{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:95e0b45f-4c18-449c-8aed-c6ec4ec3d55f",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-27T07:10:09Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "ens-normalize",
      "group": "@adraffy",
      "version": "1.10.1",
      "description": "Ethereum Name Service (ENS) Name Normalizer",
      "purl": "pkg:npm/%40adraffy/ens-normalize@1.10.1",
      "bom-ref": "pkg:npm/@adraffy/ens-normalize@1.10.1",
      "author": "raffy.eth <raffy@me.com> (http://raffy.antistupid.com)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "unicode, labels, derive, make, validate, test, build, rebuild, order, pack, pub, prepublishOnly"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/adraffy/ens-normalize.js#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/adraffy/ens-normalize.js.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@jridgewell\\n@rollup"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@rollup",
      "name": "plugin-alias",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "97d858e5c8520a3b8544fb27466d7ab70581892029976b9814bb1ea50630b41b80c4d310ff5749a800e5778d0fd0992a9bae464532f2fc00ba867a5579bb4bb0"
        }
      ],
      "purl": "pkg:npm/%40rollup/plugin-alias@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@rollup/plugin-alias/-/plugin-alias-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/plugin-alias@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@rollup/plugin-alias/-/plugin-alias-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rollup",
      "version": "3.24.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4441dee5dc77d044414454b488434f1f2fadeb0b52118923ae1c0db0bca1deaa51699d7e6b296f31474c0541d6503fd18e32e62f312f63c67d5d196971d2241c"
        }
      ],
      "purl": "pkg:npm/rollup@3.24.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rollup/-/rollup-3.24.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rollup@3.24.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rollup/-/rollup-3.24.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fsevents",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c62a8c411e3101e1d3b81f6e5a6f9f1517083a02813223813fe7978b24fb8ec8150aad5b915ca0b74d28012a3007b11db6938769a3e02adf35d8ff5a6fe0c328"
        }
      ],
      "purl": "pkg:npm/fsevents@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fsevents@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.2.tgz"
        },
        {
          "name": "cdx:npm:hasInstallScript",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "slash",
      "version": "4.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ddd3ac0075d7524413a4e61ca00c4b228acc4e9e20210af9216de255bec0ee5148a74547867ca79bd8b3c7a4ecb1dac87152044809558ed9ced8af1b83e0a87b"
        }
      ],
      "purl": "pkg:npm/slash@4.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/slash/-/slash-4.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/slash@4.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/slash/-/slash-4.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@rollup",
      "name": "plugin-terser",
      "version": "0.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22971fdcb3cd7ab7b2d6af5932389a58794d3c41cd53f079fee87dcd72e5b5f110d655522cb7994a002d4cf586cb0f08a7582e39eabe983b5d3a5123ff037143"
        }
      ],
      "purl": "pkg:npm/%40rollup/plugin-terser@0.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@rollup/plugin-terser/-/plugin-terser-0.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@rollup/plugin-terser@0.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@rollup/plugin-terser/-/plugin-terser-0.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "serialize-javascript",
      "version": "6.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a30a171058d6465962b3cfccd50f82c3993c647e347b7ce1a7fa2f5fe5ebfef8b5aa3e907ac6f25d756215ba4dbd6bcf3400fad92badc045dabde7eb2c95a3ef"
        }
      ],
      "purl": "pkg:npm/serialize-javascript@6.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/serialize-javascript@6.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/serialize-javascript/-/serialize-javascript-6.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "randombytes",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd897788e5fee022945aec468bd5248627ba7eca97a92f4513665a89ce2d3450f637641069738c15bb8a2b84260c70b424ee81d59a78d49d0ba53d2847af1a99"
        }
      ],
      "purl": "pkg:npm/randombytes@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/randombytes@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/randombytes/-/randombytes-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "smob",
      "version": "0.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "576d7e5de3678beb53ca2493d4c1ec6bce004214f5685662a733e938501507c0e41f3c09ca38c09adf5b8309ee6626569c86cca3676e136f70c9bc6fffb1d653"
        }
      ],
      "purl": "pkg:npm/smob@0.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/smob/-/smob-0.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/smob@0.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/smob/-/smob-0.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "terser",
      "version": "5.16.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "20167e650200f6c31a5e64590943038cd1f40f901041f767e165231cbd3ed651784cfd481d125bae16fa7cd6975a292b6104d291bed22f191e5c08b2d69ee66e"
        }
      ],
      "purl": "pkg:npm/terser@5.16.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/terser/-/terser-5.16.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/terser@5.16.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/terser/-/terser-5.16.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "source-map",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9bb3bda36b91f24d8e6c3cac658cdd7e16f4f15b849a5e685868a8b1ad5575a3d9fc0e90c8f90026ec0dd10d658542ce7fa07b32d4261c4352ef8de15ad0ab83"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/source-map@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/source-map/-/source-map-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/source-map@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/source-map/-/source-map-0.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "gen-mapping",
      "version": "0.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a1eb9c4a400cc8ea205c173c2fdbc29559298291d4415a83a1f9b610196dfee8e66f6db3774ea306a3986a631427891707f45d95648a090a6e296b704f0cafc"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/gen-mapping@0.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/gen-mapping@0.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/gen-mapping/-/gen-mapping-0.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "set-array",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c6792c7ae3400ccd20b766ecf81be13b4a7bf0c93beb662765db2ecc5574d7c3681b54a3d52090be94aa6bb5d46936a6e6f0066ac00157da9701230a9c533033"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/set-array@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/set-array/-/set-array-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/set-array@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/set-array/-/set-array-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "sourcemap-codec",
      "version": "1.4.14",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5cf4891d69a2dfde1fb94bb30e71b3d7088aa967e8d725de70740c45fda5ea1ced4cefa73ebbbae7c0320e781a05eee2b08c44911b0f47715987eb3b8956b853"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.4.14",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.4.14.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.14",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.4.14.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.17",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "302373029efbab329c6bdf96ffe234fac1296949d9a1e6ac9e084d795738d5564210a6821fbdd5ab705967f4b358882ba84e07e1c788fa9f9be82d261dff53e2"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.17",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.17.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.17",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.17.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "resolve-uri",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1769ac95aded69df8c7e1b79709abb2d25dc76e74a4d6095614830ea92c538e1d24ed6658fa496358029f8086ea8b9967413b65f984facb72ef1c54ff1fcb6f3"
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "acorn",
      "version": "8.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c63218804f0706b92977fb09a8e18db297fcb871be34e1c63b0e9afd4ae3f2d68cd845df74d007da815c3de2057ecbf7fa4cff989ad2e55b8ca9b34b8c26b6bf"
        }
      ],
      "purl": "pkg:npm/acorn@8.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/acorn/-/acorn-8.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/acorn@8.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/acorn/-/acorn-8.8.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.20.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71"
        }
      ],
      "purl": "pkg:npm/commander@2.20.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.20.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map-support",
      "version": "0.5.21",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b811d4dcbddccec232617297f3c7ddac6a2fc5d482a13183459e92617b524712d95331e0e4fffae87b7aba85251eef4466877e8a75e12a8dea420c17513ff2d7"
        }
      ],
      "purl": "pkg:npm/source-map-support@0.5.21",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map-support@0.5.21",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.21.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-from",
      "version": "1.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "13e5d0091c126da6a20a1b6fea4e83c2073e6f1f81b3abee2891c7979928c7f05a29b8625f3a903b02b870edb6c84946a763829a3c15853dc79b18323c69c97d"
        }
      ],
      "purl": "pkg:npm/buffer-from@1.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-from@1.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "source-map",
      "version": "0.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "52381aa6e99695b3219018334fb624739617513e3a17488abbc4865ead1b7303f9773fe1d0f963e9e9c9aa3cf565bab697959aa989eb55bc16396332177178ee"
        }
      ],
      "purl": "pkg:npm/source-map@0.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/source-map@0.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/fsevents@2.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rollup@3.24.1",
      "dependsOn": [
        "pkg:npm/fsevents@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/slash@4.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@rollup/plugin-alias@5.0.0",
      "dependsOn": [
        "pkg:npm/rollup@3.24.1",
        "pkg:npm/slash@4.0.0"
      ]
    },
    {
      "ref": "pkg:npm/safe-buffer@5.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/randombytes@2.1.0",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pkg:npm/serialize-javascript@6.0.1",
      "dependsOn": [
        "pkg:npm/randombytes@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/smob@0.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/set-array@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.4.14",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/resolve-uri@3.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.17",
      "dependsOn": [
        "pkg:npm/@jridgewell/resolve-uri@3.1.0",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.14"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/gen-mapping@0.3.2",
      "dependsOn": [
        "pkg:npm/@jridgewell/set-array@1.1.2",
        "pkg:npm/@jridgewell/sourcemap-codec@1.4.14",
        "pkg:npm/@jridgewell/trace-mapping@0.3.17"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/source-map@0.3.2",
      "dependsOn": [
        "pkg:npm/@jridgewell/gen-mapping@0.3.2",
        "pkg:npm/@jridgewell/trace-mapping@0.3.17"
      ]
    },
    {
      "ref": "pkg:npm/acorn@8.8.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.20.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-from@1.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map@0.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/source-map-support@0.5.21",
      "dependsOn": [
        "pkg:npm/buffer-from@1.1.2",
        "pkg:npm/source-map@0.6.1"
      ]
    },
    {
      "ref": "pkg:npm/terser@5.16.6",
      "dependsOn": [
        "pkg:npm/@jridgewell/source-map@0.3.2",
        "pkg:npm/acorn@8.8.2",
        "pkg:npm/commander@2.20.3",
        "pkg:npm/source-map-support@0.5.21"
      ]
    },
    {
      "ref": "pkg:npm/@rollup/plugin-terser@0.4.0",
      "dependsOn": [
        "pkg:npm/rollup@3.24.1",
        "pkg:npm/serialize-javascript@6.0.1",
        "pkg:npm/smob@0.0.6",
        "pkg:npm/terser@5.16.6"
      ]
    },
    {
      "ref": "pkg:npm/@adraffy/ens-normalize@1.10.1",
      "dependsOn": [
        "pkg:npm/@rollup/plugin-alias@5.0.0",
        "pkg:npm/@rollup/plugin-terser@0.4.0",
        "pkg:npm/rollup@3.24.1"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@adraffy/ens-normalize@1.10.1"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-27T07:10:09Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Monday, July 27, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'ens-normalize' with version '1.10.1'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}