{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:7b33bc89-9bf1-4c0b-8395-c5b4b07b10c3",
  "version": 1,
  "metadata": {
    "timestamp": "2026-04-28T19:35:38Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.2.1",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.2.1",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.2.1",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "distributionConstraints": {
      "tlp": "CLEAR"
    },
    "component": {
      "name": "xml2js",
      "group": "",
      "version": "0.4.4-tuxcare.1",
      "description": "Simple XML to JavaScript object converter.",
      "purl": "pkg:npm/xml2js@0.4.4-tuxcare.1",
      "bom-ref": "pkg:npm/xml2js@0.4.4-tuxcare.1",
      "author": "Marek Kubica <marek@xivilization.net> (http://xivilization.net)",
      "type": "application",
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/Leonidas-from-XIV/node-xml2js"
        },
        {
          "type": "vcs",
          "url": "https://github.com/Leonidas-from-XIV/node-xml2js.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "sax",
      "version": "0.6.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f22a7eaa7461ee6f0e132be8335268481ce5adea69dda8d547c9ea82b7d38a0f937b07f2bd38a39746a6f3f6a716a81b71dcfada87c450a13584734309d6de49"
        }
      ],
      "licenses": [
        {
          "license": {
            "name": "BSD"
          }
        }
      ],
      "purl": "pkg:npm/sax@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/sax/-/sax-0.6.1.tgz"
        }
      ],
      "type": "framework",
      "bom-ref": "pkg:npm/sax@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/sax/-/sax-0.6.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "sax"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/xml2js.js#8"
          }
        ]
      },
      "tags": [
        "framework"
      ]
    },
    {
      "group": "",
      "name": "xmlbuilder",
      "version": "1.1.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "82ca57539346ad689fe0115b4861eea231e41b3cc500170e0cf65f3a8822e6dc0c21534dc43a719337a6ec1fef973232093e3d235c5ad9aa73b06b6d54c693f6"
        }
      ],
      "purl": "pkg:npm/xmlbuilder@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/xmlbuilder/-/xmlbuilder-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xmlbuilder@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/xmlbuilder/-/xmlbuilder-1.1.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "xmlbuilder"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "lib/xml2js.js#12"
          }
        ]
      },
      "tags": [
        "xml"
      ]
    },
    {
      "group": "",
      "name": "underscore",
      "version": "1.13.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0d7b43dd9b4443373b33c9b8717a2dc8747e1404b5f02eb86ac058639bea65ec5f62bc8d3670dcd365b884a837add42ea8e61ab358e4b1e5f4fa76578d35e7bd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/underscore@1.13.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/underscore/-/underscore-1.13.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/underscore@1.13.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/underscore/-/underscore-1.13.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "coffee-script",
      "version": "1.12.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7cb78486ac329986adfcca533d48d2287558625d1e73698ec802c430b9b3af98b58acb86fba8df2368f6779a013b7548ce051780154870e4fdb87d5317105c93"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/coffee-script@1.12.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/coffee-script/-/coffee-script-1.12.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/coffee-script@1.12.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/coffee-script/-/coffee-script-1.12.7.tgz"
        },
        {
          "name": "cdx:npm:deprecated",
          "value": "CoffeeScript on NPM has moved to \"coffeescript\" (no hyphen)"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "zap",
      "version": "0.2.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "05c2242c4ed0ac9b31e707284475fd2154b86afde0fc04d559ffd6edf17b12f07a7c7ee1aa703e3e3047de75f7779ba8a36873d4d8badf8f87b0aeb0d084da2a"
        }
      ],
      "purl": "pkg:npm/zap@0.2.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/zap/-/zap-0.2.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/zap@0.2.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/zap/-/zap-0.2.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "docco",
      "version": "0.9.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f3dca0c44f911c4302c4b6ca5b543e7f4d530f669407e21112f3d3f8785e26bfa1161a5f7ca653450ab4e122943e04ee045213e9538f5a1d5b3a5aa4a317cdbc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/docco@0.9.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/docco/-/docco-0.9.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/docco@0.9.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/docco/-/docco-0.9.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "8.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3a44cbf6e99ff877b60d9914abc7fc27da1fef22fa449288db875521306635f6419ab8bdcd8650aca92e5e22a1c9f3d2bbcb5486754107588a5debef9e54785b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/commander@8.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/commander/-/commander-8.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@8.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/commander/-/commander-8.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-extra",
      "version": "10.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "35b76854c66ca362ecae7fd0c0b5cecbaae6d2e7d8db310e2820f3251ff4901b1bd04eaa79dd0fde260af80b61dc17ef5c47aee09844b572e020bc79a6c51f6a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fs-extra@10.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/fs-extra/-/fs-extra-10.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-extra@10.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/fs-extra/-/fs-extra-10.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.11",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "45b279fe398570d342703579a3d7939c12c9fc7b33595d0fef76dcf857f89d2feb263f98692e881b288e2f45680585fe9755ab97793ade1fcaac7fa7849d17bd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.11",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/graceful-fs/-/graceful-fs-4.2.11.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.11",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/graceful-fs/-/graceful-fs-4.2.11.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "jsonfile",
      "version": "6.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf039374bdeb150fe545d0679ed295397ea4e5c289c047351dd8a54fbd41584bbb278d605c8076311a7ebf176e3d2c1924f581c44cefe321f5c182c91941d7e1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/jsonfile@6.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/jsonfile/-/jsonfile-6.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/jsonfile@6.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/jsonfile/-/jsonfile-6.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "universalify",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "829b4735082120d9dcfef4c6224d12385185357c3b255ae5454b42a2725196f6b0e83b97d303b925e928f6c5ab301861f8fb18019ee85c088e9dffd42a88328b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/universalify@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/universalify/-/universalify-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/universalify@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/universalify/-/universalify-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "highlight.js",
      "version": "11.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3d48424673e32ed88b1d9010e40fc3b7917c71665e3328fd291b000ac593f8e0fa38fd31e9da793a64f98ddc742601323f13d96483d0a513764dc8944fba1c73"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/highlight.js@11.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/highlight.js/-/highlight.js-11.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/highlight.js@11.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/highlight.js/-/highlight.js-11.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "marked",
      "version": "4.0.19",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae0405fcec4e88b72f814023d50d6d01fe018319f98792594e9d38171e17524561b3b07eed803d244589849a683bc789b7c32464cc2a2c235e36a8f56c244465"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/marked@4.0.19",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/marked/-/marked-4.0.19.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/marked@4.0.19",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/marked/-/marked-4.0.19.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "diff",
      "version": "9.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b2fb5c7694bc0a0272a808c44085dd6f73a3845555623cc600f3bc5860a645bae697ae123f0fe3243e06a04f7c691eebdb90345dc82b2b7174db2c3d47fbe143"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "BSD-3-Clause",
            "url": "https://opensource.org/licenses/BSD-3-Clause"
          }
        }
      ],
      "purl": "pkg:npm/diff@9.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/diff/-/diff-9.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/diff@9.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://els-java-dev.nexus.svcs.io/repository/npmjs-registry/diff/-/diff-9.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/sax@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/underscore@1.13.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xmlbuilder@1.1.2",
      "dependsOn": [
        "pkg:npm/underscore@1.13.8"
      ]
    },
    {
      "ref": "pkg:npm/coffee-script@1.12.7",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/zap@0.2.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@8.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/graceful-fs@4.2.11",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/universalify@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/jsonfile@6.2.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/universalify@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/fs-extra@10.0.1",
      "dependsOn": [
        "pkg:npm/graceful-fs@4.2.11",
        "pkg:npm/jsonfile@6.2.1",
        "pkg:npm/universalify@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/highlight.js@11.3.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/marked@4.0.19",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/docco@0.9.2",
      "dependsOn": [
        "pkg:npm/commander@8.3.0",
        "pkg:npm/fs-extra@10.0.1",
        "pkg:npm/highlight.js@11.3.1",
        "pkg:npm/marked@4.0.19",
        "pkg:npm/underscore@1.13.8"
      ]
    },
    {
      "ref": "pkg:npm/diff@9.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xml2js@0.4.4-tuxcare.1",
      "dependsOn": [
        "pkg:npm/coffee-script@1.12.7",
        "pkg:npm/diff@9.0.0",
        "pkg:npm/docco@0.9.2",
        "pkg:npm/sax@0.6.1",
        "pkg:npm/xmlbuilder@1.1.2",
        "pkg:npm/zap@0.2.9"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/xml2js@0.4.4-tuxcare.1"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.2.1",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.2.1",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.2.1",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-04-28T19:35:38Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Tuesday, April 28, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'xml2js' with version '0.4.4-tuxcare.1'."
    }
  ]
}