{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:5086bf30-a2b9-4b90-bc64-6d7b244fde2c",
  "version": 1,
  "metadata": {
    "timestamp": "2026-09-14T06:13:56Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "ware",
      "group": "",
      "version": "1.3.0",
      "description": "Easily create your own middleware layer.",
      "purl": "pkg:npm/ware@1.3.0",
      "bom-ref": "pkg:npm/ware@1.3.0",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "wrap-fn",
      "version": "0.1.4",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b2780cb8a2d08717842cdc49d485777148c1f30c8de875cd33909001ad8d9a48b81cdaafa731b15641b4fc7374845d33624a434370a141ea3a73227ac871b105"
        }
      ],
      "purl": "pkg:npm/wrap-fn@0.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wrap-fn/-/wrap-fn-0.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrap-fn@0.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wrap-fn/-/wrap-fn-0.1.4.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "wrap-fn"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/index.js",
            "line": 6
          }
        ]
      }
    },
    {
      "group": "",
      "name": "co",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "090b2309188d39b23c02d4ec34804344c438a0c47cdc2cc4b301d86a10a5bee97b80a93e94342238abfee6a87b2d059fe6c87a8e464d8aca73fd096c671c8d80"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/co@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/co/-/co-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/co@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/co/-/co-3.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "co-mocha",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00b33afd5a8c5cda94213e0b3f37ce56c80df13c3d6d7a182c8aea2b5a3f2e9b8ca995d08c5b649b7777b837ce857423135f764af5ec266712dfeaaa52767cbe"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/co-mocha@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/co-mocha/-/co-mocha-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/co-mocha@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/co-mocha/-/co-mocha-1.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "mocha",
      "version": "1.21.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e0dabd18acb087b66a7c5bb1f22f34a66dd89db7783523adc784298ea991f8bf31619ad1dc630728026a6c24a2f5e361def4d0361c9a66b33f5a9980f1a19d5"
        }
      ],
      "purl": "pkg:npm/mocha@1.21.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mocha/-/mocha-1.21.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mocha@1.21.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mocha/-/mocha-1.21.5.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/_mocha, /app/node_modules/.bin/mocha"
        },
        {
          "name": "cdx:npm:bin",
          "value": "_mocha, mocha"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Mocha v1.x is no longer supported."
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "083e39d9f9e4d2343293735f9caf8a911fe150fa07b79a5568a1e882dcb2bf737453841f01a97d5b4feb5cb3a0fef55981029aee376d5f2a4ab356008a9d75b9"
        }
      ],
      "purl": "pkg:npm/commander@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "debug",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d1c4547415beb9ee29269ba2231d8df6bff36aa7d35d731e0b0484973dfa60b8d6878792499dbfb1dfba9a94a3d3bb87f13059d5048c841a2ef69a6be5d010b"
        }
      ],
      "purl": "pkg:npm/debug@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/debug/-/debug-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/debug@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/debug/-/debug-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ms",
      "version": "0.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fe97377a1ed35a8ad3b5bbd783c8dee06bebbc4a827c7ecf0373fb896d35c8bd84e7714a8b1ce03016908b434e3db309a98df87014af474b59b6695391d506e0"
        }
      ],
      "purl": "pkg:npm/ms@0.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ms/-/ms-0.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ms@0.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ms/-/ms-0.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "1.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d7311bef7bde9971695267e1ddfb2d6b8607cf797079bc57bda5a63db16ff5aa6e8d00560e792b3c32d72d0b35819a3844258c0ec4fcf6bd0f7ffcfcff4d9318"
        }
      ],
      "purl": "pkg:npm/diff@1.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/diff/-/diff-1.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@1.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/diff/-/diff-1.0.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "escape-string-regexp",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "710a5489dedb7535271629fc4bb06735d3a4fbf783a9098a80200d4b277f8c086b284bf152fafd550f176735e23ad7acb7c34b7e4dc5481673c2f7a664d43a56"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/escape-string-regexp@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/escape-string-regexp/-/escape-string-regexp-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/escape-string-regexp@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/escape-string-regexp/-/escape-string-regexp-1.0.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "3.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58f68bb0c1c3d65604a80988408e9538948fc2e05d1928435a78f5c94a34bd0a843bcd3d47c5b72ccf4e554d770a79c3872bff1223703adc445bbe129abcd2eb"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@3.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-3.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@3.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-3.2.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "2.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85c8ff353516bfe0b731baab55bf45f9a1fa96f4f010725dc767e807196b56ae61eb313c05fbb8a6fe02000a9b0dc66bc3ff4093996c457958f40a3cfc5d13bb"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@2.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/graceful-fs/-/graceful-fs-2.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@2.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/graceful-fs/-/graceful-fs-2.0.3.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f275aada72d3030774da34ea244c54605483fdf2aae951fd63fa06d9a71c73f91d23457df016a0f1de5ae208b75c7cfbdeb0d66b63ef4edbdc598aae2aa48434"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inherits@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inherits/-/inherits-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inherits/-/inherits-2.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "0.2.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cd9f89cbc9555a5beaa9e33c89907bc3b2a6424a099fc763339f39cfcf2bcb0ac46f3a2a6b055af45479a768700fecbbe277ee28e8e636f8bd82d58934ba87bc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@0.2.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.2.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@0.2.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-0.2.14.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "lru-cache",
      "version": "2.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6e946bc1c985d8510bcb4a250c009e52179433a178bc72d61d55e9061117a09ac6e653d0e18afca980c6287d80f0d56d05be9e290e3ea54f2505956ff41ab595"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/lru-cache@2.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-2.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/lru-cache@2.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/lru-cache/-/lru-cache-2.6.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "sigmund",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5edaf127805fe670e749c076d94d1fb744e90932d216990f02ea27df6dd7f66170628c335aeb016ee9f13ac8b690ee856f6f6b7876713cd1e038bfdf30da8ca1"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/sigmund@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sigmund/-/sigmund-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/sigmund@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/sigmund/-/sigmund-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "growl",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1eaeb5b2faa15c705363cd0ab2e2eb22d27d03460fd4f49e892e21862efb35c3d07fe17ec9a80e4a486e85974d0fb35f01ca479b8f7914a51399173283317438"
        }
      ],
      "purl": "pkg:npm/growl@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/growl/-/growl-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/growl@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/growl/-/growl-1.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jade",
      "version": "0.26.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a4937bf3507163cca8e90977aef888d77990fe40e4e351476e6e0987b474c3c2f00ed994e43134d5adaa6db39096cf726f26bca1ff82966698de66b09ea59dc"
        }
      ],
      "purl": "pkg:npm/jade@0.26.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jade/-/jade-0.26.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jade@0.26.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/jade/-/jade-0.26.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/jade"
        },
        {
          "name": "cdx:npm:bin",
          "value": "jade"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Jade has been renamed to pug, please install the latest version of pug instead of jade"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d1f2f272997550c4c65f6e7b851b2efdaacbfdc51b72f40ce3330ac2f2efcd7b5f75ecc8578ca8b4f4b6758b649c5f8d9847d64a808417afa18fd5cb9bfea113"
        }
      ],
      "purl": "pkg:npm/commander@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "387b1d51c54043aa4eb60e49616a42068f56fc6c9256ec2f3fd86e791316ed4aac842d2d6dfccbbfcc23c924cf9b7b5f519ff6d4213d135a496a0380f753f17b"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.3.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "mkdirp",
      "version": "0.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c638cd1b2fabcb5961b4829caf63d3ea89376acce141f82b503a783992c769c811805985e9747d5c238955c5e55464289c8a9770ad43bea80a29038f5981927f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/mkdirp@0.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/mkdirp@0.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/mkdirp/-/mkdirp-0.5.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/mkdirp"
        },
        {
          "name": "cdx:npm:bin",
          "value": "mkdirp"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Legacy versions of mkdirp are no longer supported. Please update to mkdirp 1.x. (Note that the API surface has changed to use Promises in 1.x.)"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimist",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a240ac391efe0d4b53ec836e75ee65787b875835a3b7fbe86302f2ce0332aa67ad6b1fc352d522bebdb7c1599e4f63f31efdb116854c2a3208445b915bf53ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimist@0.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimist/-/minimist-0.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimist@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimist/-/minimist-0.0.8.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "co",
      "version": "4.5.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "53ad2ef982ee3e7a2039bb4ad49f0dbd9bdcfd8f5b44321474daf2b01fec22e9224cef969554040450fc683218b5b4d98e48aa7f26f738e03215f00c2525c0ab"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/co@4.5.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/co/-/co-4.5.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/co@4.5.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/co/-/co-4.5.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-generator",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7de3c4650131e930f5a307030425666cc30495f6c2dc1c9b6b9e522ab8f0116624d1a2d29deb93ca52f7b00b9c66bda7d99fb4e6a419eaa6451d1599996d198e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/is-generator@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/is-generator/-/is-generator-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-generator@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/is-generator/-/is-generator-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "gnode",
      "version": "0.0.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1c0b4623829daf27464f4b476445f870d3cf459bfe82df9f3242931cc63ed0f9292a9025bded35ad98fd5c3be8b55dd36c7cdadd40f9b2009ab5738037439d75"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/gnode@0.0.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/gnode/-/gnode-0.0.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/gnode@0.0.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/gnode/-/gnode-0.0.8.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/gnode"
        },
        {
          "name": "cdx:npm:bin",
          "value": "gnode"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "regenerator",
      "version": "0.8.22",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1fa4276e1bc983b8511a01ff330348b70f0513e265d4260bdc81d34e3b9f53cf3601f236c69714f9712b811c3b69f57c59073e8b3f9d594a73e45993af9210ea"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/regenerator@0.8.22",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/regenerator/-/regenerator-0.8.22.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/regenerator@0.8.22",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/regenerator/-/regenerator-0.8.22.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/regenerator"
        },
        {
          "name": "cdx:npm:bin",
          "value": "regenerator"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commoner",
      "version": "0.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7c49fcb14886a09e38048d9216dcc5c50bee72fc3ccc67c8cb45a1db146594f0a7a745f3fd242a23b2588db6cf3082743a687ccb3f59678b65645d3f69991f97"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/commoner@0.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commoner/-/commoner-0.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commoner@0.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commoner/-/commoner-0.10.1.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/commonize"
        },
        {
          "name": "cdx:npm:bin",
          "value": "commonize"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5eca1adbc6ecfd95a8ff640f0e953c5f981cbb5f2f7d170d5ab9b4292f6b305e291511921a2738f00e66c62a854e76c536a4c83db0d9a811af779a12ac7656f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/commander@2.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-2.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/commander/-/commander-2.5.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "glob",
      "version": "4.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1f83c30b30ca0d3cc971c30015ed185b785bb5d3a229772887e11ff30a6e9bad3852f5088d7f2312af0a35f4539c068e94bb53bfbf1438d2d69e43df7e2a9d84"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/glob@4.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-4.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/glob@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/glob/-/glob-4.2.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inflight",
      "version": "1.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c8c3865eb7a076003e99eaf880bc8659f8ff831d2fcea997b48637613c5a420e0e65d9381acae088509ffc6f7a91542dfda24327240f0de6ff36d411669d77c6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/inflight@1.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inflight/-/inflight-1.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inflight@1.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/inflight/-/inflight-1.0.4.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful."
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3737db69aa10bf3d890bf0ff623dc6662d05246d70f62dcaf41a7df56b37a74c6b88fca70bf61f45ca68db3a15b8876ebc7e1bf3eeaea78a201b19ea6a348a84"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/once@1.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/once/-/once-1.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/once/-/once-1.3.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e36875776e675ba1bf37b975e8ecf8bea08e2c81686c504ec19ac16250b127f42e4b6a3519d9f53f34a88989dd6e72fdae0188199e909f4f40229ca1ae47a97f"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wrappy/-/wrappy-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/wrappy/-/wrappy-1.0.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "minimatch",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "12387939d93fb855c08f99dffcd49793451a9aa70601f39d1c8ee7634cef087ca7e1fde728b168513a7e958c43c528a1ff8d2e5bc969c03a653961dd5a441758"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/minimatch@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/minimatch@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/minimatch/-/minimatch-1.0.0.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "3.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3ad401fee00e0b09826d40a8bc3b877e6bcba0ed1259b31ae0d1427eca52c5af427a9314d03c7c9d1918ef55708e17e5d5a9d3280495c7474e9ae6894b337ac1"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@3.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/graceful-fs/-/graceful-fs-3.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@3.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/graceful-fs/-/graceful-fs-3.0.6.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "please upgrade to graceful-fs 4 for compatibility with current and future versions of Node.js"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "iconv-lite",
      "version": "0.4.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0fdd2b6ce899b84246b662012bdc1c4695bffd928b0fc6d33ce031e6812cbbe3be1e148eb2d5ff1c264506f364bb20ee88d1ee9dbf3571fb2a698cd9c5c50c60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/iconv-lite@0.4.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/iconv-lite/-/iconv-lite-0.4.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/iconv-lite@0.4.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/iconv-lite/-/iconv-lite-0.4.8.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "install",
      "version": "0.1.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "87131962aa7b7cfbae864270e6a3f9e200ba2b4a44ca40264e982c305e565988804f21b83ab44f563d56ab79fe630bfaaa960afc60fb7bd51dcfd24645a208f8"
        }
      ],
      "purl": "pkg:npm/install@0.1.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/install/-/install-0.1.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/install@0.1.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/install/-/install-0.1.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "private",
      "version": "0.1.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "005bc947d1edddc0d3c91f1f3de9dd8895a2b09cfe82170bd855075890a2f2b35ea71dccc8347af5762dff724209efc17a58d8d472c415504f624227a9689811"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/private@0.1.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/private/-/private-0.1.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/private@0.1.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/private/-/private-0.1.6.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "q",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44eb72970bb1ed591ce02d3ba0a13f45e8a05266f7de45682ed711e12275415ab06999011032f7bd7e3f930173204450e4f7c29745da7db53cbb66148721a054"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/q@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/q/-/q-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/q@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/q/-/q-1.1.2.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "You or someone you depend on is using Q, the JavaScript Promise library that gave JavaScript developers strong feelings about promises. They can almost certainly migrate to the native JavaScript promise now. Thank you literally everyone for joining me in this bet against the odds. Be excellent to each other.\n\n(For a CapTP with native promises, see @endo/eventual-send and @endo/captp)"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "recast",
      "version": "0.9.18",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a9f665b3300ff12624f3c5e43c3401b76b92ac28e908af75c73c6c9e3dbc5b8fc070f0b7950da0a094a64c2642f76487164dcfc69a1d01045ee98b60bd49a590"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/recast@0.9.18",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/recast/-/recast-0.9.18.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/recast@0.9.18",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/recast/-/recast-0.9.18.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ast-types",
      "version": "0.6.16",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "46114b9d27a9c5dfba14198c485f4fa3dd5db181dfe8044f707e02a3a0acc7dd3a339651cb14b59c99f8bea48e5e536ddd8ce0c25990173ced0211718ea7bf74"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ast-types@0.6.16",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ast-types/-/ast-types-0.6.16.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ast-types@0.6.16",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ast-types/-/ast-types-0.6.16.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima-fb",
      "version": "10001.1.0-dev-harmony-fb",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf6771dc0fd918d6a6b038c94b81593d79e9a110849105eaa2e28108e68989fcb1e07904568490dd85855f5f1272eb7502af609dcb732d67162602a42f4c4d43"
        }
      ],
      "purl": "pkg:npm/esprima-fb@10001.1.0-dev-harmony-fb",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima-fb/-/esprima-fb-10001.1.0-dev-harmony-fb.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima-fb@10001.1.0-dev-harmony-fb",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima-fb/-/esprima-fb-10001.1.0-dev-harmony-fb.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/commoner/node_modules/.bin/esparse, /app/node_modules/commoner/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.1.43",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "56d0af07d488421937685ea1f8df3911aa8868114801f67d0aef8d2471d5bdcf016c4727bc3705c3ab2a436750ad3e9294ead9ab7b48bf20fdf841aafe526bc9"
        }
      ],
      "purl": "pkg:npm/source-map@0.1.43",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map/-/source-map-0.1.43.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.1.43",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map/-/source-map-0.1.43.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "amdefine",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "21248f626f06f7a8927bba6ef1f7d301b2cc7af311c7d485274313218d8e8cbf50a217fea1509f8b32aba4dec1376f6b2571bfa296f707508eed96a998cbafcc"
        }
      ],
      "purl": "pkg:npm/amdefine@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/amdefine/-/amdefine-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/amdefine@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/amdefine/-/amdefine-0.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "defs",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35514f52620b1ec64db5a9be3444f62b394d446d4fb433ca070f20dc084d58411127041f2dc8104c0ebd241b57b6805c1c1e1b5ccdc35bc0523e83928ba152e0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/defs@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/defs/-/defs-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/defs@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/defs/-/defs-1.1.0.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/defs"
        },
        {
          "name": "cdx:npm:bin",
          "value": "defs"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "alter",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5aeb2ce89219ea1e23dbe360536b7ef664b04bb80149925b5380e0f3111382e003daf789512b82aef4c8882efc420644effcd7ee1e8e9d7c363e2882062ac41b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/alter@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/alter/-/alter-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/alter@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/alter/-/alter-0.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stable",
      "version": "0.1.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c81ba35029521844903006df02713577aeb7b34102219f9ee10a115596753dd1ed9df6adab5663a65af584f2f4baf55b9e4d938d4aa59f93eff4bc438f101a32"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stable@0.1.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stable/-/stable-0.1.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stable@0.1.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stable/-/stable-0.1.5.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "Modern JS already guarantees Array#sort() is a stable sort, so this library is deprecated. See the compatibility table on MDN: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/Array/sort#browser_compatibility"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ast-traverse",
      "version": "0.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "08fb84e015888498ec34cbc592bce388180e979e8d253b813c1901ab24727eafe766dc756757f923eab1ec6fd9b7e140392f80061821904b9626b7d6f4d8e3a2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ast-traverse@0.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ast-traverse/-/ast-traverse-0.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ast-traverse@0.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ast-traverse/-/ast-traverse-0.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "breakable",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa2b7226a723868cd036b7b3cd377676d1ff964217984e761cbf85a212b64ce2d00e5dd05114cd9229bed82d3172ca3865e86afc73385a4ba671dcfb51ef9798"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/breakable@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/breakable/-/breakable-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/breakable@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/breakable/-/breakable-1.0.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima-fb",
      "version": "8001.1001.0-dev-harmony-fb",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "275b878a8e97100da6ecd736f39d1ebab11d4e54ec15cb0c2916528dc04b959cbb48ca91410a9ff239ef71b9adb222e4376970c1c15ca93ce36678ba62bd9919"
        }
      ],
      "purl": "pkg:npm/esprima-fb@8001.1001.0-dev-harmony-fb",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima-fb/-/esprima-fb-8001.1001.0-dev-harmony-fb.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima-fb@8001.1001.0-dev-harmony-fb",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima-fb/-/esprima-fb-8001.1001.0-dev-harmony-fb.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/defs/node_modules/.bin/esparse, /app/node_modules/defs/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "simple-fmt",
      "version": "0.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f5adf34c30e1f4b5db4d1dfba81840096210fe63ffaf2e71b666c4f7c04933c191d36b1a9c291f333a7b01d093a988640598202bfc3b849b5cf0f6fd9e6a35e8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/simple-fmt@0.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/simple-fmt/-/simple-fmt-0.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/simple-fmt@0.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/simple-fmt/-/simple-fmt-0.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "simple-is",
      "version": "0.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1895e1bf7af9bdd8f9b4658efab72b5a08d4d9accb07e7dbec4861dd2999a57134a382abac52ed8b4c3899d0c26d1dbd5ffcf42ecdb40298d98ad9690178407a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/simple-is@0.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/simple-is/-/simple-is-0.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/simple-is@0.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/simple-is/-/simple-is-0.2.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stringmap",
      "version": "0.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "991d4b1070f0e93b076be2f025e78173d66a66a10e9bb6c789d8313260e0f0707fadb0351e10de4f4f204baec20821bfc6b8087d0c79b56e36a5df2f1692d4a3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stringmap@0.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stringmap/-/stringmap-0.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stringmap@0.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stringmap/-/stringmap-0.2.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "stringset",
      "version": "0.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "926de37a24699b2482865d682e2044d8449d1b993fe3eead8c43552fa041de67662818948a423992ce2969a7765802acc73a4d881a8105b5c20b5d90aa5a4b58"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/stringset@0.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stringset/-/stringset-0.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stringset@0.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stringset/-/stringset-0.2.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tryor",
      "version": "0.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dbe8a5340d340c6bdb51861b46b9b7bb1fac9dba3b23ab8f5ccc3c238a7f40c97b1d43960416456e4f8ca6bf3f2003c3404f8b43cbce76523ac44ce373e7bf05"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tryor@0.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tryor/-/tryor-0.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tryor@0.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tryor/-/tryor-0.1.2.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yargs",
      "version": "1.3.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ece1ade315e8589421e6e96067bf2b29aa98edd3566e37caf942b119c22568cda3ec2e1fa86721caff023ef1167513eb1e9e9495afd853cc86469606387ac8fa"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "MIT/X11",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Unstated License"
              },
              {
                "name": "cdx:license:foss",
                "value": "false"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "false"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/yargs@1.3.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/yargs/-/yargs-1.3.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yargs@1.3.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/yargs/-/yargs-1.3.3.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Unstated License"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima-fb",
      "version": "13001.1.0-dev-harmony-fb",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e69d6965e2ebf5ca953bae741a728c1aa450845c218d333b77f569155b5c8f85a39cb2de65ef7306a9f9fa61ca3e5b65ff4dc6414d677f83ecfc0d0d19cd4798"
        }
      ],
      "purl": "pkg:npm/esprima-fb@13001.1.0-dev-harmony-fb",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima-fb/-/esprima-fb-13001.1.0-dev-harmony-fb.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima-fb@13001.1.0-dev-harmony-fb",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima-fb/-/esprima-fb-13001.1.0-dev-harmony-fb.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/.bin/esparse, /app/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "recast",
      "version": "0.10.12",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f7350664ab9017e09253061f11810fef322bdce5f72ad7f5d0ea8237ce88d23f15ba9f7b434ad714aa7d7a2b32e26d22b88d67e6054019c3994b8079e0445527"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/recast@0.10.12",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/recast/-/recast-0.10.12.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/recast@0.10.12",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/recast/-/recast-0.10.12.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ast-types",
      "version": "0.7.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "134b4194b4c5642f7d45f8c8896ff082ae2eb23bd23fc6a4ca390845eddc2529dd99971d0562ca83b4f1352620cd7a42444977e935fc1f4b6acc1b245e42747b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/ast-types@0.7.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ast-types/-/ast-types-0.7.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ast-types@0.7.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/ast-types/-/ast-types-0.7.6.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "esprima-fb",
      "version": "14001.1.0-dev-harmony-fb",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "beb8d498379aa1e5d5aa9a047fbd57a3fa2da5f04bb5f8617976c9052a8b18431574a03284be34c8f2fbbf3fec5ba23461c97e9bd946686be1bb8506bbd2e9b2"
        }
      ],
      "purl": "pkg:npm/esprima-fb@14001.1.0-dev-harmony-fb",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima-fb/-/esprima-fb-14001.1.0-dev-harmony-fb.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/esprima-fb@14001.1.0-dev-harmony-fb",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/esprima-fb/-/esprima-fb-14001.1.0-dev-harmony-fb.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/node_modules/recast/node_modules/.bin/esparse, /app/node_modules/recast/node_modules/.bin/esvalidate"
        },
        {
          "name": "cdx:npm:bin",
          "value": "esparse, esvalidate"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.4.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "80f6324c8f42e6fcd4c9abe8db7a2d35f7a45f169233bbd496990f6b29a70f798cb6bbdbf611caedfba472dd86b8c6e8c661e37a8789d097a5999715e837003f"
        }
      ],
      "purl": "pkg:npm/source-map@0.4.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map/-/source-map-0.4.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.4.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/source-map/-/source-map-0.4.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through",
      "version": "2.3.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "120ee5a1e6959eaae10a04718877955e65b7a2e760e8cce113de64a45867ca3068478db9e6eff963ecd1be58a780c49250c1d7af484bf2446beddc018b38b664"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/through@2.3.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/through/-/through-2.3.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through@2.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/through/-/through-2.3.7.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/co@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrap-fn@0.1.4",
      "dependsOn": [
        "pkg:npm/co@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/commander@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ms@0.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/debug@2.0.0",
      "dependsOn": [
        "pkg:npm/ms@0.6.2"
      ]
    },
    {
      "ref": "pkg:npm/diff@1.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/escape-string-regexp@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@2.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/lru-cache@2.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/sigmund@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/minimatch@0.2.14",
      "dependsOn": [
        "pkg:npm/lru-cache@2.6.2",
        "pkg:npm/sigmund@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/glob@3.2.3",
      "dependsOn": [
        "pkg:npm/graceful-fs@2.0.3",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/minimatch@0.2.14"
      ]
    },
    {
      "ref": "pkg:npm/growl@1.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jade@0.26.3",
      "dependsOn": [
        "pkg:npm/commander@0.6.1",
        "pkg:npm/mkdirp@0.3.0"
      ]
    },
    {
      "ref": "pkg:npm/minimist@0.0.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/mkdirp@0.5.0",
      "dependsOn": [
        "pkg:npm/minimist@0.0.8"
      ]
    },
    {
      "ref": "pkg:npm/mocha@1.21.5",
      "dependsOn": [
        "pkg:npm/commander@2.3.0",
        "pkg:npm/debug@2.0.0",
        "pkg:npm/diff@1.0.8",
        "pkg:npm/escape-string-regexp@1.0.2",
        "pkg:npm/glob@3.2.3",
        "pkg:npm/growl@1.8.1",
        "pkg:npm/jade@0.26.3",
        "pkg:npm/mkdirp@0.5.0"
      ]
    },
    {
      "ref": "pkg:npm/co@4.5.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-generator@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/co-mocha@1.1.0",
      "dependsOn": [
        "pkg:npm/co@4.5.2",
        "pkg:npm/is-generator@1.0.0",
        "pkg:npm/mocha@1.21.5"
      ]
    },
    {
      "ref": "pkg:npm/commander@2.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/wrappy@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.3.1",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/inflight@1.0.4",
      "dependsOn": [
        "pkg:npm/once@1.3.1",
        "pkg:npm/wrappy@1.0.1"
      ]
    },
    {
      "ref": "pkg:npm/minimatch@1.0.0",
      "dependsOn": [
        "pkg:npm/lru-cache@2.6.2",
        "pkg:npm/sigmund@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/glob@4.2.2",
      "dependsOn": [
        "pkg:npm/inflight@1.0.4",
        "pkg:npm/inherits@2.0.1",
        "pkg:npm/minimatch@1.0.0",
        "pkg:npm/once@1.3.1"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@3.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/iconv-lite@0.4.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/install@0.1.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/private@0.1.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/q@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ast-types@0.6.16",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esprima-fb@10001.1.0-dev-harmony-fb",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/amdefine@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.1.43",
      "dependsOn": [
        "pkg:npm/amdefine@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/recast@0.9.18",
      "dependsOn": [
        "pkg:npm/ast-types@0.6.16",
        "pkg:npm/esprima-fb@10001.1.0-dev-harmony-fb",
        "pkg:npm/private@0.1.6",
        "pkg:npm/source-map@0.1.43"
      ]
    },
    {
      "ref": "pkg:npm/commoner@0.10.1",
      "dependsOn": [
        "pkg:npm/commander@2.5.1",
        "pkg:npm/glob@4.2.2",
        "pkg:npm/graceful-fs@3.0.6",
        "pkg:npm/iconv-lite@0.4.8",
        "pkg:npm/install@0.1.8",
        "pkg:npm/mkdirp@0.5.0",
        "pkg:npm/private@0.1.6",
        "pkg:npm/q@1.1.2",
        "pkg:npm/recast@0.9.18"
      ]
    },
    {
      "ref": "pkg:npm/stable@0.1.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/alter@0.2.0",
      "dependsOn": [
        "pkg:npm/stable@0.1.5"
      ]
    },
    {
      "ref": "pkg:npm/ast-traverse@0.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/breakable@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esprima-fb@8001.1001.0-dev-harmony-fb",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/simple-fmt@0.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/simple-is@0.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stringmap@0.2.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/stringset@0.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tryor@0.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/yargs@1.3.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/defs@1.1.0",
      "dependsOn": [
        "pkg:npm/alter@0.2.0",
        "pkg:npm/ast-traverse@0.1.1",
        "pkg:npm/breakable@1.0.0",
        "pkg:npm/esprima-fb@8001.1001.0-dev-harmony-fb",
        "pkg:npm/simple-fmt@0.1.0",
        "pkg:npm/simple-is@0.2.0",
        "pkg:npm/stringmap@0.2.2",
        "pkg:npm/stringset@0.2.1",
        "pkg:npm/tryor@0.1.2",
        "pkg:npm/yargs@1.3.3"
      ]
    },
    {
      "ref": "pkg:npm/esprima-fb@13001.1.0-dev-harmony-fb",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ast-types@0.7.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/esprima-fb@14001.1.0-dev-harmony-fb",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.4.2",
      "dependsOn": [
        "pkg:npm/amdefine@0.1.0"
      ]
    },
    {
      "ref": "pkg:npm/recast@0.10.12",
      "dependsOn": [
        "pkg:npm/ast-types@0.7.6",
        "pkg:npm/esprima-fb@14001.1.0-dev-harmony-fb",
        "pkg:npm/private@0.1.6",
        "pkg:npm/source-map@0.4.2"
      ]
    },
    {
      "ref": "pkg:npm/through@2.3.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/regenerator@0.8.22",
      "dependsOn": [
        "pkg:npm/commoner@0.10.1",
        "pkg:npm/defs@1.1.0",
        "pkg:npm/esprima-fb@13001.1.0-dev-harmony-fb",
        "pkg:npm/private@0.1.6",
        "pkg:npm/recast@0.10.12",
        "pkg:npm/through@2.3.7"
      ]
    },
    {
      "ref": "pkg:npm/gnode@0.0.8",
      "dependsOn": [
        "pkg:npm/regenerator@0.8.22"
      ]
    },
    {
      "ref": "pkg:npm/ware@1.3.0",
      "dependsOn": [
        "pkg:npm/co-mocha@1.1.0",
        "pkg:npm/co@3.1.0",
        "pkg:npm/gnode@0.0.8",
        "pkg:npm/mocha@1.21.5",
        "pkg:npm/wrap-fn@0.1.4"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/ware@1.3.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.4",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.4",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.4",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-09-14T06:13:56Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, September 14, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'ware' with version '1.3.0'."
    }
  ]
}