/node-fetch"
        },
        {
          "type": "vcs",
          "url": "https://github.com/bitinn/node-fetch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-fetch@2.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/node-fetch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/node-fetch/package.json"
              }
            ],
            "concludedValue": "node_modules/node-fetch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "node-exports-info",
      "version": "1.6.2",
      "description": "Info about node `exports` field support: version ranges, categories, etc.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/node-exports-info@1.6.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/node-exports-info#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/node-exports-info.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-exports-info@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/node-exports-info/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/node-exports-info/package.json"
              }
            ],
            "concludedValue": "node_modules/node-exports-info/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Pedro Teixeira <pedro.teixeira@gmail.com>"
        }
      ],
      "group": "",
      "name": "nock",
      "version": "13.5.6",
      "description": "HTTP server mocking and expectations library for Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/nock@13.5.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nock/nock.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/nock@13.5.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/nock/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/nock/package.json"
              }
            ],
            "concludedValue": "node_modules/nock/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "neo-async",
      "version": "2.6.2",
      "description": "Neo-Async is a drop-in replacement for Async, it almost fully covers its functionality and runs faster ",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/neo-async@2.6.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/suguru03/neo-async"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/neo-async@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/neo-async/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/neo-async/package.json"
              }
            ],
            "concludedValue": "node_modules/neo-async/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "negotiator",
      "version": "0.6.4",
      "description": "HTTP content negotiation",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/negotiator@0.6.4",
      "type": "library",
      "bom-ref": "pkg:npm/negotiator@0.6.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/negotiator/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/negotiator/package.json"
              }
            ],
            "concludedValue": "node_modules/negotiator/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Lauri Rooden (https://github.com/litejs/natural-compare-lite)"
        }
      ],
      "group": "",
      "name": "natural-compare",
      "version": "1.4.0",
      "description": "Compare strings containing a mix of letters and numbers in the way a human being would in sort order.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/natural-compare@1.4.0",
      "type": "library",
      "bom-ref": "pkg:npm/natural-compare@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/natural-compare/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/natural-compare/package.json"
              }
            ],
            "concludedValue": "node_modules/natural-compare/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "mutate-fs",
      "version": "2.1.1",
      "description": "Mutate the filesystem behavior for tests.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mutate-fs@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/mutate-fs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mutate-fs@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mutate-fs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mutate-fs/package.json"
              }
            ],
            "concludedValue": "node_modules/mutate-fs/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "2.1.3",
      "description": "Tiny millisecond conversion utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ms@2.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/ms@2.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ms/package.json"
              }
            ],
            "concludedValue": "node_modules/ms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "modify-values",
      "version": "1.0.1",
      "description": "Modify the values of an object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/modify-values@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/modify-values@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/modify-values/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/modify-values/package.json"
              }
            ],
            "concludedValue": "node_modules/modify-values/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "1.0.4",
      "description": "Recursively mkdir, like `mkdir -p`",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/node-mkdirp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/mkdirp/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "mkdirp"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/mkdirp/package.json"
              }
            ],
            "concludedValue": "node_modules/mkdirp/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/mkdir.js",
            "line": 7
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "minizlib",
      "version": "2.1.2",
      "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minizlib@2.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/minizlib.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minizlib@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minizlib/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "minizlib"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minizlib/package.json"
              }
            ],
            "concludedValue": "node_modules/minizlib/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/pack.js",
            "line": 26
          },
          {
            "location": "lib/parse.js",
            "line": 30
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "minipass-sized",
      "version": "1.0.3",
      "description": "A Minipass stream that raises an error if you get a different number of bytes than expected",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minipass-sized@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/minipass-sized.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass-sized@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minipass-sized/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minipass-sized/package.json"
              }
            ],
            "concludedValue": "node_modules/minipass-sized/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "minipass-pipeline",
      "version": "1.2.4",
      "description": "create a pipeline of streams using Minipass",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minipass-pipeline@1.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/minipass-pipeline@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minipass-pipeline/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minipass-pipeline/package.json"
              }
            ],
            "concludedValue": "node_modules/minipass-pipeline/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "minipass-json-stream",
      "version": "1.0.2",
      "description": "Like JSONStream, but using Minipass streams",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minipass-json-stream@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/minipass-json-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass-json-stream@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minipass-json-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minipass-json-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/minipass-json-stream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "minipass-flush",
      "version": "1.0.7",
      "description": "A Minipass stream that calls a flush function before emitting 'end'",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BlueOak-1.0.0",
            "url": "https://opensource.org/licenses/BlueOak-1.0.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minipass-flush@1.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/minipass-flush.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass-flush@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minipass-flush/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minipass-flush/package.json"
              }
            ],
            "concludedValue": "node_modules/minipass-flush/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "minipass-fetch",
      "version": "2.1.2",
      "description": "An implementation of window.fetch in Node.js using Minipass streams",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minipass-fetch@2.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/minipass-fetch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass-fetch@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minipass-fetch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minipass-fetch/package.json"
              }
            ],
            "concludedValue": "node_modules/minipass-fetch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "minipass-collect",
      "version": "1.0.2",
      "description": "A Minipass stream that collects all the data into a single chunk",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minipass-collect@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/minipass-collect@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minipass-collect/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minipass-collect/package.json"
              }
            ],
            "concludedValue": "node_modules/minipass-collect/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "minipass",
      "version": "5.0.0",
      "description": "minimal implementation of a PassThrough stream",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minipass@5.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/minipass.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minipass@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minipass/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "minipass"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minipass/package.json"
              }
            ],
            "concludedValue": "node_modules/minipass/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/pack.js",
            "line": 25
          },
          {
            "location": "lib/read-entry.js",
            "line": 2
          },
          {
            "location": "lib/write-entry.js",
            "line": 2
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Vadim Demedes <vdemedes@gmail.com>"
        }
      ],
      "group": "",
      "name": "minimist-options",
      "version": "4.1.0",
      "description": "Pretty options for minimist",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimist-options@4.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/minimist-options@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minimist-options/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minimist-options/package.json"
              }
            ],
            "concludedValue": "node_modules/minimist-options/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "minimist",
      "version": "1.2.8",
      "description": "parse argument options",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimist@1.2.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/minimistjs/minimist"
        },
        {
          "type": "vcs",
          "url": "git://github.com/minimistjs/minimist.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minimist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minimist/package.json"
              }
            ],
            "concludedValue": "node_modules/minimist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "minimatch",
      "version": "9.0.9",
      "description": "a glob matcher in javascript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@9.0.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/minimatch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@9.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/minimatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/minimatch/package.json"
              }
            ],
            "concludedValue": "node_modules/minimatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Kyle <me@thejameskyle.com> (thejameskyle.com)"
        }
      ],
      "group": "",
      "name": "min-indent",
      "version": "1.0.1",
      "description": "Get the shortest leading whitespace from lines in a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/min-indent@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/min-indent@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/min-indent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/min-indent/package.json"
              }
            ],
            "concludedValue": "node_modules/min-indent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Stephen Sugden <me@stephensugden.com>"
        }
      ],
      "group": "",
      "name": "merge-stream",
      "version": "2.0.0",
      "description": "Create a stream that emits events from multiple other streams",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/merge-stream@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/merge-stream@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/merge-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/merge-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/merge-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "meow",
      "version": "8.1.2",
      "description": "CLI app helper",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/meow@8.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/meow@8.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/meow/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/meow/package.json"
              }
            ],
            "concludedValue": "node_modules/meow/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "type-fest",
      "version": "0.18.1",
      "description": "A collection of essential TypeScript types",
      "scope": "optional",
      "licenses": [
        {
          "expression": "MIT OR CC0-1.0"
        }
      ],
      "purl": "pkg:npm/type-fest@0.18.1",
      "type": "library",
      "bom-ref": "pkg:npm/type-fest@0.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/meow/node_modules/type-fest/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/meow/node_modules/type-fest/package.json"
              }
            ],
            "concludedValue": "node_modules/meow/node_modules/type-fest/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Meryn Stol <merynstol@gmail.com>"
        }
      ],
      "group": "",
      "name": "normalize-package-data",
      "version": "3.0.3",
      "description": "Normalizes data that can be found in package.json files.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/normalize-package-data@3.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/npm/normalize-package-data.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalize-package-data@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/meow/node_modules/normalize-package-data/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/meow/node_modules/normalize-package-data/package.json"
              }
            ],
            "concludedValue": "node_modules/meow/node_modules/normalize-package-data/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "lru-cache",
      "version": "6.0.0",
      "description": "A cache object that deletes the least-recently-used items.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@6.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/meow/node_modules/lru-cache/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/node_modules/lru-cache/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package/node_modules/lru-cache/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/is-ignored/node_modules/lru-cache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/is-ignored/node_modules/lru-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/is-ignored/node_modules/lru-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org> (http://re-becca.org)"
        }
      ],
      "group": "",
      "name": "hosted-git-info",
      "version": "4.1.0",
      "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hosted-git-info@4.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/hosted-git-info"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/hosted-git-info.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/meow/node_modules/hosted-git-info/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/node_modules/hosted-git-info/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package/node_modules/hosted-git-info/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/package/node_modules/hosted-git-info/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/package/node_modules/hosted-git-info/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "math-intrinsics",
      "version": "1.1.0",
      "description": "ES Math-related intrinsics and helpers, robustly cached.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/math-intrinsics@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/es-shims/math-intrinsics#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/es-shims/math-intrinsics.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/math-intrinsics@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/math-intrinsics/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/math-intrinsics/package.json"
              }
            ],
            "concludedValue": "node_modules/math-intrinsics/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "map-obj",
      "version": "4.3.0",
      "description": "Map object keys and values into a new object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/map-obj@4.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/map-obj@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/map-obj/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/map-obj/package.json"
              }
            ],
            "concludedValue": "node_modules/map-obj/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "make-fetch-happen",
      "version": "10.2.1",
      "description": "Opinionated, caching, retrying fetch client",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/make-fetch-happen@10.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/make-fetch-happen.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-fetch-happen@10.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/make-fetch-happen/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/make-fetch-happen/package.json"
              }
            ],
            "concludedValue": "node_modules/make-fetch-happen/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "unique-slug",
      "version": "3.0.0",
      "description": "Generate a unique character string suitible for use in files and URLs.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unique-slug@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/unique-slug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-slug@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/make-fetch-happen/node_modules/unique-slug/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/make-fetch-happen/node_modules/unique-slug/package.json"
              }
            ],
            "concludedValue": "node_modules/make-fetch-happen/node_modules/unique-slug/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "unique-filename",
      "version": "2.0.1",
      "description": "Generate a unique filename for use in temporary directories or caches.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/unique-filename@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/iarna/unique-filename"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/unique-filename.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unique-filename@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/make-fetch-happen/node_modules/unique-filename/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/make-fetch-happen/node_modules/unique-filename/package.json"
              }
            ],
            "concludedValue": "node_modules/make-fetch-happen/node_modules/unique-filename/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "ssri",
      "version": "9.0.1",
      "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ssri@9.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/ssri.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ssri@9.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/make-fetch-happen/node_modules/ssri/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/make-fetch-happen/node_modules/ssri/package.json"
              }
            ],
            "concludedValue": "node_modules/make-fetch-happen/node_modules/ssri/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "cacache",
      "version": "16.1.3",
      "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cacache@16.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/cacache.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cacache@16.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/make-fetch-happen/node_modules/cacache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/make-fetch-happen/node_modules/cacache/package.json"
              }
            ],
            "concludedValue": "node_modules/make-fetch-happen/node_modules/cacache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "fs",
      "version": "2.1.2",
      "description": "filesystem utilities for the npm cli",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/fs@2.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/fs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/fs@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/make-fetch-happen/node_modules/@npmcli/fs/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "fs"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/make-fetch-happen/node_modules/@npmcli/fs/package.json"
              }
            ],
            "concludedValue": "node_modules/make-fetch-happen/node_modules/@npmcli/fs/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/extract.js",
            "line": 6
          },
          {
            "location": "lib/get-write-flag.js",
            "line": 11
          },
          {
            "location": "lib/list.js",
            "line": 9
          },
          {
            "location": "lib/mkdir.js",
            "line": 8
          },
          {
            "location": "lib/pack.js",
            "line": 54
          },
          {
            "location": "lib/replace.js",
            "line": 6
          },
          {
            "location": "lib/unpack.js",
            "line": 11
          },
          {
            "location": "lib/write-entry.js",
            "line": 5
          },
          {
            "location": "scripts/generate-parse-fixtures.js",
            "line": 3
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julien Fontanet <julien.fontanet@isonoe.net>"
        }
      ],
      "group": "",
      "name": "make-error",
      "version": "1.3.6",
      "description": "Make your own error types!",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/make-error@1.3.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/JsCommunity/make-error"
        },
        {
          "type": "vcs",
          "url": "git://github.com/JsCommunity/make-error.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-error@1.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/make-error/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/make-error/package.json"
              }
            ],
            "concludedValue": "node_modules/make-error/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "lru-cache",
      "version": "7.18.3",
      "description": "A cache object that deletes the least-recently-used items.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@7.18.3",
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@7.18.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lru-cache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lru-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/lru-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.upperfirst",
      "version": "4.3.1",
      "description": "The lodash method `_.upperFirst` exported as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.upperfirst@4.3.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.upperfirst@4.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.upperfirst/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.upperfirst/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.upperfirst/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.uniq",
      "version": "4.5.0",
      "description": "The lodash method `_.uniq` exported as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.uniq@4.5.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.uniq@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.uniq/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.uniq/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.uniq/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.startcase",
      "version": "4.4.0",
      "description": "The lodash method `_.startCase` exported as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.startcase@4.4.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.startcase@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.startcase/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.startcase/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.startcase/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.snakecase",
      "version": "4.1.1",
      "description": "The lodash method `_.snakeCase` exported as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.snakecase@4.1.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.snakecase@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.snakecase/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.snakecase/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.snakecase/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com>"
        }
      ],
      "group": "",
      "name": "lodash.mergewith",
      "version": "4.6.2",
      "description": "The Lodash method `_.mergeWith` exported as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.mergewith@4.6.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.mergewith@4.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.mergewith/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.mergewith/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.mergewith/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com>"
        }
      ],
      "group": "",
      "name": "lodash.merge",
      "version": "4.6.2",
      "description": "The Lodash method `_.merge` exported as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.merge@4.6.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.merge@4.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.merge/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.merge/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.merge/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.kebabcase",
      "version": "4.1.1",
      "description": "The lodash method `_.kebabCase` exported as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.kebabcase@4.1.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.kebabcase@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.kebabcase/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.kebabcase/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.kebabcase/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.isplainobject",
      "version": "4.0.6",
      "description": "The lodash method `_.isPlainObject` exported as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.isplainobject@4.0.6",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isplainobject@4.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.isplainobject/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.isplainobject/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.isplainobject/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.ismatch",
      "version": "4.4.0",
      "description": "The lodash method `_.isMatch` exported as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.ismatch@4.4.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.ismatch@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.ismatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.ismatch/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.ismatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.isfunction",
      "version": "3.0.9",
      "description": "The Lodash method `_.isFunction` exported as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.isfunction@3.0.9",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.isfunction@3.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.isfunction/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.isfunction/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.isfunction/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.flattendeep",
      "version": "4.4.0",
      "description": "The lodash method `_.flattenDeep` exported as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.flattendeep@4.4.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.flattendeep@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.flattendeep/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.flattendeep/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.flattendeep/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/)"
        }
      ],
      "group": "",
      "name": "lodash.camelcase",
      "version": "4.3.0",
      "description": "The lodash method `_.camelCase` exported as a module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash.camelcase@4.3.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash.camelcase@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash.camelcase/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash.camelcase/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash.camelcase/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "John-David Dalton <john.david.dalton@gmail.com>"
        }
      ],
      "group": "",
      "name": "lodash",
      "version": "4.18.1",
      "description": "Lodash modular utilities.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lodash@4.18.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://lodash.com/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lodash@4.18.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lodash/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lodash/package.json"
              }
            ],
            "concludedValue": "node_modules/lodash/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "locate-path",
      "version": "6.0.0",
      "description": "Get the first path that exists on disk of multiple paths",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/locate-path@6.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/locate-path@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/locate-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/locate-path/package.json"
              }
            ],
            "concludedValue": "node_modules/locate-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "load-json-file",
      "version": "6.2.0",
      "description": "Read and parse a JSON file",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/load-json-file@6.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/load-json-file@6.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/load-json-file/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/load-json-file/package.json"
              }
            ],
            "concludedValue": "node_modules/load-json-file/package.json"
          }
        ]
      },
      "tags": [
        "json",
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Brian Donovan <brian@donovans.cc>"
        }
      ],
      "group": "",
      "name": "lines-and-columns",
      "version": "1.2.4",
      "description": "Maps lines and columns to character offsets and back.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lines-and-columns@1.2.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eventualbuddha/lines-and-columns#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eventualbuddha/lines-and-columns.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lines-and-columns@1.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/lines-and-columns/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/lines-and-columns/package.json"
              }
            ],
            "concludedValue": "node_modules/lines-and-columns/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "libtap",
      "version": "1.4.1",
      "description": "A Test-Anything-Protocol library for JavaScript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/libtap@1.4.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://www.node-tap.org/"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/libtap@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/libtap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/libtap/package.json"
              }
            ],
            "concludedValue": "node_modules/libtap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "George Zahariev <z@georgezahariev.com>"
        }
      ],
      "group": "",
      "name": "levn",
      "version": "0.4.1",
      "description": "Light ECMAScript (JavaScript) Value Notation - human written, concise, typed, flexible",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/levn@0.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gkz/levn"
        },
        {
          "type": "vcs",
          "url": "git://github.com/gkz/levn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/levn@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/levn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/levn/package.json"
              }
            ],
            "concludedValue": "node_modules/levn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "kind-of",
      "version": "6.0.3",
      "description": "Get the native type of a value.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/kind-of@6.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/kind-of"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kind-of@6.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/kind-of/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/kind-of/package.json"
              }
            ],
            "concludedValue": "node_modules/kind-of/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jared Wray <me@jaredwray.com> (http://jaredwray.com)"
        }
      ],
      "group": "",
      "name": "keyv",
      "version": "4.5.4",
      "description": "Simple key-value storage with support for multiple backends",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/keyv@4.5.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jaredwray/keyv"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jaredwray/keyv.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/keyv@4.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/keyv/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/keyv/package.json"
              }
            ],
            "concludedValue": "node_modules/keyv/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Angus Croll"
        }
      ],
      "group": "",
      "name": "just-diff-apply",
      "version": "5.5.0",
      "description": "Apply a diff to an object. Optionally supports jsonPatch protocol",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/just-diff-apply@5.5.0",
      "type": "library",
      "bom-ref": "pkg:npm/just-diff-apply@5.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/just-diff-apply/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/just-diff-apply/package.json"
              }
            ],
            "concludedValue": "node_modules/just-diff-apply/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Angus Croll"
        }
      ],
      "group": "",
      "name": "just-diff",
      "version": "5.2.0",
      "description": "Return an object representing the diffs between two objects. Supports jsonPatch protocol",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/just-diff@5.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/just-diff@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/just-diff/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/just-diff/package.json"
              }
            ],
            "concludedValue": "node_modules/just-diff/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Max Ryan Synnott (https://github.com/maxsynnott/)"
        }
      ],
      "group": "",
      "name": "just-deep-map-values",
      "version": "1.2.0",
      "description": "Returns an object with values at all depths mapped according to the provided function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/just-deep-map-values@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/just-deep-map-values@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/just-deep-map-values/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/just-deep-map-values/package.json"
              }
            ],
            "concludedValue": "node_modules/just-deep-map-values/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "david@fmail.co.uk"
        }
      ],
      "group": "",
      "name": "jsonpath",
      "version": "1.3.0",
      "description": "Query JavaScript objects with JSONPath expressions. Robust / safe JSONPath engine for Node.js.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsonpath@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dchester/jsonpath"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonpath@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jsonpath/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jsonpath/package.json"
              }
            ],
            "concludedValue": "node_modules/jsonpath/package.json"
          }
        ]
      },
      "tags": [
        "jsonpath"
      ]
    },
    {
      "authors": [
        {
          "name": "Tim Caswell <tim@creationix.com>"
        }
      ],
      "group": "",
      "name": "jsonparse",
      "version": "1.3.1",
      "description": "This is a pure-js JSON streaming parser for node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsonparse@1.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/creationix/jsonparse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonparse@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jsonparse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jsonparse/package.json"
              }
            ],
            "concludedValue": "node_modules/jsonparse/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "JP Richardson <jprichardson@gmail.com>"
        }
      ],
      "group": "",
      "name": "jsonfile",
      "version": "6.2.1",
      "description": "Easily read/write JSON files.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsonfile@6.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@6.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jsonfile/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jsonfile/package.json"
              }
            ],
            "concludedValue": "node_modules/jsonfile/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "json-stringify-safe",
      "version": "5.0.1",
      "description": "Like JSON.stringify, but doesn't blow up on circular refs.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-stringify-safe@5.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/json-stringify-safe"
        },
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/json-stringify-safe"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-safe@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-stringify-safe/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-stringify-safe/package.json"
              }
            ],
            "concludedValue": "node_modules/json-stringify-safe/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "json-stringify-nice",
      "version": "1.1.4",
      "description": "Stringify an object sorting scalars before objects, and defaulting to 2-space indent",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-stringify-nice@1.1.4",
      "type": "library",
      "bom-ref": "pkg:npm/json-stringify-nice@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-stringify-nice/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-stringify-nice/package.json"
              }
            ],
            "concludedValue": "node_modules/json-stringify-nice/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "json-stable-stringify-without-jsonify",
      "version": "1.0.1",
      "description": "deterministic JSON.stringify() with custom sorting to get deterministic hashes from stringified results, with no public domain dependencies",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/samn/json-stable-stringify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/samn/json-stable-stringify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-stable-stringify-without-jsonify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-stable-stringify-without-jsonify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-stable-stringify-without-jsonify/package.json"
              }
            ],
            "concludedValue": "node_modules/json-stable-stringify-without-jsonify/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "json-schema-traverse",
      "version": "1.0.0",
      "description": "Traverse JSON Schema passing each schema object to callback",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/json-schema-traverse#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/epoberezkin/json-schema-traverse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-schema-traverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-schema-traverse/package.json"
              }
            ],
            "concludedValue": "node_modules/json-schema-traverse/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "json-parse-even-better-errors",
      "version": "3.0.2",
      "description": "JSON.parse with context information on error",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-parse-even-better-errors@3.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/json-parse-even-better-errors.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-parse-even-better-errors@3.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-parse-even-better-errors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-parse-even-better-errors/package.json"
              }
            ],
            "concludedValue": "node_modules/json-parse-even-better-errors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (http://dominictarr.com)"
        }
      ],
      "group": "",
      "name": "json-buffer",
      "version": "3.0.1",
      "description": "JSON parse & stringify that supports binary via bops & base64",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-buffer@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/dominictarr/json-buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/dominictarr/json-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-buffer@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/json-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/json-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/json-buffer/package.json"
          }
        ]
      },
      "tags": [
        "binary",
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "jsesc",
      "version": "3.1.0",
      "description": "Given some data, jsesc returns the shortest possible stringified & ASCII-safe representation of that data.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jsesc@3.1.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/jsesc"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/jsesc.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsesc@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jsesc/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jsesc/package.json"
              }
            ],
            "concludedValue": "node_modules/jsesc/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Vladimir Zapparov <dervus.grim@gmail.com>"
        }
      ],
      "group": "",
      "name": "js-yaml",
      "version": "4.3.2",
      "description": "YAML 1.2 parser and serializer",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-yaml@4.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@4.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/js-yaml/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/js-yaml/package.json"
              }
            ],
            "concludedValue": "node_modules/js-yaml/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me>"
        }
      ],
      "group": "",
      "name": "jackspeak",
      "version": "1.4.2",
      "description": "A very strict and proper argument parser.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/jackspeak@1.4.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/jackspeak.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jackspeak@1.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/jackspeak/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/jackspeak/package.json"
              }
            ],
            "concludedValue": "node_modules/jackspeak/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Krishnan Anantheswaran <kananthmail-github@yahoo.com>"
        }
      ],
      "group": "",
      "name": "istanbul-reports",
      "version": "3.2.0",
      "description": "istanbul reports",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-reports@3.2.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://istanbul.js.org/"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-reports@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/istanbul-reports/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/istanbul-reports/package.json"
              }
            ],
            "concludedValue": "node_modules/istanbul-reports/package.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Krishnan Anantheswaran <kananthmail-github@yahoo.com>"
        }
      ],
      "group": "",
      "name": "istanbul-lib-source-maps",
      "version": "4.0.1",
      "description": "Source maps support for istanbul",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-source-maps@4.0.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://istanbul.js.org/"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-source-maps@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/istanbul-lib-source-maps/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/istanbul-lib-source-maps/package.json"
              }
            ],
            "concludedValue": "node_modules/istanbul-lib-source-maps/package.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Krishnan Anantheswaran <kananthmail-github@yahoo.com>"
        }
      ],
      "group": "",
      "name": "istanbul-lib-report",
      "version": "3.0.1",
      "description": "Base reporting library for istanbul",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-report@3.0.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://istanbul.js.org/"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-report@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/istanbul-lib-report/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/istanbul-lib-report/package.json"
              }
            ],
            "concludedValue": "node_modules/istanbul-lib-report/package.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "make-dir",
      "version": "4.0.0",
      "description": "Make a directory and its parents if needed - Think `mkdir -p`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/make-dir@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/make-dir@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/istanbul-lib-report/node_modules/make-dir/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/istanbul-lib-report/node_modules/make-dir/package.json"
              }
            ],
            "concludedValue": "node_modules/istanbul-lib-report/node_modules/make-dir/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "istanbul-lib-processinfo",
      "version": "2.0.3",
      "description": "A utility for managing the `processinfo` folder that NYC uses.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-processinfo@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/istanbuljs/istanbul-lib-processinfo.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-processinfo@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/istanbul-lib-processinfo/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/istanbul-lib-processinfo/package.json"
              }
            ],
            "concludedValue": "node_modules/istanbul-lib-processinfo/package.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Krishnan Anantheswaran <kananthmail-github@yahoo.com>"
        }
      ],
      "group": "",
      "name": "istanbul-lib-instrument",
      "version": "4.0.3",
      "description": "Core istanbul API for JS code coverage",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-instrument@4.0.3",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://istanbul.js.org/"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-instrument@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/istanbul-lib-instrument/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/istanbul-lib-instrument/package.json"
              }
            ],
            "concludedValue": "node_modules/istanbul-lib-instrument/package.json"
          }
        ]
      },
      "tags": [
        "api",
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Krishnan Anantheswaran <kananthmail-github@yahoo.com>"
        }
      ],
      "group": "",
      "name": "istanbul-lib-hook",
      "version": "3.0.0",
      "description": "Hooks for require, vm and script used in istanbul",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-hook@3.0.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://istanbul.js.org/"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-hook@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/istanbul-lib-hook/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/istanbul-lib-hook/package.json"
              }
            ],
            "concludedValue": "node_modules/istanbul-lib-hook/package.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Krishnan Anantheswaran <kananthmail-github@yahoo.com>"
        }
      ],
      "group": "",
      "name": "istanbul-lib-coverage",
      "version": "3.2.2",
      "description": "Data library for istanbul coverage objects",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/istanbul-lib-coverage@3.2.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://istanbul.js.org/"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/istanbuljs/istanbuljs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/istanbul-lib-coverage@3.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/istanbul-lib-coverage/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/istanbul-lib-coverage/package.json"
              }
            ],
            "concludedValue": "node_modules/istanbul-lib-coverage/package.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "isexe",
      "version": "2.0.0",
      "description": "Minimal module to check if a file is executable.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isexe@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/isexe#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/isexe.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isexe@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/isexe/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/isexe/package.json"
              }
            ],
            "concludedValue": "node_modules/isexe/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "isarray",
      "version": "2.0.5",
      "description": "Array#isArray for older browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isarray@2.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/isarray"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/isarray.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/isarray/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/isarray/package.json"
              }
            ],
            "concludedValue": "node_modules/isarray/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-windows",
      "version": "1.0.2",
      "description": "Returns true if the platform is windows. UMD module, works with node.js, commonjs, browser, AMD, electron, etc.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-windows@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-windows"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-windows@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-windows/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-windows/package.json"
              }
            ],
            "concludedValue": "node_modules/is-windows/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-weakset",
      "version": "2.0.4",
      "description": "Is this value a JS WeakSet? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-weakset@2.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-weakset#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-weakset.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-weakset@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-weakset/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-weakset/package.json"
              }
            ],
            "concludedValue": "node_modules/is-weakset/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-weakref",
      "version": "1.1.1",
      "description": "Is this value a JS WeakRef? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-weakref@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-weakref#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-weakref.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-weakref@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-weakref/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-weakref/package.json"
              }
            ],
            "concludedValue": "node_modules/is-weakref/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-weakmap",
      "version": "2.0.2",
      "description": "Is this value a JS WeakMap? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-weakmap@2.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-weakmap#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-weakmap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-weakmap@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-weakmap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-weakmap/package.json"
              }
            ],
            "concludedValue": "node_modules/is-weakmap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Hugh Kennedy <hughskennedy@gmail.com> (http://hughsk.io/)"
        }
      ],
      "group": "",
      "name": "is-typedarray",
      "version": "1.0.0",
      "description": "Detect whether or not an object is a Typed Array",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-typedarray@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/hughsk/is-typedarray"
        },
        {
          "type": "vcs",
          "url": "git://github.com/hughsk/is-typedarray.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-typedarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-typedarray/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-typedarray/package.json"
              }
            ],
            "concludedValue": "node_modules/is-typedarray/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "is-typed-array",
      "version": "1.1.15",
      "description": "Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-typed-array@1.1.15",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/is-typed-array.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-typed-array@1.1.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-typed-array/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-typed-array/package.json"
              }
            ],
            "concludedValue": "node_modules/is-typed-array/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-text-path",
      "version": "1.0.1",
      "description": "Check if a filepath is a text file",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-text-path@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-text-path@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-text-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-text-path/package.json"
              }
            ],
            "concludedValue": "node_modules/is-text-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-symbol",
      "version": "1.1.1",
      "description": "Determine if a value is an ES6 Symbol or not.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-symbol@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/is-symbol.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-symbol@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-symbol/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-symbol/package.json"
              }
            ],
            "concludedValue": "node_modules/is-symbol/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-string",
      "version": "1.1.1",
      "description": "Is this value a JS String object or primitive? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-string@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/is-string.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-string@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-string/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-string/package.json"
              }
            ],
            "concludedValue": "node_modules/is-string/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-stream",
      "version": "2.0.1",
      "description": "Check if something is a Node.js stream",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-stream@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/is-stream/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "is-shared-array-buffer",
      "version": "1.0.4",
      "description": "Is this value a JS SharedArrayBuffer?",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-shared-array-buffer@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-shared-array-buffer#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-shared-array-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-shared-array-buffer@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-shared-array-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-shared-array-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/is-shared-array-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-set",
      "version": "2.0.3",
      "description": "Is this value a JS Set? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-set@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-set#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-set.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-set@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-set/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-set/package.json"
              }
            ],
            "concludedValue": "node_modules/is-set/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-regex",
      "version": "1.2.1",
      "description": "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-regex@1.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-regex"
        },
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/is-regex.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-regex@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/is-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-plain-object",
      "version": "5.1.0",
      "description": "Returns true if an object was created by the `Object` constructor, or Object.create(null).",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-plain-object@5.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-plain-object"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-object@5.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-plain-object/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-plain-object/package.json"
              }
            ],
            "concludedValue": "node_modules/is-plain-object/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-plain-obj",
      "version": "1.1.0",
      "description": "Check if a value is a plain object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-plain-obj@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-plain-obj@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-plain-obj/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-plain-obj/package.json"
              }
            ],
            "concludedValue": "node_modules/is-plain-obj/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-path-inside",
      "version": "3.0.3",
      "description": "Check if a path is inside another path",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-path-inside@3.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/is-path-inside@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-path-inside/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-path-inside/package.json"
              }
            ],
            "concludedValue": "node_modules/is-path-inside/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-obj",
      "version": "2.0.0",
      "description": "Check if a value is an object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-obj@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-obj@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-obj/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-obj/package.json"
              }
            ],
            "concludedValue": "node_modules/is-obj/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-number-object",
      "version": "1.1.1",
      "description": "Is this value a JS Number object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-number-object@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-number-object#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/is-number-object.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number-object@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-number-object/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-number-object/package.json"
              }
            ],
            "concludedValue": "node_modules/is-number-object/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-number",
      "version": "7.0.0",
      "description": "Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-number@7.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-number"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-number@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-number/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-number/package.json"
              }
            ],
            "concludedValue": "node_modules/is-number/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-negative-zero",
      "version": "2.0.3",
      "description": "Is this value negative zero? === will lie to you",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-negative-zero@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-negative-zero"
        },
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/is-negative-zero.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-negative-zero@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-negative-zero/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-negative-zero/package.json"
              }
            ],
            "concludedValue": "node_modules/is-negative-zero/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-map",
      "version": "2.0.3",
      "description": "Is this value a JS Map? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-map@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-map#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-map@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-map/package.json"
              }
            ],
            "concludedValue": "node_modules/is-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thomas Watson Steen <w@tson.dk> (https://twitter.com/wa7son)"
        }
      ],
      "group": "",
      "name": "is-lambda",
      "version": "1.0.1",
      "description": "Detect if your code is running on an AWS Lambda server",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-lambda@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/watson/is-lambda"
        },
        {
          "type": "vcs",
          "url": "https://github.com/watson/is-lambda.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-lambda@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-lambda/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-lambda/package.json"
              }
            ],
            "concludedValue": "node_modules/is-lambda/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-glob",
      "version": "4.0.3",
      "description": "Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-glob@4.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/is-glob"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-glob@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-glob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-glob/package.json"
              }
            ],
            "concludedValue": "node_modules/is-glob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-generator-function",
      "version": "1.1.2",
      "description": "Determine if a function is a native generator function.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-generator-function@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/is-generator-function.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-generator-function@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-generator-function/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-generator-function/package.json"
              }
            ],
            "concludedValue": "node_modules/is-generator-function/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-finalizationregistry",
      "version": "1.1.1",
      "description": "Is this value a JS FinalizationRegistry? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-finalizationregistry@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-finalizationregistry#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-finalizationregistry.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-finalizationregistry@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-finalizationregistry/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-finalizationregistry/package.json"
              }
            ],
            "concludedValue": "node_modules/is-finalizationregistry/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "is-extglob",
      "version": "2.1.1",
      "description": "Returns true if a string has an extglob.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-extglob@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/is-extglob"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-extglob@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-extglob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-extglob/package.json"
              }
            ],
            "concludedValue": "node_modules/is-extglob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-document.all",
      "version": "1.0.0",
      "description": "Is this value `document.all`, i.e. an object with the [[IsHTMLDDA]] internal slot?",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-document.all@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-document.all#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-document.all.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-document.all@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-document.all/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-document.all/package.json"
              }
            ],
            "concludedValue": "node_modules/is-document.all/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband"
        }
      ],
      "group": "",
      "name": "is-date-object",
      "version": "1.1.0",
      "description": "Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-date-object@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/is-date-object.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-date-object@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-date-object/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-date-object/package.json"
              }
            ],
            "concludedValue": "node_modules/is-date-object/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-data-view",
      "version": "1.0.2",
      "description": "Is this value a JS DataView? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-data-view@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-data-view#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-data-view.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-data-view@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-data-view/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-data-view/package.json"
              }
            ],
            "concludedValue": "node_modules/is-data-view/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-core-module",
      "version": "2.16.2",
      "description": "Is this specifier a node.js core module?",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-core-module@2.16.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-core-module"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-core-module.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-core-module@2.16.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-core-module/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-core-module/package.json"
              }
            ],
            "concludedValue": "node_modules/is-core-module/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "is-callable",
      "version": "1.2.7",
      "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-callable@1.2.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/is-callable.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-callable@1.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-callable/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-callable/package.json"
              }
            ],
            "concludedValue": "node_modules/is-callable/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-boolean-object",
      "version": "1.2.2",
      "description": "Is this value a JS Boolean? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-boolean-object@1.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/is-boolean-object.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-boolean-object@1.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-boolean-object/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-boolean-object/package.json"
              }
            ],
            "concludedValue": "node_modules/is-boolean-object/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-binary-path",
      "version": "2.1.0",
      "description": "Check if a file path is a binary file",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-binary-path@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-binary-path@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-binary-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-binary-path/package.json"
              }
            ],
            "concludedValue": "node_modules/is-binary-path/package.json"
          }
        ]
      },
      "tags": [
        "binary"
      ]
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-bigint",
      "version": "1.1.0",
      "description": "Is this value an ES BigInt?",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-bigint@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-bigint#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-bigint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-bigint@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-bigint/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-bigint/package.json"
              }
            ],
            "concludedValue": "node_modules/is-bigint/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-async-function",
      "version": "2.1.1",
      "description": "Determine if a function is a native async function.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-async-function@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/is-async-function.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-async-function@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-async-function/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-async-function/package.json"
              }
            ],
            "concludedValue": "node_modules/is-async-function/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Qix (http://github.com/qix-)"
        }
      ],
      "group": "",
      "name": "is-arrayish",
      "version": "0.2.1",
      "description": "Determines if an object can be used as an array",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-arrayish@0.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/qix-/node-is-arrayish.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-arrayish@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-arrayish/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-arrayish/package.json"
              }
            ],
            "concludedValue": "node_modules/is-arrayish/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "is-array-buffer",
      "version": "3.0.5",
      "description": "Is this value a JS ArrayBuffer?",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-array-buffer@3.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/is-array-buffer#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/is-array-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-array-buffer@3.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/is-array-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/is-array-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/is-array-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Beau Gunderson <beau@beaugunderson.com> (https://beaugunderson.com/)"
        }
      ],
      "group": "",
      "name": "ip-address",
      "version": "10.7.0",
      "description": "A library for parsing IPv4 and IPv6 IP addresses in node and the browser.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ip-address@10.7.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/beaugunderson/ip-address.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ip-address@10.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ip-address/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ip-address/package.json"
              }
            ],
            "concludedValue": "node_modules/ip-address/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "internal-slot",
      "version": "1.1.0",
      "description": "ES spec-like internal slots",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/internal-slot@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/internal-slot#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/internal-slot.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/internal-slot@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/internal-slot/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/internal-slot/package.json"
              }
            ],
            "concludedValue": "node_modules/internal-slot/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "ini",
      "version": "3.0.1",
      "description": "An ini encoder/decoder for node",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ini@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/ini.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ini@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ini/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ini/package.json"
              }
            ],
            "concludedValue": "node_modules/ini/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "infer-owner",
      "version": "1.0.4",
      "description": "Infer the owner of a path based on the owner of its nearest existing parent",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/infer-owner@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/infer-owner@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/infer-owner/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/infer-owner/package.json"
              }
            ],
            "concludedValue": "node_modules/infer-owner/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jens Taylor <jensyt@gmail.com> (https://github.com/homebrewing)"
        }
      ],
      "group": "",
      "name": "imurmurhash",
      "version": "0.1.4",
      "description": "An incremental implementation of MurmurHash3",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/imurmurhash@0.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jensyt/imurmurhash-js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/jensyt/imurmurhash-js"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/imurmurhash@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/imurmurhash/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/imurmurhash/package.json"
              }
            ],
            "concludedValue": "node_modules/imurmurhash/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "import-fresh",
      "version": "3.3.1",
      "description": "Import a module while bypassing the cache",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/import-fresh@3.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/import-fresh@3.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/import-fresh/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/import-fresh/package.json"
              }
            ],
            "concludedValue": "node_modules/import-fresh/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "resolve-from",
      "version": "4.0.0",
      "description": "Resolve the path of a module like `require.resolve()` but from a given path",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/resolve-from@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/resolve-from@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/import-fresh/node_modules/resolve-from/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/import-fresh/node_modules/resolve-from/package.json"
              }
            ],
            "concludedValue": "node_modules/import-fresh/node_modules/resolve-from/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "ignore-walk",
      "version": "6.0.5",
      "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ignore-walk@6.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/ignore-walk.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ignore-walk@6.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ignore-walk/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ignore-walk/package.json"
              }
            ],
            "concludedValue": "node_modules/ignore-walk/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "kael"
        }
      ],
      "group": "",
      "name": "ignore",
      "version": "5.3.2",
      "description": "Ignore is a manager and filter for .gitignore rules, the one used by eslint, gitbook and many others.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ignore@5.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/ignore@5.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ignore/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ignore/package.json"
              }
            ],
            "concludedValue": "node_modules/ignore/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alexander Shtuchkin <ashtuchkin@gmail.com>"
        }
      ],
      "group": "",
      "name": "iconv-lite",
      "version": "0.6.3",
      "description": "Convert character encodings in pure javascript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.6.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ashtuchkin/iconv-lite"
        },
        {
          "type": "vcs",
          "url": "git://github.com/ashtuchkin/iconv-lite.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.6.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/iconv-lite/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/iconv-lite/package.json"
              }
            ],
            "concludedValue": "node_modules/iconv-lite/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "dead-horse <dead_horse@qq.com> (http://deadhorse.me)"
        }
      ],
      "group": "",
      "name": "humanize-ms",
      "version": "1.2.1",
      "description": "transform humanize time to ms",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/humanize-ms@1.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/node-modules/humanize-ms"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/humanize-ms@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/humanize-ms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/humanize-ms/package.json"
              }
            ],
            "concludedValue": "node_modules/humanize-ms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "ehmicky <ehmicky@gmail.com> (https://github.com/ehmicky)"
        }
      ],
      "group": "",
      "name": "human-signals",
      "version": "2.1.0",
      "description": "Human-friendly process signals",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/human-signals@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://git.io/JeluP"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/human-signals@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/human-signals/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/human-signals/package.json"
              }
            ],
            "concludedValue": "node_modules/human-signals/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)"
        }
      ],
      "group": "",
      "name": "https-proxy-agent",
      "version": "5.0.1",
      "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/https-proxy-agent@5.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/TooTallNate/node-https-proxy-agent.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/https-proxy-agent@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/https-proxy-agent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/https-proxy-agent/package.json"
              }
            ],
            "concludedValue": "node_modules/https-proxy-agent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)"
        }
      ],
      "group": "",
      "name": "http-proxy-agent",
      "version": "5.0.0",
      "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-proxy-agent@5.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/TooTallNate/node-http-proxy-agent.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-proxy-agent@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/http-proxy-agent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/http-proxy-agent/package.json"
              }
            ],
            "concludedValue": "node_modules/http-proxy-agent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kornel Lesiński <npms2@geekhood.net> (https://kornel.ski/)"
        }
      ],
      "group": "",
      "name": "http-cache-semantics",
      "version": "4.2.0",
      "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/http-cache-semantics@4.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/kornelski/http-cache-semantics.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/http-cache-semantics@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/http-cache-semantics/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/http-cache-semantics/package.json"
              }
            ],
            "concludedValue": "node_modules/http-cache-semantics/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrea Giammarchi"
        }
      ],
      "group": "",
      "name": "html-escaper",
      "version": "2.0.2",
      "description": "fast and safe way to escape and unescape &<>'\" chars",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/html-escaper@2.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/WebReflection/html-escaper"
        },
        {
          "type": "vcs",
          "url": "https://github.com/WebReflection/html-escaper.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/html-escaper@2.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/html-escaper/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/html-escaper/package.json"
              }
            ],
            "concludedValue": "node_modules/html-escaper/package.json"
          }
        ]
      },
      "tags": [
        "escape",
        "unescape"
      ]
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "hosted-git-info",
      "version": "6.1.3",
      "description": "Provides metadata and conversions from repository urls for GitHub, Bitbucket and GitLab",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hosted-git-info@6.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/hosted-git-info"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/hosted-git-info.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hosted-git-info@6.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hosted-git-info/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hosted-git-info/package.json"
              }
            ],
            "concludedValue": "node_modules/hosted-git-info/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "he",
      "version": "1.2.0",
      "description": "A robust HTML entities encoder/decoder with full Unicode support.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/he@1.2.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/he"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/he.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/he@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/he/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/he/package.json"
              }
            ],
            "concludedValue": "node_modules/he/package.json"
          }
        ]
      },
      "tags": [
        "html"
      ]
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "hasown",
      "version": "2.0.4",
      "description": "A robust, ES3 compatible, \"has own property\" predicate.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hasown@2.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/hasOwn#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/hasOwn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/hasown@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hasown/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hasown/package.json"
              }
            ],
            "concludedValue": "node_modules/hasown/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "hasha",
      "version": "5.2.2",
      "description": "Hashing made simple. Get the hash of a buffer/string/stream/file.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hasha@5.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/hasha@5.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hasha/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hasha/package.json"
              }
            ],
            "concludedValue": "node_modules/hasha/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org>"
        }
      ],
      "group": "",
      "name": "has-unicode",
      "version": "2.0.1",
      "description": "Try to guess if your terminal supports unicode",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-unicode@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/iarna/has-unicode"
        },
        {
          "type": "vcs",
          "url": "https://github.com/iarna/has-unicode"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-unicode@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-unicode/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-unicode/package.json"
              }
            ],
            "concludedValue": "node_modules/has-unicode/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "has-tostringtag",
      "version": "1.0.2",
      "description": "Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-tostringtag@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/has-tostringtag#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/has-tostringtag.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-tostringtag@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-tostringtag/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-tostringtag/package.json"
              }
            ],
            "concludedValue": "node_modules/has-tostringtag/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "has-symbols",
      "version": "1.1.0",
      "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-symbols@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/has-symbols#readme"
        },
        {
          "type": "vcs",
          "url": "git://github.com/inspect-js/has-symbols.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-symbols@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-symbols/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-symbols/package.json"
              }
            ],
            "concludedValue": "node_modules/has-symbols/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "has-proto",
      "version": "1.2.0",
      "description": "Does this environment have the ability to get the [[Prototype]] of an object on creation with `__proto__`?",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-proto@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/has-proto#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/has-proto.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-proto@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-proto/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-proto/package.json"
              }
            ],
            "concludedValue": "node_modules/has-proto/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "has-property-descriptors",
      "version": "1.0.2",
      "description": "Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-property-descriptors@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/has-property-descriptors#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/has-property-descriptors.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-property-descriptors@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-property-descriptors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-property-descriptors/package.json"
              }
            ],
            "concludedValue": "node_modules/has-property-descriptors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "has-bigints",
      "version": "1.1.0",
      "description": "Determine if the JS environment has BigInt support.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/has-bigints@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/has-bigints#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/has-bigints.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/has-bigints@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/has-bigints/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/has-bigints/package.json"
              }
            ],
            "concludedValue": "node_modules/has-bigints/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "hard-rejection",
      "version": "2.1.0",
      "description": "Make unhandled promise rejections fail hard right away instead of the default silent fail",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/hard-rejection@2.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/hard-rejection@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/hard-rejection/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/hard-rejection/package.json"
              }
            ],
            "concludedValue": "node_modules/hard-rejection/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Yehuda Katz"
        }
      ],
      "group": "",
      "name": "handlebars",
      "version": "4.7.9",
      "description": "Handlebars provides the power necessary to let you build semantic templates effectively with no frustration",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/handlebars@4.7.9",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://handlebarsjs.com/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/handlebars-lang/handlebars.js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/handlebars@4.7.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/handlebars/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/handlebars/package.json"
              }
            ],
            "concludedValue": "node_modules/handlebars/package.json"
          }
        ]
      },
      "tags": [
        "templates"
      ]
    },
    {
      "authors": [
        {
          "name": "Matt Davies <matt@filament.so> (https://github.com/mattpauldavies)"
        }
      ],
      "group": "",
      "name": "graphemer",
      "version": "1.4.0",
      "description": "A JavaScript library that breaks strings into their individual user-perceived characters (including emojis!)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graphemer@1.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/flmnt/graphemer"
        },
        {
          "type": "vcs",
          "url": "https://github.com/flmnt/graphemer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graphemer@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/graphemer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/graphemer/package.json"
              }
            ],
            "concludedValue": "node_modules/graphemer/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.11",
      "description": "A drop-in replacement for fs, making various improvements.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/node-graceful-fs"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/graceful-fs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/graceful-fs/package.json"
              }
            ],
            "concludedValue": "node_modules/graceful-fs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "gopd",
      "version": "1.2.0",
      "description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gopd@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/gopd#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/gopd.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gopd@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/gopd/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/gopd/package.json"
              }
            ],
            "concludedValue": "node_modules/gopd/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "globalthis",
      "version": "1.0.4",
      "description": "ECMAScript spec-compliant polyfill/shim for `globalThis`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globalthis@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/System.global.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globalthis@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/globalthis/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/globalthis/package.json"
              }
            ],
            "concludedValue": "node_modules/globalthis/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "globals",
      "version": "13.24.0",
      "description": "Global identifiers from different JavaScript environments",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/globals@13.24.0",
      "type": "library",
      "bom-ref": "pkg:npm/globals@13.24.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/globals/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/globals/package.json"
              }
            ],
            "concludedValue": "node_modules/globals/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "global-dirs",
      "version": "0.1.1",
      "description": "Get the directory of globally installed packages and binaries",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/global-dirs@0.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/global-dirs@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/global-dirs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/global-dirs/package.json"
              }
            ],
            "concludedValue": "node_modules/global-dirs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "ini",
      "version": "1.3.8",
      "description": "An ini encoder/decoder for node",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ini@1.3.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/ini.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ini@1.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/global-dirs/node_modules/ini/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/global-dirs/node_modules/ini/package.json"
              }
            ],
            "concludedValue": "node_modules/global-dirs/node_modules/ini/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Gulp Team <team@gulpjs.com> (https://gulpjs.com/)"
        }
      ],
      "group": "",
      "name": "glob-parent",
      "version": "6.0.2",
      "description": "Extract the non-magic parent path from a glob string.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob-parent@6.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/glob-parent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/glob-parent/package.json"
              }
            ],
            "concludedValue": "node_modules/glob-parent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "glob",
      "version": "8.1.0",
      "description": "a little globber",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@8.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/node-glob.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@8.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/glob/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/glob/package.json"
              }
            ],
            "concludedValue": "node_modules/glob/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "minimatch",
      "version": "5.1.9",
      "description": "a glob matcher in javascript",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@5.1.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/minimatch.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@5.1.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/glob/node_modules/minimatch/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@google-automations/git-file-utils/node_modules/minimatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@google-automations/git-file-utils/node_modules/minimatch/package.json"
              }
            ],
            "concludedValue": "node_modules/@google-automations/git-file-utils/node_modules/minimatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Steve Mao <maochenyan@gmail.com> (https://github.com/stevemao)"
        }
      ],
      "group": "",
      "name": "git-raw-commits",
      "version": "2.0.11",
      "description": "Get raw git commits out of your repository using git-log(1)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/git-raw-commits@2.0.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/git-raw-commits#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/conventional-changelog.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/git-raw-commits@2.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/git-raw-commits/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/git-raw-commits/package.json"
              }
            ],
            "concludedValue": "node_modules/git-raw-commits/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "get-symbol-description",
      "version": "1.1.0",
      "description": "Gets the description of a Symbol. Handles `Symbol()` vs `Symbol('')` properly when possible.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-symbol-description@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/get-symbol-description#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/get-symbol-description.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-symbol-description@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/get-symbol-description/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/get-symbol-description/package.json"
              }
            ],
            "concludedValue": "node_modules/get-symbol-description/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "get-stream",
      "version": "6.0.1",
      "description": "Get a stream as a string, buffer, or array",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-stream@6.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/get-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/get-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/get-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "get-proto",
      "version": "1.0.1",
      "description": "Robustly get the [[Prototype]] of an object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-proto@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/get-proto#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/get-proto.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-proto@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/get-proto/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/get-proto/package.json"
              }
            ],
            "concludedValue": "node_modules/get-proto/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Corey Farrell"
        }
      ],
      "group": "",
      "name": "get-package-type",
      "version": "0.1.0",
      "description": "Determine the `package.json#type` which applies to a location",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-package-type@0.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/cfware/get-package-type#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/cfware/get-package-type.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-package-type@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/get-package-type/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/get-package-type/package.json"
              }
            ],
            "concludedValue": "node_modules/get-package-type/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "get-intrinsic",
      "version": "1.3.0",
      "description": "Get and robustly cache all JS language-level intrinsics at first require time",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-intrinsic@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/get-intrinsic#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/get-intrinsic.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-intrinsic@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/get-intrinsic/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/get-intrinsic/package.json"
              }
            ],
            "concludedValue": "node_modules/get-intrinsic/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Stefan Penner"
        }
      ],
      "group": "",
      "name": "get-caller-file",
      "version": "2.0.5",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/get-caller-file@2.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/stefanpenner/get-caller-file#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/stefanpenner/get-caller-file.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-caller-file@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/get-caller-file/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/get-caller-file/package.json"
              }
            ],
            "concludedValue": "node_modules/get-caller-file/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harbamd <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "generator-function",
      "version": "2.0.1",
      "description": "A function that returns the normally hidden `GeneratorFunction` constructor",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/generator-function@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/TimothyGu/generator-function#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/TimothyGu/generator-function.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/generator-function@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/generator-function/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/generator-function/package.json"
              }
            ],
            "concludedValue": "node_modules/generator-function/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "gauge",
      "version": "5.0.2",
      "description": "A terminal based horizontal gauge",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gauge@5.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/gauge"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/gauge.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gauge@5.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/gauge/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/gauge/package.json"
              }
            ],
            "concludedValue": "node_modules/gauge/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "functions-have-names",
      "version": "1.2.3",
      "description": "Does this JS environment support the `name` property on functions?",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/functions-have-names@1.2.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/functions-have-names#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/functions-have-names.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/functions-have-names@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/functions-have-names/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/functions-have-names/package.json"
              }
            ],
            "concludedValue": "node_modules/functions-have-names/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "function.prototype.name",
      "version": "1.2.0",
      "description": "An ES2015 spec-compliant `Function.prototype.name` shim",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/function.prototype.name@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/Function.prototype.name.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function.prototype.name@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/function.prototype.name/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/function.prototype.name/package.json"
              }
            ],
            "concludedValue": "node_modules/function.prototype.name/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "function-loop",
      "version": "2.0.1",
      "description": "Run a list of functions in order in a given object context.  The functions can be callback-taking or promise-returning.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/function-loop@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/function-loop#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/function-loop.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-loop@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/function-loop/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/function-loop/package.json"
              }
            ],
            "concludedValue": "node_modules/function-loop/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "function-bind",
      "version": "1.1.2",
      "description": "Implementation of Function.prototype.bind",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/function-bind@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/function-bind"
        },
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/function-bind.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/function-bind@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/function-bind/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/function-bind/package.json"
              }
            ],
            "concludedValue": "node_modules/function-bind/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "fs-minipass",
      "version": "2.1.0",
      "description": "fs read and write streams based on minipass",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fs-minipass@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/fs-minipass#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/fs-minipass.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-minipass@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fs-minipass/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "fs-minipass"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fs-minipass/package.json"
              }
            ],
            "concludedValue": "node_modules/fs-minipass/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/create.js",
            "line": 7
          },
          {
            "location": "lib/extract.js",
            "line": 7
          },
          {
            "location": "lib/list.js",
            "line": 10
          },
          {
            "location": "lib/replace.js",
            "line": 7
          },
          {
            "location": "lib/unpack.js",
            "line": 12
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "JP Richardson <jprichardson@gmail.com>"
        }
      ],
      "group": "",
      "name": "fs-extra",
      "version": "11.4.0",
      "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as recursive mkdir, copy, and remove.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fs-extra@11.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jprichardson/node-fs-extra"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jprichardson/node-fs-extra.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@11.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fs-extra/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fs-extra/package.json"
              }
            ],
            "concludedValue": "node_modules/fs-extra/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "fs-exists-cached",
      "version": "1.0.0",
      "description": "Just like `fs.exists` and `fs.existsSync`, but cached",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fs-exists-cached@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/fs-exists-cached#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/fs-exists-cached.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-exists-cached@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fs-exists-cached/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fs-exists-cached/package.json"
              }
            ],
            "concludedValue": "node_modules/fs-exists-cached/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)"
        }
      ],
      "group": "",
      "name": "fromentries",
      "version": "1.3.2",
      "description": "Object.fromEntries() ponyfill (in 6 lines)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fromentries@1.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/fromentries"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/fromentries.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fromentries@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fromentries/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fromentries/package.json"
              }
            ],
            "concludedValue": "node_modules/fromentries/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "foreground-child",
      "version": "2.0.0",
      "description": "Run a child as if it's the foreground process.  Give it stdio.  Exit when it exits.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/foreground-child@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tapjs/foreground-child#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/tapjs/foreground-child.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/foreground-child@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/foreground-child/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/foreground-child/package.json"
              }
            ],
            "concludedValue": "node_modules/foreground-child/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "for-each",
      "version": "0.3.5",
      "description": "A better forEach",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/for-each@0.3.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/for-each"
        },
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/for-each.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/for-each@0.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/for-each/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/for-each/package.json"
              }
            ],
            "concludedValue": "node_modules/for-each/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrea Giammarchi"
        }
      ],
      "group": "",
      "name": "flatted",
      "version": "3.4.4",
      "description": "A super light and fast circular JSON parser.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/flatted@3.4.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/WebReflection/flatted#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/WebReflection/flatted.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/flatted@3.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/flatted/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/flatted/package.json"
              }
            ],
            "concludedValue": "node_modules/flatted/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Jared Wray (https://jaredwray.com)"
        }
      ],
      "group": "",
      "name": "flat-cache",
      "version": "3.2.0",
      "description": "A stupidly simple key/value storage using files to persist some data",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/flat-cache@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/flat-cache@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/flat-cache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/flat-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/flat-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "findit",
      "version": "2.0.0",
      "description": "walk a directory tree recursively with events",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/findit@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/node-findit.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/findit@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/findit/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/findit/package.json"
              }
            ],
            "concludedValue": "node_modules/findit/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "find-up",
      "version": "5.0.0",
      "description": "Find a file or directory by walking up parent directories",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/find-up@5.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/find-up@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/find-up/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/find-up/package.json"
              }
            ],
            "concludedValue": "node_modules/find-up/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "fill-range",
      "version": "7.1.1",
      "description": "Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fill-range@7.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jonschlinkert/fill-range"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fill-range@7.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fill-range/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fill-range/package.json"
              }
            ],
            "concludedValue": "node_modules/fill-range/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Roy Riojas (http://royriojas.com)"
        }
      ],
      "group": "",
      "name": "file-entry-cache",
      "version": "6.0.1",
      "description": "Super simple cache for file metadata, useful for process that work o a given series of files and that only need to repeat the job on the changed ones since the previous run of the process",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/file-entry-cache@6.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/file-entry-cache@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/file-entry-cache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/file-entry-cache/package.json"
              }
            ],
            "concludedValue": "node_modules/file-entry-cache/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "figures",
      "version": "3.2.0",
      "description": "Unicode symbols with Windows CMD fallbacks",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/figures@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/figures@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/figures/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/figures/package.json"
              }
            ],
            "concludedValue": "node_modules/figures/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Matteo Collina <hello@matteocollina.com>"
        }
      ],
      "group": "",
      "name": "fastq",
      "version": "1.20.3",
      "description": "Fast, in memory work queue",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fastq@1.20.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mcollina/fastq#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mcollina/fastq.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fastq@1.20.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fastq/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fastq/package.json"
              }
            ],
            "concludedValue": "node_modules/fastq/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Vincent Le Goff <vince.legoff@gmail.com> (https://github.com/zekth)"
        }
      ],
      "group": "",
      "name": "fast-uri",
      "version": "3.1.6",
      "description": "Dependency-free RFC 3986 URI toolbox",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-uri@3.1.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/fastify/fast-uri"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/fastify/fast-uri.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-uri@3.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-uri/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-uri/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-uri/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "benchmark",
      "version": "1.0.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/benchmark@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/benchmark@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-uri/benchmark/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-uri/benchmark/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-uri/benchmark/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ramesh Nair <ram@hiddentao.com> (http://www.hiddentao.com/)"
        }
      ],
      "group": "",
      "name": "fast-levenshtein",
      "version": "2.0.6",
      "description": "Efficient implementation of Levenshtein algorithm  with locale-specific collator support.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-levenshtein@2.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/hiddentao/fast-levenshtein.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-levenshtein@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-levenshtein/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-levenshtein/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-levenshtein/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "fast-json-stable-stringify",
      "version": "2.1.0",
      "description": "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify without jsonify",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/fast-json-stable-stringify"
        },
        {
          "type": "vcs",
          "url": "git://github.com/epoberezkin/fast-json-stable-stringify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-json-stable-stringify@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-json-stable-stringify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-json-stable-stringify/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-json-stable-stringify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "fast-deep-equal",
      "version": "3.1.3",
      "description": "Fast deep equal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/fast-deep-equal@3.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/fast-deep-equal#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/epoberezkin/fast-deep-equal.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-deep-equal@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/fast-deep-equal/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/fast-deep-equal/package.json"
              }
            ],
            "concludedValue": "node_modules/fast-deep-equal/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sami Sayegh"
        }
      ],
      "group": "",
      "name": "exponential-backoff",
      "version": "3.1.3",
      "description": "A utility that allows retrying a function with an exponential delay between attempts.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/exponential-backoff@3.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/coveooss/exponential-backoff#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/coveooss/exponential-backoff.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/exponential-backoff@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/exponential-backoff/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/exponential-backoff/package.json"
              }
            ],
            "concludedValue": "node_modules/exponential-backoff/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "execa",
      "version": "5.1.1",
      "description": "Process execution for humans",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/execa@5.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/execa@5.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/execa/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/execa/package.json"
              }
            ],
            "concludedValue": "node_modules/execa/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "events-to-array",
      "version": "2.0.3",
      "description": "Put a bunch of emitted events in an array, for testing.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/events-to-array@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/events-to-array"
        },
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/events-to-array"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events-to-array@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/events-to-array/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/events-to-array/package.json"
              }
            ],
            "concludedValue": "node_modules/events-to-array/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Arnout Kazemier"
        }
      ],
      "group": "",
      "name": "eventemitter3",
      "version": "4.0.7",
      "description": "EventEmitter3 focuses on performance while maintaining a Node.js AND browser compatible interface.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eventemitter3@4.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/primus/eventemitter3.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eventemitter3@4.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eventemitter3/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eventemitter3/package.json"
              }
            ],
            "concludedValue": "node_modules/eventemitter3/package.json"
          }
        ]
      },
      "tags": [
        "performance"
      ]
    },
    {
      "group": "",
      "name": "esutils",
      "version": "2.0.3",
      "description": "utility box for ECMAScript language tools",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esutils@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/esutils"
        },
        {
          "type": "vcs",
          "url": "http://github.com/estools/esutils.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esutils@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esutils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esutils/package.json"
              }
            ],
            "concludedValue": "node_modules/esutils/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "estraverse",
      "version": "5.3.0",
      "description": "ECMAScript JS AST traversal functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/estraverse@5.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/estraverse"
        },
        {
          "type": "vcs",
          "url": "http://github.com/estools/estraverse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/estraverse@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/estraverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/estraverse/package.json"
              }
            ],
            "concludedValue": "node_modules/estraverse/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esrecurse",
      "version": "4.3.0",
      "description": "ECMAScript AST recursive visitor",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esrecurse@4.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/esrecurse"
        },
        {
          "type": "vcs",
          "url": "https://github.com/estools/esrecurse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esrecurse@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esrecurse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esrecurse/package.json"
              }
            ],
            "concludedValue": "node_modules/esrecurse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Joel Feenstra <jrfeenst+esquery@gmail.com>"
        }
      ],
      "group": "",
      "name": "esquery",
      "version": "1.7.0",
      "description": "A query library for ECMAScript AST using a CSS selector like query language.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/esquery@1.7.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/estools/esquery/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/estools/esquery.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esquery@1.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esquery/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esquery/package.json"
              }
            ],
            "concludedValue": "node_modules/esquery/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ariya Hidayat <ariya.hidayat@gmail.com>"
        }
      ],
      "group": "",
      "name": "esprima",
      "version": "1.2.5",
      "description": "ECMAScript parsing infrastructure for multipurpose analysis",
      "scope": "optional",
      "purl": "pkg:npm/esprima@1.2.5",
      "externalReferences": [
        {
          "type": "website",
          "url": "http://esprima.org"
        },
        {
          "type": "vcs",
          "url": "http://github.com/ariya/esprima.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/esprima/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/esprima/package.json"
              }
            ],
            "concludedValue": "node_modules/esprima/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas <nicholas+npm@nczconsulting.com>"
        }
      ],
      "group": "",
      "name": "espree",
      "version": "9.6.1",
      "description": "An Esprima-compatible JavaScript parser built on Acorn",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/espree@9.6.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/espree"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/espree@9.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/espree/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/espree/package.json"
              }
            ],
            "concludedValue": "node_modules/espree/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima (https://github.com/mysticatea)"
        }
      ],
      "group": "",
      "name": "eslint-visitor-keys",
      "version": "3.4.3",
      "description": "Constants and utilities about visitor keys to traverse AST.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-visitor-keys@3.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/eslint-visitor-keys#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-visitor-keys@3.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-visitor-keys/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-visitor-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-visitor-keys/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima"
        }
      ],
      "group": "",
      "name": "eslint-utils",
      "version": "2.1.0",
      "description": "Utilities for ESLint plugins.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-utils@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mysticatea/eslint-utils#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mysticatea/eslint-utils.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-utils@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-utils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-utils/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-utils/package.json"
          }
        ]
      },
      "tags": [
        "plugins"
      ]
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima (https://github.com/mysticatea)"
        }
      ],
      "group": "",
      "name": "eslint-visitor-keys",
      "version": "1.3.0",
      "description": "Constants and utilities about visitor keys to traverse AST.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-visitor-keys@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/eslint-visitor-keys#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-visitor-keys@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-utils/node_modules/eslint-visitor-keys/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-utils/node_modules/eslint-visitor-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-utils/node_modules/eslint-visitor-keys/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eslint-scope",
      "version": "7.2.2",
      "description": "ECMAScript scope analyzer for ESLint",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-scope@7.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/eslint/eslint-scope"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-scope@7.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-scope/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-scope/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-scope/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "jden <jason@denizac.org>"
        }
      ],
      "group": "",
      "name": "eslint-plugin-promise",
      "version": "6.6.0",
      "description": "Enforce best practices for JavaScript promises",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-promise@6.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint-community/eslint-plugin-promise"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint-community/eslint-plugin-promise"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-promise@6.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-promise/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-promise/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-promise/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima"
        }
      ],
      "group": "",
      "name": "eslint-plugin-node",
      "version": "11.1.0",
      "description": "Additional ESLint's rules for Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-node@11.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mysticatea/eslint-plugin-node#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mysticatea/eslint-plugin-node.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-node@11.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-node/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-node/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-node/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Mosher <me@benmosher.com>"
        }
      ],
      "group": "",
      "name": "eslint-plugin-import",
      "version": "2.32.0",
      "description": "Import with sanity.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-import@2.32.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/import-js/eslint-plugin-import"
        },
        {
          "type": "vcs",
          "url": "https://github.com/import-js/eslint-plugin-import"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-import@2.32.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-import/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-import/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-import/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "doctrine",
      "version": "2.1.0",
      "description": "JSDoc parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/doctrine@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/doctrine"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/doctrine@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-import/node_modules/doctrine/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-import/node_modules/doctrine/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-import/node_modules/doctrine/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "TJ Holowaychuk <tj@vision-media.ca>"
        }
      ],
      "group": "",
      "name": "debug",
      "version": "3.2.7",
      "description": "small debugging utility",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@3.2.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/visionmedia/debug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@3.2.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-import/node_modules/debug/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-module-utils/node_modules/debug/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-import-resolver-node/node_modules/debug/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-import-resolver-node/node_modules/debug/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-import-resolver-node/node_modules/debug/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima (https://github.com/mysticatea)"
        }
      ],
      "group": "",
      "name": "eslint-plugin-es",
      "version": "3.0.1",
      "description": "ESLint plugin about ECMAScript syntactic features.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-plugin-es@3.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mysticatea/eslint-plugin-es#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/mysticatea/eslint-plugin-es.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-plugin-es@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-plugin-es/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-plugin-es/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-plugin-es/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Mosher <me@benmosher.com>"
        }
      ],
      "group": "",
      "name": "eslint-module-utils",
      "version": "2.14.0",
      "description": "Core utilities to support eslint-plugin-import and other module-related plugins.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-module-utils@2.14.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/import-js/eslint-plugin-import#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/import-js/eslint-plugin-import.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-module-utils@2.14.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-module-utils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-module-utils/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-module-utils/package.json"
          }
        ]
      },
      "tags": [
        "plugins"
      ]
    },
    {
      "authors": [
        {
          "name": "Ben Mosher (me@benmosher.com)"
        }
      ],
      "group": "",
      "name": "eslint-import-resolver-node",
      "version": "0.3.10",
      "description": "Node default behavior import resolution plugin for eslint-plugin-import.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint-import-resolver-node@0.3.10",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/import-js/eslint-plugin-import"
        },
        {
          "type": "vcs",
          "url": "https://github.com/import-js/eslint-plugin-import"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint-import-resolver-node@0.3.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint-import-resolver-node/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint-import-resolver-node/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint-import-resolver-node/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas <nicholas+npm@nczconsulting.com>"
        }
      ],
      "group": "",
      "name": "eslint",
      "version": "8.57.1",
      "description": "An AST-based pattern checker for JavaScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eslint@8.57.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://eslint.org"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eslint@8.57.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eslint/package.json"
              }
            ],
            "concludedValue": "node_modules/eslint/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "json-schema-traverse",
      "version": "0.4.1",
      "description": "Traverse JSON Schema passing each schema object to callback",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/json-schema-traverse@0.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/epoberezkin/json-schema-traverse#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/epoberezkin/json-schema-traverse.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/json-schema-traverse@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint/node_modules/json-schema-traverse/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/eslintrc/node_modules/json-schema-traverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/eslintrc/node_modules/json-schema-traverse/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/eslintrc/node_modules/json-schema-traverse/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "ajv",
      "version": "6.15.0",
      "description": "Another JSON Schema Validator",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ajv@6.15.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ajv-validator/ajv"
        },
        {
          "type": "vcs",
          "url": "https://github.com/ajv-validator/ajv.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@6.15.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eslint/node_modules/ajv/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/eslintrc/node_modules/ajv/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/eslintrc/node_modules/ajv/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/eslintrc/node_modules/ajv/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "group": "",
      "name": "escodegen",
      "version": "2.1.0",
      "description": "ECMAScript code generator",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escodegen@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/estools/escodegen"
        },
        {
          "type": "vcs",
          "url": "http://github.com/estools/escodegen.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escodegen@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/escodegen/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/escodegen/package.json"
              }
            ],
            "concludedValue": "node_modules/escodegen/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "escape-string-regexp",
      "version": "4.0.0",
      "description": "Escape RegExp special characters",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/escape-string-regexp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/escape-string-regexp/package.json"
              }
            ],
            "concludedValue": "node_modules/escape-string-regexp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Luke Edwards <luke.edwards05@gmail.com> (https://lukeed.com)"
        }
      ],
      "group": "",
      "name": "escalade",
      "version": "3.2.0",
      "description": "A tiny (183B to 210B) and fast utility to ascend parent directories",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escalade@3.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/escalade@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/escalade/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/escalade/package.json"
              }
            ],
            "concludedValue": "node_modules/escalade/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Youngblood"
        }
      ],
      "group": "",
      "name": "es6-error",
      "version": "4.1.1",
      "description": "Easily-extendable error for use with ES6 classes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es6-error@4.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/bjyoungblood/es6-error"
        },
        {
          "type": "vcs",
          "url": "https://github.com/bjyoungblood/es6-error.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es6-error@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es6-error/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es6-error/package.json"
              }
            ],
            "concludedValue": "node_modules/es6-error/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "es-to-primitive",
      "version": "1.3.4",
      "description": "ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-to-primitive@1.3.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/es-to-primitive.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-to-primitive@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-to-primitive/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-to-primitive/package.json"
              }
            ],
            "concludedValue": "node_modules/es-to-primitive/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "es-shim-unscopables",
      "version": "1.1.0",
      "description": "Helper package to shim a method into `Array.prototype[Symbol.unscopables]`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-shim-unscopables@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/es-shim-unscopables#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/es-shim-unscopables.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-shim-unscopables@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-shim-unscopables/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-shim-unscopables/package.json"
              }
            ],
            "concludedValue": "node_modules/es-shim-unscopables/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "es-set-tostringtag",
      "version": "2.1.0",
      "description": "A helper to optimistically set Symbol.toStringTag, when possible.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-set-tostringtag@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/es-shims/es-set-tostringtag#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/es-shims/es-set-tostringtag.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-set-tostringtag@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-set-tostringtag/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-set-tostringtag/package.json"
              }
            ],
            "concludedValue": "node_modules/es-set-tostringtag/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "es-object-atoms",
      "version": "1.1.2",
      "description": "ES Object-related atoms: Object, ToObject, RequireObjectCoercible",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-object-atoms@1.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/es-object-atoms#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/es-object-atoms.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-object-atoms@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-object-atoms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-object-atoms/package.json"
              }
            ],
            "concludedValue": "node_modules/es-object-atoms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "es-errors",
      "version": "1.3.0",
      "description": "A simple cache for a few of the JS Error constructors.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-errors@1.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/es-errors#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/es-errors.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-errors@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-errors/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-errors/package.json"
              }
            ],
            "concludedValue": "node_modules/es-errors/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "es-define-property",
      "version": "1.0.1",
      "description": "`Object.defineProperty`, but not IE 8's broken one.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-define-property@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/es-define-property#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/es-define-property.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-define-property@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-define-property/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-define-property/package.json"
              }
            ],
            "concludedValue": "node_modules/es-define-property/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "es-abstract-get",
      "version": "1.0.0",
      "description": "ECMAScript Abstract Operations for \"getting properties\" (Get, GetV, GetMethod)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-abstract-get@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/es-abstract-get#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/es-abstract-get.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-abstract-get@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-abstract-get/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-abstract-get/package.json"
              }
            ],
            "concludedValue": "node_modules/es-abstract-get/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "es-abstract",
      "version": "1.24.2",
      "description": "ECMAScript spec abstract operations.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/es-abstract@1.24.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/es-abstract.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/es-abstract@1.24.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/es-abstract/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/es-abstract/package.json"
              }
            ],
            "concludedValue": "node_modules/es-abstract/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-ex",
      "version": "1.3.4",
      "description": "Easy error subclassing and stack customization",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/error-ex@1.3.4",
      "type": "library",
      "bom-ref": "pkg:npm/error-ex@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/error-ex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/error-ex/package.json"
              }
            ],
            "concludedValue": "node_modules/error-ex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "IndigoUnited <hello@indigounited.com> (http://indigounited.com)"
        }
      ],
      "group": "",
      "name": "err-code",
      "version": "2.0.3",
      "description": "Create an error with a code",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/err-code@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/IndigoUnited/js-err-code.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/err-code@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/err-code/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/err-code/package.json"
              }
            ],
            "concludedValue": "node_modules/err-code/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "env-paths",
      "version": "2.2.1",
      "description": "Get paths for storing things like data, config, cache, etc",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/env-paths@2.2.1",
      "type": "library",
      "bom-ref": "pkg:npm/env-paths@2.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/env-paths/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/env-paths/package.json"
              }
            ],
            "concludedValue": "node_modules/env-paths/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Boehm <me@feedic.com>"
        }
      ],
      "group": "",
      "name": "entities",
      "version": "2.2.0",
      "description": "Encode & decode XML and HTML entities with ease",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/entities@2.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/fb55/entities.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/entities@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/entities/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/entities/package.json"
              }
            ],
            "concludedValue": "node_modules/entities/package.json"
          }
        ]
      },
      "tags": [
        "decode",
        "html",
        "xml"
      ]
    },
    {
      "authors": [
        {
          "name": "Mathias Buus <mathiasbuus@gmail.com>"
        }
      ],
      "group": "",
      "name": "end-of-stream",
      "version": "1.4.5",
      "description": "Call a callback when a readable/writable/duplex stream has completed or failed.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/end-of-stream@1.4.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/mafintosh/end-of-stream"
        },
        {
          "type": "vcs",
          "url": "git://github.com/mafintosh/end-of-stream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/end-of-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/end-of-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/end-of-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Andris Reinman"
        }
      ],
      "group": "",
      "name": "encoding",
      "version": "0.1.13",
      "description": "Convert encodings, uses iconv-lite",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/encoding@0.1.13",
      "type": "library",
      "bom-ref": "pkg:npm/encoding@0.1.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/encoding/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/encoding/package.json"
              }
            ],
            "concludedValue": "node_modules/encoding/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Kilian Valkhof"
        }
      ],
      "group": "",
      "name": "electron-to-chromium",
      "version": "1.5.417",
      "description": "Provides a list of electron-to-chromium version mappings",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/electron-to-chromium@1.5.417",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/Kilian/electron-to-chromium.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/electron-to-chromium@1.5.417",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/electron-to-chromium/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/electron-to-chromium/package.json"
              }
            ],
            "concludedValue": "node_modules/electron-to-chromium/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Masaki Komagata"
        }
      ],
      "group": "",
      "name": "eastasianwidth",
      "version": "0.2.0",
      "description": "Get East Asian Width from a character.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/eastasianwidth@0.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/eastasianwidth@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/eastasianwidth/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/eastasianwidth/package.json"
              }
            ],
            "concludedValue": "node_modules/eastasianwidth/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Raynos <raynos2@gmail.com>"
        }
      ],
      "group": "",
      "name": "duplexer",
      "version": "0.1.2",
      "description": "Creates a duplex stream",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/duplexer@0.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Raynos/duplexer"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/duplexer@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/duplexer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/duplexer/package.json"
              }
            ],
            "concludedValue": "node_modules/duplexer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "dunder-proto",
      "version": "1.0.1",
      "description": "If available, the `Object.prototype.__proto__` accessor and mutator, call-bound",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dunder-proto@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/es-shims/dunder-proto#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/es-shims/dunder-proto.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dunder-proto@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/dunder-proto/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/dunder-proto/package.json"
              }
            ],
            "concludedValue": "node_modules/dunder-proto/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "dot-prop",
      "version": "5.3.0",
      "description": "Get, set, or delete a property from a nested object using a dot path",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dot-prop@5.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/dot-prop@5.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/dot-prop/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/dot-prop/package.json"
              }
            ],
            "concludedValue": "node_modules/dot-prop/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Boehm <me@feedic.com>"
        }
      ],
      "group": "",
      "name": "domutils",
      "version": "2.8.0",
      "description": "Utilities for working with htmlparser2's dom",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/domutils@2.8.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/fb55/domutils.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domutils@2.8.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/domutils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/domutils/package.json"
              }
            ],
            "concludedValue": "node_modules/domutils/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Boehm <me@feedic.com>"
        }
      ],
      "group": "",
      "name": "domhandler",
      "version": "4.3.1",
      "description": "Handler for htmlparser2 that turns pages into a dom",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/domhandler@4.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/fb55/domhandler.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domhandler@4.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/domhandler/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/domhandler/package.json"
              }
            ],
            "concludedValue": "node_modules/domhandler/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Boehm <me@feedic.com>"
        }
      ],
      "group": "",
      "name": "domelementtype",
      "version": "2.3.0",
      "description": "all the types of nodes in htmlparser2's dom",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/domelementtype@2.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/fb55/domelementtype.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/domelementtype@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/domelementtype/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/domelementtype/package.json"
              }
            ],
            "concludedValue": "node_modules/domelementtype/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Boehm <me@feedic.com>"
        }
      ],
      "group": "",
      "name": "dom-serializer",
      "version": "1.4.1",
      "description": "render domhandler DOM nodes to a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dom-serializer@1.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/cheeriojs/dom-renderer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dom-serializer@1.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/dom-serializer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/dom-serializer/package.json"
              }
            ],
            "concludedValue": "node_modules/dom-serializer/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "doctrine",
      "version": "3.0.0",
      "description": "JSDoc parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/doctrine@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/doctrine"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/doctrine@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/doctrine/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/doctrine/package.json"
              }
            ],
            "concludedValue": "node_modules/doctrine/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "5.2.2",
      "description": "A JavaScript text diff implementation.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/diff@5.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/kpdecker/jsdiff.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@5.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/diff/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/diff/package.json"
              }
            ],
            "concludedValue": "node_modules/diff/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "detect-indent",
      "version": "6.1.0",
      "description": "Detect the indentation of code",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/detect-indent@6.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/detect-indent@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/detect-indent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/detect-indent/package.json"
              }
            ],
            "concludedValue": "node_modules/detect-indent/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "deprecation",
      "version": "2.3.1",
      "description": "Log a deprecation message with stack",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deprecation@2.3.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/gr2m/deprecation.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deprecation@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/deprecation/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/deprecation/package.json"
              }
            ],
            "concludedValue": "node_modules/deprecation/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "delegates",
      "version": "1.0.0",
      "description": "delegate methods and accessors to another property",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/delegates@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/delegates@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/delegates/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/delegates/package.json"
              }
            ],
            "concludedValue": "node_modules/delegates/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "define-properties",
      "version": "1.2.1",
      "description": "Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/define-properties@1.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/ljharb/define-properties.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-properties@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/define-properties/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/define-properties/package.json"
              }
            ],
            "concludedValue": "node_modules/define-properties/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "define-data-property",
      "version": "1.1.4",
      "description": "Define a data property on an object. Will fall back to assignment in an engine without descriptors.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/define-data-property@1.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/define-data-property#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/define-data-property.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/define-data-property@1.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/define-data-property/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/define-data-property/package.json"
              }
            ],
            "concludedValue": "node_modules/define-data-property/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "default-require-extensions",
      "version": "3.0.1",
      "description": "Node's default require extensions as a separate module",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/default-require-extensions@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/default-require-extensions@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/default-require-extensions/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/default-require-extensions/package.json"
              }
            ],
            "concludedValue": "node_modules/default-require-extensions/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "deep-is",
      "version": "0.1.4",
      "description": "node's assert.deepEqual algorithm except for NaN being equal to NaN",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/deep-is@0.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/thlorenz/deep-is.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/deep-is@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/deep-is/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/deep-is/package.json"
              }
            ],
            "concludedValue": "node_modules/deep-is/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (http://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "decamelize-keys",
      "version": "1.1.1",
      "description": "Convert object keys from camelCase to lowercase with a custom separator",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/decamelize-keys@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/decamelize-keys@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/decamelize-keys/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/decamelize-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/decamelize-keys/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "map-obj",
      "version": "1.0.1",
      "description": "Map object keys and values into a new object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/map-obj@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/map-obj@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/decamelize-keys/node_modules/map-obj/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/decamelize-keys/node_modules/map-obj/package.json"
              }
            ],
            "concludedValue": "node_modules/decamelize-keys/node_modules/map-obj/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "decamelize",
      "version": "1.2.0",
      "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/decamelize@1.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/decamelize@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/decamelize/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/decamelize/package.json"
              }
            ],
            "concludedValue": "node_modules/decamelize/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Josh Junon (https://github.com/qix-)"
        }
      ],
      "group": "",
      "name": "debug",
      "version": "4.4.3",
      "description": "Lightweight debugging utility for Node.js and the browser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/debug@4.4.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/debug-js/debug.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@4.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/debug/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/debug/package.json"
              }
            ],
            "concludedValue": "node_modules/debug/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Steven Levithan"
        }
      ],
      "group": "",
      "name": "dateformat",
      "version": "3.0.3",
      "description": "A node.js package for Steven Levithan's excellent dateFormat() function.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dateformat@3.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/felixge/node-dateformat"
        },
        {
          "type": "vcs",
          "url": "https://github.com/felixge/node-dateformat.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/dateformat@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/dateformat/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/dateformat/package.json"
              }
            ],
            "concludedValue": "node_modules/dateformat/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "data-view-byte-offset",
      "version": "1.0.1",
      "description": "Get the byteOffset out of a DataView, robustly.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/data-view-byte-offset@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/data-view-byte-offset#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/data-view-byte-offset.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/data-view-byte-offset@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/data-view-byte-offset/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/data-view-byte-offset/package.json"
              }
            ],
            "concludedValue": "node_modules/data-view-byte-offset/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "data-view-byte-length",
      "version": "1.0.2",
      "description": "Get the byteLength out of a DataView, robustly.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/data-view-byte-length@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/data-view-byte-length#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/data-view-byte-length.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/data-view-byte-length@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/data-view-byte-length/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/data-view-byte-length/package.json"
              }
            ],
            "concludedValue": "node_modules/data-view-byte-length/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "data-view-buffer",
      "version": "1.0.2",
      "description": "Get the ArrayBuffer out of a DataView, robustly.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/data-view-buffer@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/data-view-buffer#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/data-view-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/data-view-buffer@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/data-view-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/data-view-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/data-view-buffer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "dargs",
      "version": "7.0.0",
      "description": "Reverse minimist. Convert an object of options into an array of command-line arguments.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/dargs@7.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/dargs@7.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/dargs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/dargs/package.json"
              }
            ],
            "concludedValue": "node_modules/dargs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "cssesc",
      "version": "3.0.0",
      "description": "A JavaScript library for escaping CSS strings and identifiers while generating the shortest possible ASCII-only output.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cssesc@3.0.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/cssesc"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/cssesc.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cssesc@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cssesc/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cssesc/package.json"
              }
            ],
            "concludedValue": "node_modules/cssesc/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Böhm <me@feedic.com> (http://feedic.com)"
        }
      ],
      "group": "",
      "name": "css-what",
      "version": "6.2.2",
      "description": "a CSS selector parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/css-what@6.2.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/fb55/css-what"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-what@6.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/css-what/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/css-what/package.json"
              }
            ],
            "concludedValue": "node_modules/css-what/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Boehm <me@feedic.com>"
        }
      ],
      "group": "",
      "name": "css-select",
      "version": "4.3.0",
      "description": "a CSS selector compiler/engine",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-2-Clause",
            "url": "https://opensource.org/licenses/BSD-2-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/css-select@4.3.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/fb55/css-select.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/css-select@4.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/css-select/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/css-select/package.json"
              }
            ],
            "concludedValue": "node_modules/css-select/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "André Cruz <andre@moxy.studio>"
        }
      ],
      "group": "",
      "name": "cross-spawn",
      "version": "7.0.6",
      "description": "Cross platform child_process#spawn and child_process#spawnSync",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cross-spawn@7.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/moxystudio/node-cross-spawn"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-spawn@7.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cross-spawn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cross-spawn/package.json"
              }
            ],
            "concludedValue": "node_modules/cross-spawn/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "create-require",
      "version": "1.1.1",
      "description": "Polyfill for Node.js module.createRequire (<= v12.2.0)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/create-require@1.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/create-require@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/create-require/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/create-require/package.json"
              }
            ],
            "concludedValue": "node_modules/create-require/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Alex Miller <codex.nz@gmail.com>"
        }
      ],
      "group": "",
      "name": "cosmiconfig-typescript-loader",
      "version": "4.4.0",
      "description": "TypeScript loader for cosmiconfig",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cosmiconfig-typescript-loader@4.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Codex-/cosmiconfig-typescript-loader#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/Codex-/cosmiconfig-typescript-loader.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cosmiconfig-typescript-loader@4.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cosmiconfig-typescript-loader/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cosmiconfig-typescript-loader/package.json"
              }
            ],
            "concludedValue": "node_modules/cosmiconfig-typescript-loader/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Daniel Fischer <daniel@d-fischer.dev>"
        }
      ],
      "group": "",
      "name": "cosmiconfig",
      "version": "8.3.6",
      "description": "Find and load configuration from a package.json property, rc file, TypeScript module, and more!",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cosmiconfig@8.3.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/cosmiconfig/cosmiconfig#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/cosmiconfig/cosmiconfig.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cosmiconfig@8.3.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cosmiconfig/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cosmiconfig/package.json"
              }
            ],
            "concludedValue": "node_modules/cosmiconfig/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "core-util-is",
      "version": "1.0.3",
      "description": "The `util.is*` functions introduced in Node v0.12.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/core-util-is"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/core-util-is/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/core-util-is/package.json"
              }
            ],
            "concludedValue": "node_modules/core-util-is/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Thorsten Lorenz <thlorenz@gmx.de> (http://thlorenz.com)"
        }
      ],
      "group": "",
      "name": "convert-source-map",
      "version": "1.9.0",
      "description": "Converts a source-map from/to  different formats and allows adding/changing properties.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@1.9.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/thlorenz/convert-source-map"
        },
        {
          "type": "vcs",
          "url": "git://github.com/thlorenz/convert-source-map.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@1.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/convert-source-map/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/convert-source-map/package.json"
              }
            ],
            "concludedValue": "node_modules/convert-source-map/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Steve Mao <maochenyan@gmail.com> (https://github.com/stevemao)"
        }
      ],
      "group": "",
      "name": "conventional-commits-parser",
      "version": "4.0.0",
      "description": "Parse raw conventional commits",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/conventional-commits-parser@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-commits-parser#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/conventional-changelog.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/conventional-commits-parser@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/conventional-commits-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/conventional-commits-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/conventional-commits-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Steve Mao <maochenyan@gmail.com> (https://github.com/stevemao)"
        }
      ],
      "group": "",
      "name": "conventional-commits-filter",
      "version": "2.0.7",
      "description": "Filter out reverted commits parsed by conventional-commits-parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/conventional-commits-filter@2.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-commits-filter#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/conventional-changelog.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/conventional-commits-filter@2.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/conventional-commits-filter/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/conventional-commits-filter/package.json"
              }
            ],
            "concludedValue": "node_modules/conventional-commits-filter/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Steve Mao <maochenyan@gmail.com> (https://github.com/stevemao)"
        }
      ],
      "group": "",
      "name": "conventional-changelog-writer",
      "version": "5.0.1",
      "description": "Write logs based on conventional commits and templates",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-writer@5.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-changelog-writer#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/conventional-changelog.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/conventional-changelog-writer@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/conventional-changelog-writer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/conventional-changelog-writer/package.json"
              }
            ],
            "concludedValue": "node_modules/conventional-changelog-writer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe"
        }
      ],
      "group": "",
      "name": "conventional-changelog-conventionalcommits",
      "version": "6.1.0",
      "description": "conventional-changelog conventionalcommits.org preset",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-conventionalcommits@6.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-changelog-conventionalcommits#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/conventional-changelog.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/conventional-changelog-conventionalcommits@6.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/conventional-changelog-conventionalcommits/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/conventional-changelog-conventionalcommits/package.json"
              }
            ],
            "concludedValue": "node_modules/conventional-changelog-conventionalcommits/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Steve Mao"
        }
      ],
      "group": "",
      "name": "conventional-changelog-angular",
      "version": "6.0.0",
      "description": "conventional-changelog angular preset",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/conventional-changelog-angular@6.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/conventional-changelog/tree/master/packages/conventional-changelog-angular#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/conventional-changelog.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/conventional-changelog-angular@6.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/conventional-changelog-angular/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/conventional-changelog-angular/package.json"
              }
            ],
            "concludedValue": "node_modules/conventional-changelog-angular/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org> (http://re-becca.org/)"
        }
      ],
      "group": "",
      "name": "console-control-strings",
      "version": "1.1.0",
      "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning.  This is a subset of both ansi and vt100.  All control codes included work on both Windows & Unix-like OSes, except where noted.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/console-control-strings@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/iarna/console-control-strings"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/console-control-strings@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/console-control-strings/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/console-control-strings/package.json"
              }
            ],
            "concludedValue": "node_modules/console-control-strings/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Steve Mao <maochenyan@gmail.com> (https://github.com/stevemao)"
        }
      ],
      "group": "",
      "name": "compare-func",
      "version": "2.0.0",
      "description": "Get a compare function for array to sort",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/compare-func@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/stevemao/compare-func"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/compare-func@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/compare-func/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/compare-func/package.json"
              }
            ],
            "concludedValue": "node_modules/compare-func/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "",
      "name": "common-ancestor-path",
      "version": "1.0.1",
      "description": "Find the common ancestor of 2 or more paths on Windows or Unix",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/common-ancestor-path@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/common-ancestor-path"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/common-ancestor-path@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/common-ancestor-path/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/common-ancestor-path/package.json"
              }
            ],
            "concludedValue": "node_modules/common-ancestor-path/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "color-support",
      "version": "1.1.3",
      "description": "A module which will endeavor to guess your terminal's level of color support.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/color-support@1.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/color-support.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/color-support@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/color-support/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/color-support/package.json"
              }
            ],
            "concludedValue": "node_modules/color-support/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Google LLC"
        }
      ],
      "group": "",
      "name": "code-suggester",
      "version": "4.3.4",
      "description": "Library to propose code changes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/code-suggester@4.3.4",
      "type": "library",
      "bom-ref": "pkg:npm/code-suggester@4.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/code-suggester/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/code-suggester/package.json"
              }
            ],
            "concludedValue": "node_modules/code-suggester/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "16.2.2",
      "description": "yargs the modern, pirate-themed, successor to optimist.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs@16.2.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://yargs.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/yargs/yargs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@16.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/code-suggester/node_modules/yargs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/code-suggester/node_modules/yargs/package.json"
              }
            ],
            "concludedValue": "node_modules/code-suggester/node_modules/yargs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "code-point-at",
      "version": "1.1.0",
      "description": "ES2015 `String#codePointAt()` ponyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/code-point-at@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/code-point-at@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/code-point-at/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/code-point-at/package.json"
              }
            ],
            "concludedValue": "node_modules/code-point-at/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "cmd-shim",
      "version": "6.0.3",
      "description": "Used in npm for command line application support",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cmd-shim@6.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/cmd-shim.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cmd-shim@6.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cmd-shim/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cmd-shim/package.json"
              }
            ],
            "concludedValue": "node_modules/cmd-shim/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "",
      "name": "cliui",
      "version": "7.0.4",
      "description": "easily create complex multi-column command-line-interfaces",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cliui@7.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/cliui@7.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cliui/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cliui/package.json"
              }
            ],
            "concludedValue": "node_modules/cliui/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "clean-stack",
      "version": "2.2.0",
      "description": "Clean up error stack traces",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/clean-stack@2.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/clean-stack@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/clean-stack/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/clean-stack/package.json"
              }
            ],
            "concludedValue": "node_modules/clean-stack/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "chownr",
      "version": "2.0.0",
      "description": "like `chown -R`",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chownr@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/chownr.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chownr@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/chownr/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "chownr"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chownr/package.json"
              }
            ],
            "concludedValue": "node_modules/chownr/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/mkdir.js",
            "line": 10
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Paul Miller (https://paulmillr.com)"
        }
      ],
      "group": "",
      "name": "chokidar",
      "version": "3.6.0",
      "description": "Minimal and efficient cross-platform file watching library",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chokidar@3.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/paulmillr/chokidar"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/paulmillr/chokidar.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chokidar@3.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/chokidar/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chokidar/package.json"
              }
            ],
            "concludedValue": "node_modules/chokidar/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Gulp Team <team@gulpjs.com> (https://gulpjs.com/)"
        }
      ],
      "group": "",
      "name": "glob-parent",
      "version": "5.1.2",
      "description": "Extract the non-magic parent path from a glob string.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob-parent@5.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/glob-parent@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/chokidar/node_modules/glob-parent/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chokidar/node_modules/glob-parent/package.json"
              }
            ],
            "concludedValue": "node_modules/chokidar/node_modules/glob-parent/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "chmodr",
      "version": "1.2.0",
      "description": "like `chmod -R`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/chmodr@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/isaacs/chmodr.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/chmodr@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/chmodr/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/chmodr/package.json"
              }
            ],
            "concludedValue": "node_modules/chmodr/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Briggs <beneb.info@gmail.com> (http://beneb.info)"
        }
      ],
      "group": "",
      "name": "caniuse-lite",
      "version": "1.0.30001810",
      "description": "A smaller version of caniuse-db, with only the essentials!",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "CC-BY-4.0",
            "url": "https://opensource.org/licenses/CC-BY-4.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/caniuse-lite@1.0.30001810",
      "type": "library",
      "bom-ref": "pkg:npm/caniuse-lite@1.0.30001810",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/caniuse-lite/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/caniuse-lite/package.json"
              }
            ],
            "concludedValue": "node_modules/caniuse-lite/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "camelcase-keys",
      "version": "6.2.2",
      "description": "Convert object keys to camel case",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/camelcase-keys@6.2.2",
      "type": "library",
      "bom-ref": "pkg:npm/camelcase-keys@6.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/camelcase-keys/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/camelcase-keys/package.json"
              }
            ],
            "concludedValue": "node_modules/camelcase-keys/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "camelcase",
      "version": "5.3.1",
      "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/camelcase@5.3.1",
      "type": "library",
      "bom-ref": "pkg:npm/camelcase@5.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/camelcase/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/camelcase/package.json"
              }
            ],
            "concludedValue": "node_modules/camelcase/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "call-bound",
      "version": "1.0.4",
      "description": "Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/call-bound@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/call-bound#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/call-bound.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bound@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/call-bound/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/call-bound/package.json"
              }
            ],
            "concludedValue": "node_modules/call-bound/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "call-bind-apply-helpers",
      "version": "1.0.2",
      "description": "Helper functions around Function call/apply/bind, for use in `call-bind`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/call-bind-apply-helpers#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/call-bind-apply-helpers.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bind-apply-helpers@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/call-bind-apply-helpers/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/call-bind-apply-helpers/package.json"
              }
            ],
            "concludedValue": "node_modules/call-bind-apply-helpers/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "call-bind",
      "version": "1.0.9",
      "description": "Robustly `.call.bind()` a function",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/call-bind@1.0.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/call-bind#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/call-bind.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/call-bind@1.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/call-bind/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/call-bind/package.json"
              }
            ],
            "concludedValue": "node_modules/call-bind/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caching-transform",
      "version": "4.0.0",
      "description": "Wraps a transform and provides caching",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/caching-transform@4.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/caching-transform@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/caching-transform/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/caching-transform/package.json"
              }
            ],
            "concludedValue": "node_modules/caching-transform/package.json"
          }
        ]
      },
      "tags": [
        "transform"
      ]
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org> (http://re-becca.org)"
        }
      ],
      "group": "",
      "name": "write-file-atomic",
      "version": "3.0.3",
      "description": "Write files in an atomic fashion w/configurable ownership",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/write-file-atomic@3.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/write-file-atomic"
        },
        {
          "type": "vcs",
          "url": "git://github.com/npm/write-file-atomic.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/write-file-atomic@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/caching-transform/node_modules/write-file-atomic/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/caching-transform/node_modules/write-file-atomic/package.json"
              }
            ],
            "concludedValue": "node_modules/caching-transform/node_modules/write-file-atomic/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "cacache",
      "version": "17.1.4",
      "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/cacache@17.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/cacache.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cacache@17.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/cacache/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/cacache/package.json"
              }
            ],
            "concludedValue": "node_modules/cacache/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "builtins",
      "version": "1.0.3",
      "description": "List of node.js builtin modules",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/builtins@1.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/builtins@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/builtins/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/builtins/package.json"
              }
            ],
            "concludedValue": "node_modules/builtins/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-from",
      "version": "1.1.2",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/buffer-from@1.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/buffer-from@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/buffer-from/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/buffer-from/package.json"
              }
            ],
            "concludedValue": "node_modules/buffer-from/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrey Sitnik <andrey@sitnik.es>"
        }
      ],
      "group": "",
      "name": "browserslist",
      "version": "4.28.8",
      "description": "Share target browsers between different front-end tools, like Autoprefixer, Stylelint and babel-env-preset",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/browserslist@4.28.8",
      "type": "library",
      "bom-ref": "pkg:npm/browserslist@4.28.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/browserslist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/browserslist/package.json"
              }
            ],
            "concludedValue": "node_modules/browserslist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jon Schlinkert (https://github.com/jonschlinkert)"
        }
      ],
      "group": "",
      "name": "braces",
      "version": "3.0.3",
      "description": "Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/braces@3.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/braces"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/braces@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/braces/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/braces/package.json"
              }
            ],
            "concludedValue": "node_modules/braces/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "brace-expansion",
      "version": "2.1.4",
      "description": "Brace expansion as known from sh/bash",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/brace-expansion@2.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/brace-expansion"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/brace-expansion.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brace-expansion@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/brace-expansion/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/brace-expansion/package.json"
              }
            ],
            "concludedValue": "node_modules/brace-expansion/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Felix Boehm <me@feedic.com>"
        }
      ],
      "group": "",
      "name": "boolbase",
      "version": "1.0.0",
      "description": "two functions: One that returns true, one that returns false",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/boolbase@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/fb55/boolbase"
        },
        {
          "type": "vcs",
          "url": "https://github.com/fb55/boolbase"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/boolbase@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/boolbase/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/boolbase/package.json"
              }
            ],
            "concludedValue": "node_modules/boolbase/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "bind-obj-methods",
      "version": "3.0.0",
      "description": "Bind methods to an object from that object or some other source. Optionally specify a set of methods to skip over.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bind-obj-methods@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/isaacs/bind-obj-methods#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/bind-obj-methods.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bind-obj-methods@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/bind-obj-methods/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/bind-obj-methods/package.json"
              }
            ],
            "concludedValue": "node_modules/bind-obj-methods/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "binary-extensions",
      "version": "2.3.0",
      "description": "List of binary file extensions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/binary-extensions@2.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/binary-extensions@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/binary-extensions/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/binary-extensions/package.json"
              }
            ],
            "concludedValue": "node_modules/binary-extensions/package.json"
          }
        ]
      },
      "tags": [
        "binary"
      ]
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "bin-links",
      "version": "4.0.4",
      "description": "JavaScript package binary linker",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/bin-links@4.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/bin-links.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bin-links@4.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/bin-links/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/bin-links/package.json"
              }
            ],
            "concludedValue": "node_modules/bin-links/package.json"
          }
        ]
      },
      "tags": [
        "binary"
      ]
    },
    {
      "authors": [
        {
          "name": "Gregor Martynus"
        }
      ],
      "group": "",
      "name": "before-after-hook",
      "version": "2.2.3",
      "description": "asynchronous before/error/after hooks for internal functionality",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/before-after-hook@2.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/before-after-hook@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/before-after-hook/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/before-after-hook/package.json"
              }
            ],
            "concludedValue": "node_modules/before-after-hook/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "baseline-browser-mapping",
      "version": "2.11.20",
      "description": "A library for obtaining browser versions with their maximum supported Baseline feature set and Widely Available status.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/baseline-browser-mapping@2.11.20",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/web-platform-dx/baseline-browser-mapping.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/baseline-browser-mapping@2.11.20",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/baseline-browser-mapping/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/baseline-browser-mapping/package.json"
              }
            ],
            "concludedValue": "node_modules/baseline-browser-mapping/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "available-typed-arrays",
      "version": "1.0.7",
      "description": "Returns an array of Typed Array names that are available in the current environment",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/available-typed-arrays@1.0.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/available-typed-arrays#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/available-typed-arrays.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/available-typed-arrays@1.0.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/available-typed-arrays/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/available-typed-arrays/package.json"
              }
            ],
            "concludedValue": "node_modules/available-typed-arrays/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "async-retry",
      "version": "1.3.3",
      "description": "Retrying made simple, easy and async",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/async-retry@1.3.3",
      "type": "library",
      "bom-ref": "pkg:npm/async-retry@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/async-retry/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/async-retry/package.json"
              }
            ],
            "concludedValue": "node_modules/async-retry/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Tim Koschützki <tim@debuggable.com> (http://debuggable.com/)"
        }
      ],
      "group": "",
      "name": "retry",
      "version": "0.13.1",
      "description": "Abstraction for exponential and custom retry strategies for failed operations.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/retry@0.13.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tim-kos/node-retry"
        },
        {
          "type": "vcs",
          "url": "git://github.com/tim-kos/node-retry.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/retry@0.13.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/async-retry/node_modules/retry/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/async-retry/node_modules/retry/package.json"
              }
            ],
            "concludedValue": "node_modules/async-retry/node_modules/retry/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me)"
        }
      ],
      "group": "",
      "name": "async-hook-domain",
      "version": "2.0.4",
      "description": "An implementation of Domain-like error handling, built on async_hooks",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/async-hook-domain@2.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/tapjs/async-hook-domain.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-hook-domain@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/async-hook-domain/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/async-hook-domain/package.json"
              }
            ],
            "concludedValue": "node_modules/async-hook-domain/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harbamd <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "async-function",
      "version": "1.0.0",
      "description": "A function that returns the normally hidden `AsyncFunction` constructor",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/async-function@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ljharb/async-function#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ljharb/async-function.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/async-function@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/async-function/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/async-function/package.json"
              }
            ],
            "concludedValue": "node_modules/async-function/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "arrify",
      "version": "1.0.1",
      "description": "Convert a value to an array",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/arrify@1.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/arrify@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/arrify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/arrify/package.json"
              }
            ],
            "concludedValue": "node_modules/arrify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "arraybuffer.prototype.slice",
      "version": "1.0.4",
      "description": "ES spec-compliant shim for ArrayBuffer.prototype.slice",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/arraybuffer.prototype.slice@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/es-shims/ArrayBuffer.prototype.slice#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/es-shims/ArrayBuffer.prototype.slice.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/arraybuffer.prototype.slice@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/arraybuffer.prototype.slice/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/arraybuffer.prototype.slice/package.json"
              }
            ],
            "concludedValue": "node_modules/arraybuffer.prototype.slice/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "array.prototype.flatmap",
      "version": "1.3.3",
      "description": "An ES2019 spec-compliant `Array.prototype.flatMap` shim/polyfill/replacement that works as far down as ES3.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array.prototype.flatmap@1.3.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/Array.prototype.flatMap.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array.prototype.flatmap@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/array.prototype.flatmap/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/array.prototype.flatmap/package.json"
              }
            ],
            "concludedValue": "node_modules/array.prototype.flatmap/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "array.prototype.flat",
      "version": "1.3.3",
      "description": "An ES2019 spec-compliant `Array.prototype.flat` shim/polyfill/replacement that works as far down as ES3.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array.prototype.flat@1.3.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/Array.prototype.flat.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array.prototype.flat@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/array.prototype.flat/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/array.prototype.flat/package.json"
              }
            ],
            "concludedValue": "node_modules/array.prototype.flat/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "array.prototype.findlastindex",
      "version": "1.2.6",
      "description": "An ESnext spec-compliant `Array.prototype.findLastIndex` shim/polyfill/replacement that works as far down as ES3.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array.prototype.findlastindex@1.2.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/es-shims/Array.prototype.findLastIndex#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/es-shims/Array.prototype.findLastIndex.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array.prototype.findlastindex@1.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/array.prototype.findlastindex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/array.prototype.findlastindex/package.json"
              }
            ],
            "concludedValue": "node_modules/array.prototype.findlastindex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)"
        }
      ],
      "group": "",
      "name": "array-includes",
      "version": "3.1.9",
      "description": "An ES7/ES2016 spec-compliant `Array.prototype.includes` shim/polyfill/replacement that works as far down as ES3.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-includes@3.1.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/es-shims/array-includes.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-includes@3.1.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/array-includes/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/array-includes/package.json"
              }
            ],
            "concludedValue": "node_modules/array-includes/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Steve Mao <maochenyan@gmail.com> (https://github.com/stevemao)"
        }
      ],
      "group": "",
      "name": "array-ify",
      "version": "1.0.0",
      "description": "Turn anything into an array",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-ify@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/stevemao/array-ify"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-ify@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/array-ify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/array-ify/package.json"
              }
            ],
            "concludedValue": "node_modules/array-ify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jordan Harband <ljharb@gmail.com>"
        }
      ],
      "group": "",
      "name": "array-buffer-byte-length",
      "version": "1.0.2",
      "description": "Get the byte length of an ArrayBuffer, even in engines without a `.byteLength` method.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/array-buffer-byte-length@1.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/inspect-js/array-buffer-byte-length#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/inspect-js/array-buffer-byte-length.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/array-buffer-byte-length@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/array-buffer-byte-length/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/array-buffer-byte-length/package.json"
              }
            ],
            "concludedValue": "node_modules/array-buffer-byte-length/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "2.0.1",
      "description": "CLI arguments parser. Native port of python's argparse.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Python-2.0",
            "url": "https://opensource.org/licenses/Python-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/argparse@2.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/argparse@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/argparse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/argparse/package.json"
              }
            ],
            "concludedValue": "node_modules/argparse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Josh Junon <junon@zeit.co>"
        }
      ],
      "group": "",
      "name": "arg",
      "version": "4.1.3",
      "description": "Another simple argument parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/arg@4.1.3",
      "type": "library",
      "bom-ref": "pkg:npm/arg@4.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/arg/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/arg/package.json"
              }
            ],
            "concludedValue": "node_modules/arg/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "are-we-there-yet",
      "version": "4.0.2",
      "description": "Keep track of the overall completion of many disparate processes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/are-we-there-yet@4.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/are-we-there-yet"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/are-we-there-yet.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/are-we-there-yet@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/are-we-there-yet/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/are-we-there-yet/package.json"
              }
            ],
            "concludedValue": "node_modules/are-we-there-yet/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Halliday <mail@substack.net> (http://substack.net)"
        }
      ],
      "group": "",
      "name": "archy",
      "version": "1.0.0",
      "description": "render nested hierarchies `npm ls` style with unicode pipes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/archy@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/substack/node-archy.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/archy@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/archy/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/archy/package.json"
              }
            ],
            "concludedValue": "node_modules/archy/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org>"
        }
      ],
      "group": "",
      "name": "aproba",
      "version": "2.1.0",
      "description": "A ridiculously light-weight argument validator (now browser friendly)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/aproba@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/iarna/aproba"
        },
        {
          "type": "vcs",
          "url": "https://github.com/iarna/aproba"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aproba@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/aproba/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/aproba/package.json"
              }
            ],
            "concludedValue": "node_modules/aproba/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "James Talmage <james@talmage.io> (github.com/jamestalmage)"
        }
      ],
      "group": "",
      "name": "append-transform",
      "version": "2.0.0",
      "description": "Install a transform to `require.extensions` that always runs last, even if additional extensions are added later.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/append-transform@2.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/append-transform@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/append-transform/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/append-transform/package.json"
              }
            ],
            "concludedValue": "node_modules/append-transform/package.json"
          }
        ]
      },
      "tags": [
        "transform"
      ]
    },
    {
      "authors": [
        {
          "name": "Elan Shanker (https://github.com/es128)"
        }
      ],
      "group": "",
      "name": "anymatch",
      "version": "3.1.3",
      "description": "Matches strings against configurable strings, globs, regular expressions, and/or functions",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/anymatch@3.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/anymatch"
        },
        {
          "type": "vcs",
          "url": "https://github.com/micromatch/anymatch"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/anymatch@3.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/anymatch/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/anymatch/package.json"
              }
            ],
            "concludedValue": "node_modules/anymatch/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Evgeny Poberezkin"
        }
      ],
      "group": "",
      "name": "ajv",
      "version": "8.20.0",
      "description": "Another JSON Schema Validator",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ajv@8.20.0",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://ajv.js.org"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ajv@8.20.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/ajv/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/ajv/package.json"
              }
            ],
            "concludedValue": "node_modules/ajv/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "aggregate-error",
      "version": "3.1.0",
      "description": "Create an error from multiple errors",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/aggregate-error@3.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/aggregate-error@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/aggregate-error/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/aggregate-error/package.json"
              }
            ],
            "concludedValue": "node_modules/aggregate-error/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "fengmk2 <fengmk2@gmail.com> (https://github.com/fengmk2)"
        }
      ],
      "group": "",
      "name": "agentkeepalive",
      "version": "4.6.0",
      "description": "Missing keepalive http.Agent",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/agentkeepalive@4.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/node-modules/agentkeepalive.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/agentkeepalive@4.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/agentkeepalive/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/agentkeepalive/package.json"
              }
            ],
            "concludedValue": "node_modules/agentkeepalive/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)"
        }
      ],
      "group": "",
      "name": "agent-base",
      "version": "6.0.2",
      "description": "Turn a function into an `http.Agent` instance",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/agent-base@6.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/TooTallNate/node-agent-base.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/agent-base@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/agent-base/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/agent-base/package.json"
              }
            ],
            "concludedValue": "node_modules/agent-base/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-walk",
      "version": "8.3.5",
      "description": "ECMAScript (ESTree) AST walker",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn-walk@8.3.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn"
        },
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-walk@8.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/acorn-walk/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn-walk/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn-walk/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn-jsx",
      "version": "5.3.2",
      "description": "Modern, fast React.js JSX parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn-jsx@5.3.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn-jsx"
        },
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn-jsx"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn-jsx@5.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/acorn-jsx/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn-jsx/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn-jsx/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "8.18.0",
      "description": "ECMAScript parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/acorn@8.18.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/acornjs/acorn"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/acornjs/acorn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@8.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/acorn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/acorn/package.json"
              }
            ],
            "concludedValue": "node_modules/acorn/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "abbrev",
      "version": "2.0.0",
      "description": "Like ruby's abbrev module, but in js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/abbrev@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/abbrev-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/abbrev@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/abbrev/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/abbrev/package.json"
              }
            ],
            "concludedValue": "node_modules/abbrev/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Dominic Tarr <dominic.tarr@gmail.com> (http://bit.ly/dominictarr)"
        }
      ],
      "group": "",
      "name": "JSONStream",
      "version": "1.3.5",
      "description": "rawStream.pipe(JSONStream.parse()).pipe(streamOfObjects)",
      "scope": "optional",
      "licenses": [
        {
          "expression": "MIT OR Apache-2.0"
        }
      ],
      "purl": "pkg:npm/JSONStream@1.3.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "http://github.com/dominictarr/JSONStream"
        },
        {
          "type": "vcs",
          "url": "git://github.com/dominictarr/JSONStream.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/JSONStream@1.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/JSONStream/package.json"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/JSONStream/package.json"
              }
            ],
            "concludedValue": "node_modules/JSONStream/package.json"
          }
        ]
      }
    },
    {
      "group": "@xmldom",
      "name": "xmldom",
      "version": "0.8.15",
      "description": "A pure JavaScript W3C standard-based (XML DOM Level 2 Core) DOMParser and XMLSerializer module.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40xmldom/xmldom@0.8.15",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/xmldom/xmldom"
        },
        {
          "type": "vcs",
          "url": "git://github.com/xmldom/xmldom.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@xmldom/xmldom@0.8.15",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@xmldom/xmldom/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@xmldom/xmldom/package.json"
              }
            ],
            "concludedValue": "node_modules/@xmldom/xmldom/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Andrea Giammarchi"
        }
      ],
      "group": "@ungap",
      "name": "structured-clone",
      "version": "1.4.0",
      "description": "A structuredClone polyfill",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40ungap/structured-clone@1.4.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/ungap/structured-clone#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/ungap/structured-clone.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@ungap/structured-clone@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@ungap/structured-clone/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@ungap/structured-clone/package.json"
              }
            ],
            "concludedValue": "node_modules/@ungap/structured-clone/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "yargs-parser",
      "version": "21.0.3",
      "description": "TypeScript definitions for yargs-parser",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/yargs-parser@21.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/yargs-parser"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/yargs-parser@21.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/yargs-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/yargs-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/yargs-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "@types",
      "name": "yargs",
      "version": "16.0.11",
      "description": "TypeScript definitions for yargs",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/yargs@16.0.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/yargs"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/yargs@16.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/yargs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/yargs/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/yargs/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "unist",
      "version": "2.0.11",
      "description": "TypeScript definitions for unist",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/unist@2.0.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/unist"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/unist@2.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/unist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/unist/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/unist/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "npm-package-arg",
      "version": "6.1.4",
      "description": "TypeScript definitions for npm-package-arg",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/npm-package-arg@6.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/npm-package-arg"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/npm-package-arg@6.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/npm-package-arg/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/npm-package-arg/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/npm-package-arg/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "normalize-package-data",
      "version": "2.4.4",
      "description": "TypeScript definitions for normalize-package-data",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/normalize-package-data@2.4.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/normalize-package-data"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/normalize-package-data@2.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/normalize-package-data/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/normalize-package-data/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/normalize-package-data/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "node",
      "version": "20.5.1",
      "description": "TypeScript definitions for Node.js",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/node@20.5.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/node@20.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/node/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/node/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/node/package.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "minimist",
      "version": "1.2.5",
      "description": "TypeScript definitions for minimist",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/minimist@1.2.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/minimist"
        },
        {
          "type": "vcs",
          "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/minimist@1.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/minimist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/minimist/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/minimist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jason Swearingen <https://jasonswearingen.github.io>"
        }
      ],
      "group": "@types",
      "name": "json5",
      "version": "0.0.29",
      "description": "TypeScript definitions for JSON5",
      "scope": "excluded",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40types/json5@0.0.29",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://www.github.com/DefinitelyTyped/DefinitelyTyped.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/json5@0.0.29",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@types/json5/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@types/json5/package.json"
              }
            ],
            "concludedValue": "node_modules/@types/json5/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "bdehamer@github.com"
        }
      ],
      "group": "@tufjs",
      "name": "models",
      "version": "1.0.4",
      "description": "TUF metadata models",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40tufjs/models@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/theupdateframework/tuf-js/tree/main/packages/models#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/theupdateframework/tuf-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tufjs/models@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@tufjs/models/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@tufjs/models/package.json"
              }
            ],
            "concludedValue": "node_modules/@tufjs/models/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "bdehamer@github.com"
        }
      ],
      "group": "@tufjs",
      "name": "canonical-json",
      "version": "1.0.0",
      "description": "OLPC JSON canonicalization",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40tufjs/canonical-json@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/theupdateframework/tuf-js/packages/canonical-json#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/theupdateframework/tuf-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tufjs/canonical-json@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@tufjs/canonical-json/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@tufjs/canonical-json/package.json"
              }
            ],
            "concludedValue": "node_modules/@tufjs/canonical-json/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "group": "@tsconfig",
      "name": "node16",
      "version": "1.0.4",
      "description": "A base TSConfig for working with Node 16.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40tsconfig/node16@1.0.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tsconfig/bases.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tsconfig/node16@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@tsconfig/node16/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@tsconfig/node16/package.json"
              }
            ],
            "concludedValue": "node_modules/@tsconfig/node16/package.json"
          }
        ]
      }
    },
    {
      "group": "@tsconfig",
      "name": "node14",
      "version": "1.0.3",
      "description": "A base TSConfig for working with Node 14.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40tsconfig/node14@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tsconfig/bases.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tsconfig/node14@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@tsconfig/node14/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@tsconfig/node14/package.json"
              }
            ],
            "concludedValue": "node_modules/@tsconfig/node14/package.json"
          }
        ]
      }
    },
    {
      "group": "@tsconfig",
      "name": "node12",
      "version": "1.0.11",
      "description": "A base TSConfig for working with Node 12.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40tsconfig/node12@1.0.11",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tsconfig/bases.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tsconfig/node12@1.0.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@tsconfig/node12/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@tsconfig/node12/package.json"
              }
            ],
            "concludedValue": "node_modules/@tsconfig/node12/package.json"
          }
        ]
      }
    },
    {
      "group": "@tsconfig",
      "name": "node10",
      "version": "1.0.13",
      "description": "A base TSConfig for working with Node 10.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40tsconfig/node10@1.0.13",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/tsconfig/bases.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tsconfig/node10@1.0.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@tsconfig/node10/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@tsconfig/node10/package.json"
              }
            ],
            "concludedValue": "node_modules/@tsconfig/node10/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)"
        }
      ],
      "group": "@tootallnate",
      "name": "once",
      "version": "2.0.1",
      "description": "Creates a Promise that waits for a single event",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40tootallnate/once@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/TooTallNate/once.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tootallnate/once@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@tootallnate/once/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@tootallnate/once/package.json"
              }
            ],
            "concludedValue": "node_modules/@tootallnate/once/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "bdehamer@github.com"
        }
      ],
      "group": "@sigstore",
      "name": "tuf",
      "version": "1.0.3",
      "description": "Client for the Sigstore TUF repository",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40sigstore/tuf@1.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/tuf#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sigstore/sigstore-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sigstore/tuf@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@sigstore/tuf/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@sigstore/tuf/package.json"
              }
            ],
            "concludedValue": "node_modules/@sigstore/tuf/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "bdehamer@github.com"
        }
      ],
      "group": "@sigstore",
      "name": "sign",
      "version": "1.0.0",
      "description": "Sigstore signing library",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40sigstore/sign@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/sign#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sigstore/sigstore-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sigstore/sign@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@sigstore/sign/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@sigstore/sign/package.json"
              }
            ],
            "concludedValue": "node_modules/@sigstore/sign/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "bdehamer@github.com"
        }
      ],
      "group": "@sigstore",
      "name": "protobuf-specs",
      "version": "0.2.1",
      "description": "code-signing for npm packages",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40sigstore/protobuf-specs@0.2.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sigstore/protobuf-specs#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sigstore/protobuf-specs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sigstore/protobuf-specs@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@sigstore/protobuf-specs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@sigstore/protobuf-specs/package.json"
              }
            ],
            "concludedValue": "node_modules/@sigstore/protobuf-specs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "bdehamer@github.com"
        }
      ],
      "group": "@sigstore",
      "name": "bundle",
      "version": "1.1.0",
      "description": "Sigstore bundle type",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40sigstore/bundle@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/sigstore/sigstore-js/tree/main/packages/bundle#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/sigstore/sigstore-js.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@sigstore/bundle@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@sigstore/bundle/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@sigstore/bundle/package.json"
              }
            ],
            "concludedValue": "node_modules/@sigstore/bundle/package.json"
          }
        ]
      },
      "tags": [
        "bundle"
      ]
    },
    {
      "group": "@rtsao",
      "name": "scc",
      "version": "1.1.0",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40rtsao/scc@1.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/@rtsao/scc@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@rtsao/scc/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@rtsao/scc/package.json"
              }
            ],
            "concludedValue": "node_modules/@rtsao/scc/package.json"
          }
        ]
      }
    },
    {
      "group": "@pkgjs",
      "name": "parseargs",
      "version": "0.11.0",
      "description": "Polyfill of future proposal for `util.parseArgs()`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/pkgjs/parseargs#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@pkgjs/parseargs@0.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@pkgjs/parseargs/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@pkgjs/parseargs/package.json"
              }
            ],
            "concludedValue": "node_modules/@pkgjs/parseargs/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Gregor Martynus (https://twitter.com/gr2m)"
        }
      ],
      "group": "@octokit",
      "name": "types",
      "version": "9.3.2",
      "description": "Shared TypeScript definitions for Octokit projects",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40octokit/types@9.3.2",
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/types@9.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@octokit/types/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@octokit/types/package.json"
              }
            ],
            "concludedValue": "node_modules/@octokit/types/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Gregor Martynus (https://dev.to/gr2m)"
        }
      ],
      "group": "@octokit",
      "name": "tsconfig",
      "version": "1.0.2",
      "description": "TypeScript configuration for Octokit packages",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40octokit/tsconfig@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/tsconfig@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@octokit/tsconfig/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@octokit/tsconfig/package.json"
              }
            ],
            "concludedValue": "node_modules/@octokit/tsconfig/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Gregor Martynus (https://github.com/gr2m)"
        }
      ],
      "group": "@octokit",
      "name": "rest",
      "version": "19.0.13",
      "description": "GitHub REST API client for Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40octokit/rest@19.0.13",
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/rest@19.0.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@octokit/rest/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@octokit/rest/package.json"
              }
            ],
            "concludedValue": "node_modules/@octokit/rest/package.json"
          }
        ]
      },
      "tags": [
        "api",
        "rest"
      ]
    },
    {
      "group": "@octokit",
      "name": "request-error",
      "version": "3.0.3",
      "description": "Error class for Octokit request errors",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40octokit/request-error@3.0.3",
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/request-error@3.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@octokit/request-error/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@octokit/request-error/package.json"
              }
            ],
            "concludedValue": "node_modules/@octokit/request-error/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Gregor Martynus (https://github.com/gr2m)"
        }
      ],
      "group": "@octokit",
      "name": "request",
      "version": "6.2.8",
      "description": "Send parameterized requests to GitHub's APIs with sensible defaults in browsers and Node",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40octokit/request@6.2.8",
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/request@6.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@octokit/request/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@octokit/request/package.json"
              }
            ],
            "concludedValue": "node_modules/@octokit/request/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Gregor Martynus (https://twitter.com/gr2m)"
        }
      ],
      "group": "@octokit",
      "name": "plugin-rest-endpoint-methods",
      "version": "7.2.3",
      "description": "Octokit plugin adding one method for all of api.github.com REST API endpoints",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40octokit/plugin-rest-endpoint-methods@7.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/plugin-rest-endpoint-methods@7.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@octokit/plugin-rest-endpoint-methods/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@octokit/plugin-rest-endpoint-methods/package.json"
              }
            ],
            "concludedValue": "node_modules/@octokit/plugin-rest-endpoint-methods/package.json"
          }
        ]
      },
      "tags": [
        "api",
        "rest"
      ]
    },
    {
      "authors": [
        {
          "name": "Gregor Martynus (https://twitter.com/gr2m)"
        }
      ],
      "group": "@octokit",
      "name": "types",
      "version": "10.0.0",
      "description": "Shared TypeScript definitions for Octokit projects",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40octokit/types@10.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/types@10.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@octokit/plugin-rest-endpoint-methods/node_modules/@octokit/types/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@octokit/plugin-rest-endpoint-methods/node_modules/@octokit/types/package.json"
              }
            ],
            "concludedValue": "node_modules/@octokit/plugin-rest-endpoint-methods/node_modules/@octokit/types/package.json"
          }
        ]
      }
    },
    {
      "group": "@octokit",
      "name": "plugin-request-log",
      "version": "1.0.4",
      "description": "Log all requests and request errors",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40octokit/plugin-request-log@1.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/plugin-request-log@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@octokit/plugin-request-log/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@octokit/plugin-request-log/package.json"
              }
            ],
            "concludedValue": "node_modules/@octokit/plugin-request-log/package.json"
          }
        ]
      }
    },
    {
      "group": "@octokit",
      "name": "plugin-paginate-rest",
      "version": "6.1.2",
      "description": "Octokit plugin to paginate REST API endpoint responses",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40octokit/plugin-paginate-rest@6.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/plugin-paginate-rest@6.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@octokit/plugin-paginate-rest/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@octokit/plugin-paginate-rest/package.json"
              }
            ],
            "concludedValue": "node_modules/@octokit/plugin-paginate-rest/package.json"
          }
        ]
      },
      "tags": [
        "api",
        "rest"
      ]
    },
    {
      "authors": [
        {
          "name": "Gregor Martynus (https://twitter.com/gr2m)"
        }
      ],
      "group": "@octokit",
      "name": "openapi-types",
      "version": "18.1.1",
      "description": "Generated TypeScript definitions based on GitHub's OpenAPI spec for api.github.com",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40octokit/openapi-types@18.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/octokit/openapi-types.ts.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/openapi-types@18.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@octokit/openapi-types/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@octokit/openapi-types/package.json"
              }
            ],
            "concludedValue": "node_modules/@octokit/openapi-types/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Gregor Martynus (https://github.com/gr2m)"
        }
      ],
      "group": "@octokit",
      "name": "graphql",
      "version": "5.0.6",
      "description": "GitHub GraphQL API client for browsers and Node",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40octokit/graphql@5.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/graphql@5.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@octokit/graphql/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@octokit/graphql/package.json"
              }
            ],
            "concludedValue": "node_modules/@octokit/graphql/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "Gregor Martynus (https://github.com/gr2m)"
        }
      ],
      "group": "@octokit",
      "name": "endpoint",
      "version": "7.0.6",
      "description": "Turns REST API endpoints into generic request options",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40octokit/endpoint@7.0.6",
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/endpoint@7.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@octokit/endpoint/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@octokit/endpoint/package.json"
              }
            ],
            "concludedValue": "node_modules/@octokit/endpoint/package.json"
          }
        ]
      },
      "tags": [
        "api",
        "rest"
      ]
    },
    {
      "authors": [
        {
          "name": "Gregor Martynus (https://github.com/gr2m)"
        }
      ],
      "group": "@octokit",
      "name": "core",
      "version": "4.2.4",
      "description": "Extendable client for GitHub's REST & GraphQL APIs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40octokit/core@4.2.4",
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/core@4.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@octokit/core/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@octokit/core/package.json"
              }
            ],
            "concludedValue": "node_modules/@octokit/core/package.json"
          }
        ]
      },
      "tags": [
        "rest"
      ]
    },
    {
      "authors": [
        {
          "name": "Gregor Martynus (https://github.com/gr2m)"
        }
      ],
      "group": "@octokit",
      "name": "auth-token",
      "version": "3.0.4",
      "description": "GitHub API token authentication for browsers and Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40octokit/auth-token@3.0.4",
      "type": "library",
      "bom-ref": "pkg:npm/@octokit/auth-token@3.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@octokit/auth-token/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@octokit/auth-token/package.json"
              }
            ],
            "concludedValue": "node_modules/@octokit/auth-token/package.json"
          }
        ]
      },
      "tags": [
        "api",
        "token"
      ]
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "template-oss",
      "version": "4.11.0",
      "description": "templated files used in npm CLI team oss projects",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/template-oss@4.11.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/template-oss.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/template-oss@4.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/template-oss/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/template-oss/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/template-oss/package.json"
          }
        ]
      },
      "tags": [
        "cli"
      ]
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "run-script",
      "version": "6.0.2",
      "description": "Run a lifecycle script for a package (descendant of npm-lifecycle)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/run-script@6.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/run-script.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/run-script@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/run-script/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/run-script/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/run-script/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "query",
      "version": "3.1.0",
      "description": "npm query parser and tools",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/query@3.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/query.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/query@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/query/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/query/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/query/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "promise-spawn",
      "version": "6.0.2",
      "description": "spawn processes the way the npm cli likes to do",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/promise-spawn@6.0.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/promise-spawn.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/promise-spawn@6.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/promise-spawn/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/promise-spawn/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/promise-spawn/package.json"
          }
        ]
      },
      "tags": [
        "cli"
      ]
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "package-json",
      "version": "3.1.1",
      "description": "Programmatic API to update package.json",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/package-json@3.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/package-json.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/package-json@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/package-json/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/package-json/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/package-json/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "node-gyp",
      "version": "3.0.0",
      "description": "Tools for dealing with node-gyp packages",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/node-gyp@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/node-gyp.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/node-gyp@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/node-gyp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/node-gyp/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/node-gyp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "name-from-folder",
      "version": "2.0.0",
      "description": "Get the package name from a folder path",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/name-from-folder@2.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/name-from-folder.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/name-from-folder@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/name-from-folder/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/name-from-folder/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/name-from-folder/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "move-file",
      "version": "2.0.1",
      "description": "move a file (fork of move-file)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/move-file@2.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/move-file.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/move-file@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/move-file/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/move-file/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/move-file/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "metavuln-calculator",
      "version": "5.0.1",
      "description": "Calculate meta-vulnerabilities from package security advisories",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/metavuln-calculator@5.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/metavuln-calculator.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/metavuln-calculator@5.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/metavuln-calculator/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/metavuln-calculator/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/metavuln-calculator/package.json"
          }
        ]
      },
      "tags": [
        "security"
      ]
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "map-workspaces",
      "version": "3.0.6",
      "description": "Retrieves a name:pathname Map for a given workspaces config",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/map-workspaces@3.0.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/map-workspaces.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/map-workspaces@3.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/map-workspaces/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/map-workspaces/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/map-workspaces/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "installed-package-contents",
      "version": "2.1.0",
      "description": "Get the list of files installed in a package in node_modules, including bundled dependencies",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/installed-package-contents@2.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/installed-package-contents.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/installed-package-contents@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/installed-package-contents/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/installed-package-contents/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/installed-package-contents/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "git",
      "version": "4.1.0",
      "description": "a util for spawning git from npm CLI contexts",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/git@4.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/git.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/git@4.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/git/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/git/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/git/package.json"
          }
        ]
      },
      "tags": [
        "cli"
      ]
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "fs",
      "version": "3.1.1",
      "description": "filesystem utilities for the npm cli",
      "scope": "required",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/fs@3.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/fs.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/fs@3.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/fs/package.json"
        },
        {
          "name": "ImportedModules",
          "value": "fs"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/fs/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/fs/package.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/extract.js",
            "line": 6
          },
          {
            "location": "lib/get-write-flag.js",
            "line": 11
          },
          {
            "location": "lib/list.js",
            "line": 9
          },
          {
            "location": "lib/mkdir.js",
            "line": 8
          },
          {
            "location": "lib/pack.js",
            "line": 54
          },
          {
            "location": "lib/replace.js",
            "line": 6
          },
          {
            "location": "lib/unpack.js",
            "line": 11
          },
          {
            "location": "lib/write-entry.js",
            "line": 5
          },
          {
            "location": "scripts/generate-parse-fixtures.js",
            "line": 3
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "eslint-config",
      "version": "4.0.5",
      "description": "eslint config used by the npm cli team",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/eslint-config@4.0.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/npm/eslint-config.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/eslint-config@4.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/eslint-config/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/eslint-config/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/eslint-config/package.json"
          }
        ]
      },
      "tags": [
        "cli"
      ]
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "arborist",
      "version": "6.5.1",
      "description": "Manage node_modules trees",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/arborist@6.5.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/cli.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/arborist@6.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/arborist/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/arborist/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/arborist/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "@npmcli",
      "name": "package-json",
      "version": "4.0.1",
      "description": "Programmatic API to update package.json",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40npmcli/package-json@4.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/package-json.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@npmcli/package-json@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@npmcli/arborist/node_modules/@npmcli/package-json/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@npmcli/arborist/node_modules/@npmcli/package-json/package.json"
              }
            ],
            "concludedValue": "node_modules/@npmcli/arborist/node_modules/@npmcli/package-json/package.json"
          }
        ]
      },
      "tags": [
        "api"
      ]
    },
    {
      "group": "@nodelib",
      "name": "fs.walk",
      "version": "1.2.8",
      "description": "A library for efficiently walking a directory recursively",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.walk@1.2.8",
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.walk@1.2.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@nodelib/fs.walk/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@nodelib/fs.walk/package.json"
              }
            ],
            "concludedValue": "node_modules/@nodelib/fs.walk/package.json"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.stat",
      "version": "2.0.5",
      "description": "Get the status of a file with some features",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.stat@2.0.5",
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.stat@2.0.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@nodelib/fs.stat/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@nodelib/fs.stat/package.json"
              }
            ],
            "concludedValue": "node_modules/@nodelib/fs.stat/package.json"
          }
        ]
      }
    },
    {
      "group": "@nodelib",
      "name": "fs.scandir",
      "version": "2.1.5",
      "description": "List files and directories inside the specified directory",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40nodelib/fs.scandir@2.1.5",
      "type": "library",
      "bom-ref": "pkg:npm/@nodelib/fs.scandir@2.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@nodelib/fs.scandir/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@nodelib/fs.scandir/package.json"
              }
            ],
            "concludedValue": "node_modules/@nodelib/fs.scandir/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Daniel Stockman (https://github.com/evocateur)"
        }
      ],
      "group": "@lerna",
      "name": "validation-error",
      "version": "4.0.0",
      "description": "An internal Lerna tool",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/validation-error@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lerna/lerna/tree/master/core/validation-error#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/lerna/lerna.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@lerna/validation-error@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/validation-error/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/validation-error/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/validation-error/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-ansi",
      "version": "3.0.1",
      "description": "Strip ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@3.0.1",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/validation-error/node_modules/strip-ansi/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/node_modules/strip-ansi/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/describe-ref/node_modules/strip-ansi/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/collect-updates/node_modules/strip-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/collect-updates/node_modules/strip-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/collect-updates/node_modules/strip-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.1.1",
      "description": "The string_decoder module from Node core",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string_decoder@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodejs/string_decoder"
        },
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/string_decoder.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/validation-error/node_modules/string_decoder/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/node_modules/string_decoder/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/describe-ref/node_modules/string_decoder/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/collect-updates/node_modules/string_decoder/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/collect-updates/node_modules/string_decoder/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/collect-updates/node_modules/string_decoder/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "string-width",
      "version": "1.0.2",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string-width@1.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/validation-error/node_modules/string-width/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/node_modules/string-width/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/describe-ref/node_modules/string-width/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/collect-updates/node_modules/string-width/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/collect-updates/node_modules/string-width/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/collect-updates/node_modules/string-width/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org)"
        }
      ],
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.2",
      "description": "Safer Node.js Buffer API",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/feross/safe-buffer"
        },
        {
          "type": "vcs",
          "url": "git://github.com/feross/safe-buffer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/validation-error/node_modules/safe-buffer/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/node_modules/safe-buffer/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/describe-ref/node_modules/safe-buffer/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/collect-updates/node_modules/safe-buffer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/collect-updates/node_modules/safe-buffer/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/collect-updates/node_modules/safe-buffer/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.8",
      "description": "Streams3, a user-land copy of the stream library from Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.8",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git://github.com/nodejs/readable-stream"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/validation-error/node_modules/readable-stream/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/node_modules/readable-stream/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/describe-ref/node_modules/readable-stream/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/collect-updates/node_modules/readable-stream/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/collect-updates/node_modules/readable-stream/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/collect-updates/node_modules/readable-stream/package.json"
          }
        ]
      },
      "tags": [
        "stream"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "npmlog",
      "version": "4.1.2",
      "description": "logger for npm",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/npmlog@4.1.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/npmlog.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npmlog@4.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/validation-error/node_modules/npmlog/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/node_modules/npmlog/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/describe-ref/node_modules/npmlog/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/collect-updates/node_modules/npmlog/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/collect-updates/node_modules/npmlog/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/collect-updates/node_modules/npmlog/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)"
        }
      ],
      "group": "",
      "name": "isarray",
      "version": "1.0.0",
      "description": "Array#isArray for older browsers",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/juliangruber/isarray"
        },
        {
          "type": "vcs",
          "url": "git://github.com/juliangruber/isarray.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/validation-error/node_modules/isarray/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/node_modules/isarray/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/describe-ref/node_modules/isarray/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/collect-updates/node_modules/isarray/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/collect-updates/node_modules/isarray/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/collect-updates/node_modules/isarray/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "is-fullwidth-code-point",
      "version": "1.0.0",
      "description": "Check if the character represented by a given Unicode code point is fullwidth",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "type": "library",
      "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/validation-error/node_modules/is-fullwidth-code-point/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/node_modules/is-fullwidth-code-point/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/describe-ref/node_modules/is-fullwidth-code-point/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/collect-updates/node_modules/is-fullwidth-code-point/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/collect-updates/node_modules/is-fullwidth-code-point/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/collect-updates/node_modules/is-fullwidth-code-point/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org>"
        }
      ],
      "group": "",
      "name": "gauge",
      "version": "2.7.4",
      "description": "A terminal based horizontal guage",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gauge@2.7.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/iarna/gauge"
        },
        {
          "type": "vcs",
          "url": "https://github.com/iarna/gauge"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gauge@2.7.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/validation-error/node_modules/gauge/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/node_modules/gauge/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/describe-ref/node_modules/gauge/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/collect-updates/node_modules/gauge/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/collect-updates/node_modules/gauge/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/collect-updates/node_modules/gauge/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner (http://re-becca.org)"
        }
      ],
      "group": "",
      "name": "are-we-there-yet",
      "version": "1.1.7",
      "description": "Keep track of the overall completion of many disparate processes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/are-we-there-yet@1.1.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/iarna/are-we-there-yet"
        },
        {
          "type": "vcs",
          "url": "https://github.com/iarna/are-we-there-yet.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/are-we-there-yet@1.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/validation-error/node_modules/are-we-there-yet/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/node_modules/are-we-there-yet/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/describe-ref/node_modules/are-we-there-yet/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/collect-updates/node_modules/are-we-there-yet/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/collect-updates/node_modules/are-we-there-yet/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/collect-updates/node_modules/are-we-there-yet/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org>"
        }
      ],
      "group": "",
      "name": "aproba",
      "version": "1.2.0",
      "description": "A ridiculously light-weight argument validator (now browser friendly)",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/aproba@1.2.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/iarna/aproba"
        },
        {
          "type": "vcs",
          "url": "https://github.com/iarna/aproba"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/aproba@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/validation-error/node_modules/aproba/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/node_modules/aproba/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/describe-ref/node_modules/aproba/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/collect-updates/node_modules/aproba/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/collect-updates/node_modules/aproba/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/collect-updates/node_modules/aproba/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-regex",
      "version": "2.1.1",
      "description": "Regular expression for matching ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@2.1.1",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/validation-error/node_modules/ansi-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/node_modules/ansi-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/describe-ref/node_modules/ansi-regex/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/collect-updates/node_modules/ansi-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/collect-updates/node_modules/ansi-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/collect-updates/node_modules/ansi-regex/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Daniel Stockman (https://github.com/evocateur)"
        }
      ],
      "group": "@lerna",
      "name": "run-topologically",
      "version": "4.0.0",
      "description": "An internal Lerna tool",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/run-topologically@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lerna/lerna/tree/master/utils/run-topologically#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/lerna/lerna.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@lerna/run-topologically@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/run-topologically/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/run-topologically/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/run-topologically/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Benjamin Weggersen (https://github.com/bweggersen)"
        }
      ],
      "group": "@lerna",
      "name": "query-graph",
      "version": "4.0.0",
      "description": "An internal Lerna tool",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/query-graph@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lerna/lerna/tree/master/utils/query-graph#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/lerna/lerna.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@lerna/query-graph@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/query-graph/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/query-graph/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/query-graph/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Daniel Stockman <daniel.stockman@gmail.com>"
        }
      ],
      "group": "@lerna",
      "name": "prerelease-id-from-version",
      "version": "4.0.0",
      "description": "Get the prerelease ID from a version string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/prerelease-id-from-version@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lerna/lerna/tree/master/utils/prerelease-id-from-version#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/lerna/lerna.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@lerna/prerelease-id-from-version@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/prerelease-id-from-version/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/prerelease-id-from-version/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/prerelease-id-from-version/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Daniel Stockman (https://github.com/evocateur)"
        }
      ],
      "group": "@lerna",
      "name": "package-graph",
      "version": "4.0.0",
      "description": "Lerna's internal representation of a package graph",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/package-graph@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lerna/lerna/tree/master/core/package-graph#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/lerna/lerna.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@lerna/package-graph@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/package-graph/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/package-graph/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "zeke"
        }
      ],
      "group": "",
      "name": "validate-npm-package-name",
      "version": "3.0.0",
      "description": "Give me a string and I'll tell you if it's a valid npm package name",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/validate-npm-package-name@3.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/validate-npm-package-name"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/validate-npm-package-name"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/validate-npm-package-name@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/node_modules/validate-npm-package-name/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package/node_modules/validate-npm-package-name/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/package/node_modules/validate-npm-package-name/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/package/node_modules/validate-npm-package-name/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)"
        }
      ],
      "group": "",
      "name": "npm-package-arg",
      "version": "8.1.5",
      "description": "Parse the things that can be arguments to `npm install`",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/npm-package-arg@8.1.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/npm-package-arg"
        },
        {
          "type": "vcs",
          "url": "https://github.com/npm/npm-package-arg"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/npm-package-arg@8.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package-graph/node_modules/npm-package-arg/package.json"
        },
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package/node_modules/npm-package-arg/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/package/node_modules/npm-package-arg/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/package/node_modules/npm-package-arg/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Daniel Stockman (https://github.com/evocateur)"
        }
      ],
      "group": "@lerna",
      "name": "package",
      "version": "4.0.0",
      "description": "Lerna's internal representation of a package",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/package@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lerna/lerna/tree/master/core/package#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/lerna/lerna.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@lerna/package@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/package/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/package/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/package/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Daniel Stockman <daniel.stockman@gmail.com>"
        }
      ],
      "group": "@lerna",
      "name": "describe-ref",
      "version": "4.0.0",
      "description": "Parse git describe output for lerna-related tags",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/describe-ref@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lerna/lerna/tree/master/utils/describe-ref#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/lerna/lerna.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@lerna/describe-ref@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/describe-ref/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/describe-ref/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/describe-ref/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Daniel Stockman (https://github.com/evocateur)"
        }
      ],
      "group": "@lerna",
      "name": "collect-updates",
      "version": "4.0.0",
      "description": "An internal Lerna tool",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/collect-updates@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lerna/lerna/tree/master/utils/collect-updates#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/lerna/lerna.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@lerna/collect-updates@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/collect-updates/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/collect-updates/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/collect-updates/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Daniel Stockman (https://github.com/evocateur)"
        }
      ],
      "group": "@lerna",
      "name": "child-process",
      "version": "4.0.0",
      "description": "Lerna's internal child_process wrapper",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40lerna/child-process@4.0.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/lerna/lerna/tree/master/core/child-process#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/lerna/lerna.git"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/@lerna/child-process@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@lerna/child-process/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@lerna/child-process/package.json"
              }
            ],
            "concludedValue": "node_modules/@lerna/child-process/package.json"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.31",
      "description": "Trace the original position through a source map",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/trace-mapping"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jridgewell/sourcemaps.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@jridgewell/trace-mapping/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@jridgewell/trace-mapping/package.json"
              }
            ],
            "concludedValue": "node_modules/@jridgewell/trace-mapping/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "sourcemap-codec",
      "version": "1.6.0",
      "description": "Encode/decode sourcemap mappings",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.6.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/sourcemap-codec"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jridgewell/sourcemaps.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.6.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@jridgewell/sourcemap-codec/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@jridgewell/sourcemap-codec/package.json"
              }
            ],
            "concludedValue": "node_modules/@jridgewell/sourcemap-codec/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "resolve-uri",
      "version": "3.1.2",
      "description": "Resolve a URI relative to an optional base URI",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@jridgewell/resolve-uri/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@jridgewell/resolve-uri/package.json"
              }
            ],
            "concludedValue": "node_modules/@jridgewell/resolve-uri/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "remapping",
      "version": "2.3.5",
      "description": "Remap sequential sourcemaps through transformations to point at the original source code",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/remapping@2.3.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/remapping"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jridgewell/sourcemaps.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/remapping@2.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@jridgewell/remapping/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@jridgewell/remapping/package.json"
              }
            ],
            "concludedValue": "node_modules/@jridgewell/remapping/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "gen-mapping",
      "version": "0.3.13",
      "description": "Generate source maps",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.13",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/jridgewell/sourcemaps/tree/main/packages/gen-mapping"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/jridgewell/sourcemaps.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@jridgewell/gen-mapping/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@jridgewell/gen-mapping/package.json"
              }
            ],
            "concludedValue": "node_modules/@jridgewell/gen-mapping/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Corey Farrell"
        }
      ],
      "group": "@istanbuljs",
      "name": "schema",
      "version": "0.1.6",
      "description": "Schemas describing various structures used by nyc and istanbuljs",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40istanbuljs/schema@0.1.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/istanbuljs/schema#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/istanbuljs/schema.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@istanbuljs/schema@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@istanbuljs/schema/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@istanbuljs/schema/package.json"
              }
            ],
            "concludedValue": "node_modules/@istanbuljs/schema/package.json"
          }
        ]
      }
    },
    {
      "group": "@istanbuljs",
      "name": "load-nyc-config",
      "version": "1.1.0",
      "description": "Utility function to load nyc configuration",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40istanbuljs/load-nyc-config@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/istanbuljs/load-nyc-config#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/istanbuljs/load-nyc-config.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@istanbuljs/load-nyc-config@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@istanbuljs/load-nyc-config/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@istanbuljs/load-nyc-config/package.json"
              }
            ],
            "concludedValue": "node_modules/@istanbuljs/load-nyc-config/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Vladimir Zapparov <dervus.grim@gmail.com>"
        }
      ],
      "group": "",
      "name": "js-yaml",
      "version": "3.15.2",
      "description": "YAML 1.2 parser and serializer",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/js-yaml@3.15.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/nodeca/js-yaml"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/js-yaml@3.15.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml/package.json"
              }
            ],
            "concludedValue": "node_modules/@istanbuljs/load-nyc-config/node_modules/js-yaml/package.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "argparse",
      "version": "1.0.10",
      "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/argparse@1.0.10",
      "type": "library",
      "bom-ref": "pkg:npm/argparse@1.0.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/argparse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@istanbuljs/load-nyc-config/node_modules/argparse/package.json"
              }
            ],
            "concludedValue": "node_modules/@istanbuljs/load-nyc-config/node_modules/argparse/package.json"
          }
        ]
      },
      "tags": [
        "cli"
      ]
    },
    {
      "authors": [
        {
          "name": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)"
        }
      ],
      "group": "@isaacs",
      "name": "string-locale-compare",
      "version": "1.1.0",
      "description": "Compare strings with Intl.Collator if available, falling back to String.localeCompare otherwise",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40isaacs/string-locale-compare@1.1.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/isaacs/string-locale-compare"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@isaacs/string-locale-compare@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@isaacs/string-locale-compare/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@isaacs/string-locale-compare/package.json"
              }
            ],
            "concludedValue": "node_modules/@isaacs/string-locale-compare/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <ben@npmjs.com>"
        }
      ],
      "group": "@isaacs",
      "name": "cliui",
      "version": "8.0.2",
      "description": "easily create complex multi-column command-line-interfaces",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40isaacs/cliui@8.0.2",
      "type": "library",
      "bom-ref": "pkg:npm/@isaacs/cliui@8.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@isaacs/cliui/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@isaacs/cliui/package.json"
              }
            ],
            "concludedValue": "node_modules/@isaacs/cliui/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "wrap-ansi",
      "version": "8.1.0",
      "description": "Wordwrap a string with ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wrap-ansi@8.1.0",
      "type": "library",
      "bom-ref": "pkg:npm/wrap-ansi@8.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@isaacs/cliui/node_modules/wrap-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@isaacs/cliui/node_modules/wrap-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/@isaacs/cliui/node_modules/wrap-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "strip-ansi",
      "version": "7.2.0",
      "description": "Strip ANSI escape codes from a string",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/strip-ansi@7.2.0",
      "type": "library",
      "bom-ref": "pkg:npm/strip-ansi@7.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@isaacs/cliui/node_modules/strip-ansi/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@isaacs/cliui/node_modules/strip-ansi/package.json"
              }
            ],
            "concludedValue": "node_modules/@isaacs/cliui/node_modules/strip-ansi/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "string-width",
      "version": "5.1.2",
      "description": "Get the visual width of a string - the number of columns required to display it",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/string-width@5.1.2",
      "type": "library",
      "bom-ref": "pkg:npm/string-width@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@isaacs/cliui/node_modules/string-width/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@isaacs/cliui/node_modules/string-width/package.json"
              }
            ],
            "concludedValue": "node_modules/@isaacs/cliui/node_modules/string-width/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mathias Bynens (https://mathiasbynens.be/)"
        }
      ],
      "group": "",
      "name": "emoji-regex",
      "version": "9.2.2",
      "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/emoji-regex@9.2.2",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://mths.be/emoji-regex"
        },
        {
          "type": "vcs",
          "url": "https://github.com/mathiasbynens/emoji-regex.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/emoji-regex@9.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@isaacs/cliui/node_modules/emoji-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@isaacs/cliui/node_modules/emoji-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/@isaacs/cliui/node_modules/emoji-regex/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-styles",
      "version": "6.2.3",
      "description": "ANSI escape codes for styling strings in the terminal",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-styles@6.2.3",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-styles@6.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@isaacs/cliui/node_modules/ansi-styles/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@isaacs/cliui/node_modules/ansi-styles/package.json"
              }
            ],
            "concludedValue": "node_modules/@isaacs/cliui/node_modules/ansi-styles/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
        }
      ],
      "group": "",
      "name": "ansi-regex",
      "version": "6.3.0",
      "description": "Regular expression for matching ANSI escape codes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ansi-regex@6.3.0",
      "type": "library",
      "bom-ref": "pkg:npm/ansi-regex@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json"
              }
            ],
            "concludedValue": "node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json"
          }
        ]
      },
      "tags": [
        "escape"
      ]
    },
    {
      "authors": [
        {
          "name": "Rebecca Turner <me@re-becca.org> (http://re-becca.org/)"
        }
      ],
      "group": "@iarna",
      "name": "toml",
      "version": "2.2.5",
      "description": "Better TOML parsing and stringifying all in that familiar JSON interface.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40iarna/toml@2.2.5",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/iarna/iarna-toml#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/iarna/iarna-toml.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@iarna/toml@2.2.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@iarna/toml/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@iarna/toml/package.json"
              }
            ],
            "concludedValue": "node_modules/@iarna/toml/package.json"
          }
        ]
      },
      "tags": [
        "json"
      ]
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@humanwhocodes",
      "name": "object-schema",
      "version": "2.0.3",
      "description": "An object schema merger/validator",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40humanwhocodes/object-schema@2.0.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/humanwhocodes/object-schema#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/humanwhocodes/object-schema.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanwhocodes/object-schema@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@humanwhocodes/object-schema/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@humanwhocodes/object-schema/package.json"
              }
            ],
            "concludedValue": "node_modules/@humanwhocodes/object-schema/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zaks"
        }
      ],
      "group": "@humanwhocodes",
      "name": "module-importer",
      "version": "1.0.1",
      "description": "Universal module importer for Node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40humanwhocodes/module-importer@1.0.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/humanwhocodes/module-importer.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanwhocodes/module-importer@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@humanwhocodes/module-importer/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@humanwhocodes/module-importer/package.json"
              }
            ],
            "concludedValue": "node_modules/@humanwhocodes/module-importer/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@humanwhocodes",
      "name": "config-array",
      "version": "0.13.0",
      "description": "Glob-based configuration matching.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40humanwhocodes/config-array@0.13.0",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/humanwhocodes/config-array#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/humanwhocodes/config-array.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@humanwhocodes/config-array@0.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@humanwhocodes/config-array/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@humanwhocodes/config-array/package.json"
              }
            ],
            "concludedValue": "node_modules/@humanwhocodes/config-array/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Jeff Ching <chingor@google.com>"
        }
      ],
      "group": "@google-automations",
      "name": "git-file-utils",
      "version": "1.2.6",
      "description": "Utilities for github file operation",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40google-automations/git-file-utils@1.2.6",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/googleapis/repo-automation-bots"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@google-automations/git-file-utils@1.2.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@google-automations/git-file-utils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@google-automations/git-file-utils/package.json"
              }
            ],
            "concludedValue": "node_modules/@google-automations/git-file-utils/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Gar <gar+npm@danger.computer>"
        }
      ],
      "group": "@gar",
      "name": "promisify",
      "version": "1.1.3",
      "description": "Promisify an entire class or object",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40gar/promisify@1.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/wraithgar/gar-promisify.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@gar/promisify@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@gar/promisify/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@gar/promisify/package.json"
              }
            ],
            "concludedValue": "node_modules/@gar/promisify/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Brian White <mscdex@mscdex.net>"
        }
      ],
      "group": "@fastify",
      "name": "busboy",
      "version": "2.1.1",
      "description": "A streaming parser for HTML form data for node.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40fastify/busboy@2.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/fastify/busboy.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@fastify/busboy@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@fastify/busboy/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@fastify/busboy/package.json"
              }
            ],
            "concludedValue": "node_modules/@fastify/busboy/package.json"
          }
        ]
      },
      "tags": [
        "html"
      ]
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima"
        }
      ],
      "group": "@eslint-community",
      "name": "regexpp",
      "version": "4.12.2",
      "description": "Regular expression parser for ECMAScript.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40eslint-community/regexpp@4.12.2",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint-community/regexpp#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint-community/regexpp"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint-community/regexpp@4.12.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint-community/regexpp/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint-community/regexpp/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint-community/regexpp/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Toru Nagashima"
        }
      ],
      "group": "@eslint-community",
      "name": "eslint-utils",
      "version": "4.10.1",
      "description": "Utilities for ESLint plugins.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40eslint-community/eslint-utils@4.10.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint-community/eslint-utils#readme"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint-community/eslint-utils"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint-community/eslint-utils@4.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint-community/eslint-utils/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint-community/eslint-utils/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint-community/eslint-utils/package.json"
          }
        ]
      },
      "tags": [
        "plugins"
      ]
    },
    {
      "group": "@eslint",
      "name": "js",
      "version": "8.57.1",
      "description": "ESLint JavaScript language implementation",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/js@8.57.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://eslint.org"
        },
        {
          "type": "vcs",
          "url": "https://github.com/eslint/eslint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/js@8.57.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/js/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/js/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/js/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Nicholas C. Zakas"
        }
      ],
      "group": "@eslint",
      "name": "eslintrc",
      "version": "2.1.4",
      "description": "The legacy ESLintRC config file format for ESLint",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40eslint/eslintrc@2.1.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/eslint/eslintrc#readme"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@eslint/eslintrc@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@eslint/eslintrc/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@eslint/eslintrc/package.json"
              }
            ],
            "concludedValue": "node_modules/@eslint/eslintrc/package.json"
          }
        ]
      }
    },
    {
      "group": "@cspotcode",
      "name": "source-map-support",
      "version": "0.8.1",
      "description": "Fixes stack traces for files with source maps",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40cspotcode/source-map-support@0.8.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/cspotcode/node-source-map-support"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@cspotcode/source-map-support@0.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@cspotcode/source-map-support/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@cspotcode/source-map-support/package.json"
              }
            ],
            "concludedValue": "node_modules/@cspotcode/source-map-support/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Justin Ridgewell <justin@ridgewell.name>"
        }
      ],
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.9",
      "description": "Trace the original position through a source map",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.9",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "git+https://github.com/jridgewell/trace-mapping.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@cspotcode/source-map-support/node_modules/@jridgewell/trace-mapping/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@cspotcode/source-map-support/node_modules/@jridgewell/trace-mapping/package.json"
              }
            ],
            "concludedValue": "node_modules/@cspotcode/source-map-support/node_modules/@jridgewell/trace-mapping/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Ben Coe <bencoe@gmail.com>"
        }
      ],
      "group": "@conventional-commits",
      "name": "parser",
      "version": "0.4.1",
      "description": "reference implementation of conventionalcommits.org spec",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40conventional-commits/parser@0.4.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/conventional-commits/parser#readme"
        },
        {
          "type": "vcs",
          "url": "git+ssh://git@github.com/conventional-commits/parser.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@conventional-commits/parser@0.4.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@conventional-commits/parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@conventional-commits/parser/package.json"
              }
            ],
            "concludedValue": "node_modules/@conventional-commits/parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "types",
      "version": "17.8.1",
      "description": "Shared types for commitlint packages",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/types@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/types@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/types/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/types/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/types/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "top-level",
      "version": "17.8.1",
      "description": "Lint your commit messages",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/top-level@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/top-level@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/top-level/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/top-level/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/top-level/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "to-lines",
      "version": "17.8.1",
      "description": "Lint your commit messages",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/to-lines@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/to-lines@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/to-lines/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/to-lines/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/to-lines/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "rules",
      "version": "17.8.1",
      "description": "Lint your commit messages",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/rules@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/rules@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/rules/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/rules/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/rules/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "resolve-extends",
      "version": "17.8.1",
      "description": "Lint your commit messages",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/resolve-extends@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/resolve-extends@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/resolve-extends/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/resolve-extends/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/resolve-extends/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "read",
      "version": "17.8.1",
      "description": "Read commit messages from a specified range or last edit",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/read@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/read@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/read/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/read/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/read/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "parse",
      "version": "17.8.1",
      "description": "Lint your commit messages",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/parse@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/parse@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/parse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/parse/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/parse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "message",
      "version": "17.8.1",
      "description": "Lint your commit messages",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/message@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/message@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/message/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/message/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/message/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "load",
      "version": "17.8.1",
      "description": "Load shared commitlint configuration",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/load@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/load@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/load/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/load/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/load/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "lint",
      "version": "17.8.1",
      "description": "Lint a string against commitlint rules",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/lint@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/lint@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/lint/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/lint/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/lint/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "is-ignored",
      "version": "17.8.1",
      "description": "Lint your commit messages",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/is-ignored@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/is-ignored@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/is-ignored/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/is-ignored/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/is-ignored/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "GitHub Inc."
        }
      ],
      "group": "",
      "name": "semver",
      "version": "7.5.4",
      "description": "The semantic version parser used by npm.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/semver@7.5.4",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/npm/node-semver.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@7.5.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/is-ignored/node_modules/semver/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/is-ignored/node_modules/semver/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/is-ignored/node_modules/semver/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "format",
      "version": "17.8.1",
      "description": "Format commitlint reports",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/format@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/format@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/format/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/format/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/format/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "execute-rule",
      "version": "17.8.1",
      "description": "Lint your commit messages",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/execute-rule@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/execute-rule@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/execute-rule/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/execute-rule/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/execute-rule/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "ensure",
      "version": "17.8.1",
      "description": "Lint your commit messages",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/ensure@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/ensure@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/ensure/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/ensure/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/ensure/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "config-validator",
      "version": "17.8.1",
      "description": "config validator for commitlint.config.js",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/config-validator@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/config-validator@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/config-validator/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/config-validator/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/config-validator/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "config-conventional",
      "version": "17.8.1",
      "description": "Shareable commitlint config enforcing conventional commits",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/config-conventional@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/config-conventional@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/config-conventional/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/config-conventional/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/config-conventional/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "Mario Nebl <hello@herebecode.com>"
        }
      ],
      "group": "@commitlint",
      "name": "cli",
      "version": "17.8.1",
      "description": "Lint your commit messages",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40commitlint/cli@17.8.1",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://commitlint.js.org/"
        },
        {
          "type": "vcs",
          "url": "https://github.com/conventional-changelog/commitlint.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@commitlint/cli@17.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@commitlint/cli/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@commitlint/cli/package.json"
              }
            ],
            "concludedValue": "node_modules/@commitlint/cli/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "types",
      "version": "7.29.8",
      "description": "Babel Types is a Lodash-esque utility library for AST nodes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/types@7.29.8",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-types"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/types@7.29.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/types/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/types/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/types/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "traverse",
      "version": "7.29.8",
      "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/traverse@7.29.8",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-traverse"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/traverse@7.29.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/traverse/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/traverse/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/traverse/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "template",
      "version": "7.29.7",
      "description": "Generate an AST from a string template.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/template@7.29.7",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-template"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/template@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/template/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/template/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/template/package.json"
          }
        ]
      },
      "tags": [
        "template"
      ]
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "parser",
      "version": "7.29.8",
      "description": "A JavaScript parser",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/parser@7.29.8",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-parser"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/parser@7.29.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/parser/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helpers",
      "version": "7.29.7",
      "description": "Collection of helper functions used by Babel transforms.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helpers@7.29.7",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-helpers"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helpers@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/helpers/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/helpers/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/helpers/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-validator-option",
      "version": "7.29.7",
      "description": "Validate plugin/preset options",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-option@7.29.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-option@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/helper-validator-option/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/helper-validator-option/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/helper-validator-option/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-validator-identifier",
      "version": "7.29.7",
      "description": "Validate identifier/keywords name",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-validator-identifier@7.29.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-validator-identifier@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/helper-validator-identifier/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/helper-validator-identifier/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/helper-validator-identifier/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-string-parser",
      "version": "7.29.7",
      "description": "A utility package to parse strings",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-string-parser@7.29.7",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-helper-string-parser"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-string-parser@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/helper-string-parser/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/helper-string-parser/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/helper-string-parser/package.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-module-transforms",
      "version": "7.29.7",
      "description": "Babel helper functions for implementing ES6 module transformations",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-module-transforms@7.29.7",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-helper-module-transforms"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-module-transforms@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/helper-module-transforms/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/helper-module-transforms/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/helper-module-transforms/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-module-imports",
      "version": "7.29.7",
      "description": "Babel helper functions for inserting module loads",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-module-imports@7.29.7",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-helper-module-imports"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-module-imports@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/helper-module-imports/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/helper-module-imports/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/helper-module-imports/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-globals",
      "version": "7.29.7",
      "description": "A collection of JavaScript globals for Babel internal usage",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-globals@7.29.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-globals@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/helper-globals/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/helper-globals/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/helper-globals/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "helper-compilation-targets",
      "version": "7.29.7",
      "description": "Helper functions on Babel compilation targets",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/helper-compilation-targets@7.29.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/helper-compilation-targets@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/helper-compilation-targets/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/helper-compilation-targets/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/helper-compilation-targets/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "generator",
      "version": "7.29.8",
      "description": "Turns an AST into code.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/generator@7.29.8",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-generator"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/generator@7.29.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/generator/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/generator/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/generator/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "core",
      "version": "7.29.7",
      "description": "Babel compiler core.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/core@7.29.7",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-core"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/core@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/core/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/core/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/core/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "compat-data",
      "version": "7.29.7",
      "description": "The compat-data to determine required Babel plugins",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/compat-data@7.29.7",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/compat-data@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/compat-data/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/compat-data/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/compat-data/package.json"
          }
        ]
      }
    },
    {
      "authors": [
        {
          "name": "The Babel Team (https://babel.dev/team)"
        }
      ],
      "group": "@babel",
      "name": "code-frame",
      "version": "7.29.7",
      "description": "Generate errors that contain a code frame that point to source locations.",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40babel/code-frame@7.29.7",
      "externalReferences": [
        {
          "type": "website",
          "url": "https://babel.dev/docs/en/next/babel-code-frame"
        },
        {
          "type": "vcs",
          "url": "https://github.com/babel/babel.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@babel/code-frame@7.29.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@babel/code-frame/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@babel/code-frame/package.json"
              }
            ],
            "concludedValue": "node_modules/@babel/code-frame/package.json"
          }
        ]
      }
    },
    {
      "group": "@actions",
      "name": "io",
      "version": "1.1.3",
      "description": "Actions io lib",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40actions/io@1.1.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/actions/toolkit/tree/main/packages/io"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/actions/toolkit.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@actions/io@1.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@actions/io/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@actions/io/package.json"
              }
            ],
            "concludedValue": "node_modules/@actions/io/package.json"
          }
        ]
      }
    },
    {
      "group": "@actions",
      "name": "http-client",
      "version": "2.2.3",
      "description": "Actions Http Client",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40actions/http-client@2.2.3",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/actions/toolkit/tree/main/packages/http-client"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/actions/toolkit.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@actions/http-client@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@actions/http-client/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@actions/http-client/package.json"
              }
            ],
            "concludedValue": "node_modules/@actions/http-client/package.json"
          }
        ]
      }
    },
    {
      "group": "@actions",
      "name": "exec",
      "version": "1.1.1",
      "description": "Actions exec lib",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40actions/exec@1.1.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/actions/toolkit/tree/main/packages/exec"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/actions/toolkit.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@actions/exec@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@actions/exec/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@actions/exec/package.json"
              }
            ],
            "concludedValue": "node_modules/@actions/exec/package.json"
          }
        ]
      }
    },
    {
      "group": "@actions",
      "name": "core",
      "version": "1.11.1",
      "description": "Actions core lib",
      "scope": "optional",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40actions/core@1.11.1",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/actions/toolkit/tree/main/packages/core"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/actions/toolkit.git"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@actions/core@1.11.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "node_modules/@actions/core/package.json"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 0.7,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 0.7,
                "value": "node_modules/@actions/core/package.json"
              }
            ],
            "concludedValue": "node_modules/@actions/core/package.json"
          }
        ]
      }
    }
  ],
  "dependencies": [],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/tar@6.1.15-tuxcare.2"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-08-31T11:29:50Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, August 31, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'tar' with version '6.1.15-tuxcare.2'. The package type in this SBOM is npm with 30 purl namespaces described under components. The components were identified from 1126 source files."
    }
  ]
}