{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:35e6aa76-4be1-46da-a8a4-1a65ea66eb43",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-30T11:51:28Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "bare-addon-resolve",
      "group": "",
      "version": "1.10.0",
      "description": "Low-level addon resolution algorithm for Bare",
      "purl": "pkg:npm/bare-addon-resolve@1.10.0",
      "bom-ref": "pkg:npm/bare-addon-resolve@1.10.0",
      "author": "Holepunch",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "test"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/holepunchto/bare-addon-resolve#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/holepunchto/bare-addon-resolve.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@jridgewell\\n@types"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "",
      "name": "bare-module-resolve",
      "version": "1.12.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85b9803f216912af05a1931de6c14edeee8c0b97de96e5a8184f182a503c7c2ae5ea636dc7af168e0e034e20c972a4496a8bd3bce60a7d89e0a015276da4fb7a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-module-resolve@1.12.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-module-resolve/-/bare-module-resolve-1.12.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-module-resolve@1.12.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-module-resolve/-/bare-module-resolve-1.12.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "bare-module-resolve"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "index.js#1"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-url",
      "version": "2.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64cab881df67815e5a4cc6b9a7df947d8d1bdec93084710b6839211077ad31d5f42d1916f64cdaca6e28a3f121f86866d02083b8c4ec44818cff2b547356589b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-url@2.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-url/-/bare-url-2.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-url@2.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-url/-/bare-url-2.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-path",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b727d6d9c41c07934df126a28eb86a9f4661ec09c536c9dccd172e58e0c7d1e6005c1b09e60571014b8dafbb6c1d20ba219efb700d128adcd3face3b928b7c33"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-path@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-path/-/bare-path-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-path@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-path/-/bare-path-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-os",
      "version": "3.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4fe575fb5b2b536a98341989097664518e6f43407815294bdd00d13a729060ea9e89047c51b8cd1e53daf9321b33872e89d88df4669368e66048482cbcf6e1e4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-os@3.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-os/-/bare-os-3.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-os@3.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-os/-/bare-os-3.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-semver",
      "version": "1.0.2",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11255a3769f35a1708e6d7f767372af5aa8267aefa556ceac34ede119d2ac4070438015805ad295aaf2c2b7e0e41e1cb63726c7ca5d94bd983cb3cb11a378bcc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-semver@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-semver/-/bare-semver-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-semver@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-semver/-/bare-semver-1.0.2.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "bare-semver"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "index.js#2"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "brittle",
      "version": "3.19.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e1379dd4cb7da3d07aa0803a2262490ad07f16ffbe64edc80cd42045c1ce5d6498191522760c5c85a1ab5016919fee26967797ae02273e408fce2d233bca8a6c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/brittle@3.19.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/brittle/-/brittle-3.19.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/brittle@3.19.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/brittle/-/brittle-3.19.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "b4a",
      "version": "1.7.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e50da67ead967c6b85a77b92fffd2ce9b68e24b32855db8f61578d983631bb9394035fdc05fbebd91212eef8bad8b74d8ffbab93585f9a3f3aec8deab7ab99ed"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/b4a@1.7.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/b4a/-/b4a-1.7.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/b4a@1.7.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/b4a/-/b4a-1.7.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-assert",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "73abaf82f4c906ca530f1b559cf82b04a98b81ca56dc5a7bd8d54a0cb83aa13e108d06e11adbeb90732119830ad6c878be30473819ae51a972b7d852cd5dfb7d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-assert@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-assert/-/bare-assert-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-assert@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-assert/-/bare-assert-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-inspect",
      "version": "3.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8df5b929103ce28dd112923a56be276ef327fa1a95030f0653598c751c14b18e72268bd06a6c5878a195286a9dcecfbc65b1b88d1cc65173ffdc98bf0e7a9f3e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-inspect@3.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-inspect/-/bare-inspect-3.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-inspect@3.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-inspect/-/bare-inspect-3.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-ansi-escapes",
      "version": "2.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d36112e3f13645baed6529c727d2e7b4185890b03a94fa5211e3fc8aa4b731c701215855065126aee17523b1d9ab1e50f1a8937987d055eaa6ad4f583b6c98a1"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-ansi-escapes@2.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-ansi-escapes/-/bare-ansi-escapes-2.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-ansi-escapes@2.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-ansi-escapes/-/bare-ansi-escapes-2.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-stream",
      "version": "2.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a325d0362715d72f2773668a7df1fe0541c54579b1e95acfce59da12f321ada9b49cf06b29c11d732060e6bd3c0f48bc5719e01c50225729f540a5e9486d01f0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-stream@2.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-stream/-/bare-stream-2.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-stream@2.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-stream/-/bare-stream-2.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-events",
      "version": "2.8.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae2263cafd7f9872c83d7e11c222bea16f7fe1cdd311478e44729e7ca00a9d9e64cac95b37e1d7a30b5b69512ab7820c501ece5e57e2c5cb3a82c15ea3f8e189"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-events@2.8.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-events/-/bare-events-2.8.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-events@2.8.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-events/-/bare-events-2.8.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "streamx",
      "version": "2.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "927f9ee387ac55f9f615afced023c571ec76edf8c82fa32455a7b4326eaaf84e9fd215afe7bf1808445bbfee26d36723c6f0ec3ca2e79b1ada97fad1ea504c02"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/streamx@2.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/streamx/-/streamx-2.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/streamx@2.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/streamx/-/streamx-2.23.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "events-universal",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2d47797aebdb30ba70385f26ea2bcf09b85079289854d6fc56cd1f43c4235e8d094e4107a73f29c5d41fd204ad96d68fa70d0271af1bdfd2b1bcaf5c7ca46203"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/events-universal@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/events-universal/-/events-universal-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/events-universal@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/events-universal/-/events-universal-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fast-fifo",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fddf6c7e8b38cb1ce9c240e4b8dee4d92a852ad60d9824f381f129cfcdb1df820cf7fcdcf0a1b14285e0d6588d0bf8b3a5133f30176de38366c78d595aa93e15"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/fast-fifo@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fast-fifo/-/fast-fifo-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fast-fifo@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/fast-fifo/-/fast-fifo-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "text-decoder",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "dffa3dcf75f45f47d3ba9c2c62f474de927f0e35aeaaaadfc018134337560e24129bd2a2b40cb3ffd5aab13d89416eca5769be6c2da897fceaa56dfb347c4b68"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/text-decoder@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/text-decoder/-/text-decoder-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/text-decoder@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/text-decoder/-/text-decoder-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-type",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ddb679c411895d39cf3b0ebe06a6c2a74ad4ad664df37e0a04317cbccaf119917adc0aff51b580eb518585b01407b5a074b351145a672f4ba5e61196088f707"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-type@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-type/-/bare-type-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-type@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-type/-/bare-type-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-cov",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "48736a6ff586f6e754123f26e6a1927a1a1443da345f3bfc9eb7f81c87661be28d53f5dd84f2e14cfe553eb1e74803005e1033101e10fb6218674c7da8fccdd6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-cov@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-cov/-/bare-cov-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-cov@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-cov/-/bare-cov-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-fs",
      "version": "4.5.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f7e930571f1062fb7784f5a799bd7db4f9e1dfc73a362873f0bc77b7483dfb81a821fdff7d3818c0ce19e8dc6023e07d7a52d003b98b13d3e9a9c5ad38c44389"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-fs@4.5.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-fs/-/bare-fs-4.5.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-fs@4.5.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-fs/-/bare-fs-4.5.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-inspector",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c9893afbbb5354a24a1ce8dae7e4019fdf3d113bfca15b26c281f49c233e4180bac39302d37182e1a40d2be962a40652cf511a023e36599f167b08e9cb42fd4c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-inspector@4.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-inspector/-/bare-inspector-4.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-inspector@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-inspector/-/bare-inspector-4.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-tcp",
      "version": "2.2.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bc68df324ca14b5971a7e638fa05d10d1d628d930ad9c2b1d11070b58294b996c3f740110a833a6c08936b51c1cedba60880be3576fc79774c157cae63094fcb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-tcp@2.2.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-tcp/-/bare-tcp-2.2.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-tcp@2.2.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-tcp/-/bare-tcp-2.2.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-dns",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "69bc231e6a56a9244d07b579eb5e50c4f1fdd8bef5015cc59bf90a4ecf15622353022db155da27a6fd018c9d21c172f0a26a16fb1b1238f8d6e8f64f3b5e1ab2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-dns@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-dns/-/bare-dns-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-dns@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-dns/-/bare-dns-2.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-http1",
      "version": "4.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf2bc7177c73bc124da6ec34432744f5eb539f60320bf4d1543593a3c11ddcb4041066853a4bfa28785a24f95fe1e5847937a4938d45a3089ef9f4ec5e837190"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-http1@4.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-http1/-/bare-http1-4.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-http1@4.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-http1/-/bare-http1-4.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-http-parser",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0372d30d37042dc98d27783996221a4b4dfcbff050c4e840f5c8e10444a7edea15ed00ae32821104a2c369d0ded3c7e5c722dbc48d9ffb5976319ff9f879ca3c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-http-parser@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-http-parser/-/bare-http-parser-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-http-parser@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-http-parser/-/bare-http-parser-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "bare-ws",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "490317cc16276bd7518f9ec3cf5fda83e5561c24576df0a33078327ccd85da586454bccc8e755264fef669578558f16a7b8f7845def42b385ed891251b016525"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-ws@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-ws/-/bare-ws-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-ws@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-ws/-/bare-ws-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-crypto",
      "version": "1.13.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "450975df20fe61300259464730c724d02e8b3635e01a04728550b9e7b6a0d3122b9315dfe08430a6773c58e079f1fe24e644b32a1223cb4e685b71d406b16949"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-crypto@1.13.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-crypto/-/bare-crypto-1.13.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-crypto@1.13.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-crypto/-/bare-crypto-1.13.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "crypto"
      ]
    },
    {
      "group": "",
      "name": "bare-https",
      "version": "2.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "43e4d3c9d503b2e29026f87c757d9dbce5c247d7ccdf14794c198a685aece69ecb8fb5db297eefe2f214277e87d125e0db108e4315ca21b8f0acb839b5f24d62"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-https@2.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-https/-/bare-https-2.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-https@2.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-https/-/bare-https-2.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-tls",
      "version": "2.1.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "87ac1c35741d05e4d7edf79df6d8cfa74ffd700fd07dc053bf722d8239db524e2b58053c6c415a9590999d40dd08afedf73acd7c9fb2bdc3f1e03ff563a6e2c8"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-tls@2.1.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-tls/-/bare-tls-2.1.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-tls@2.1.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-tls/-/bare-tls-2.1.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-net",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "505edc01b1ec184f87eae12a585e4850b068c35c79f1c859cf883700b807b6fef066c15c09b443b7424a584ba67f93a66b74164b543a68b8b4469965f1112532"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-net@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-net/-/bare-net-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-net@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-net/-/bare-net-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-pipe",
      "version": "4.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ea42cc7ddeb033adeeb227d4fa97f56087e5fe6e7b6454c0755f9820b578d7b6ab4c985d98d915650b3c71cbfd3d47ac9e47d15258111421a31824bd7fe550c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-pipe@4.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-pipe/-/bare-pipe-4.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-pipe@4.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-pipe/-/bare-pipe-4.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-process",
      "version": "4.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8a4cc4c3e1c62c1fb6952fd62d512caa2f015c1c3395e1b79fb0d8234bfafd836496f35a6ce20694b7757687feec9c39a1be23b0144fb727e5c1e55a858eeb14"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-process@4.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-process/-/bare-process-4.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-process@4.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-process/-/bare-process-4.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-env",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d2ef7ae0fe592c0c538be956e0a8e9ed8449439819afdc9c60eb632f1b12aeea60333dec9f967d9f8487fc92227c7c2f69db1fd5bac0d890233fef48396c138b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-env@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-env/-/bare-env-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-env@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-env/-/bare-env-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-hrtime",
      "version": "2.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54c6f7b47a34e60b276eedce5d39a40e2c138cc94eb1b4262a8cac2aa284c91d3d9bbed3b83ad815b8f7439186935d1d00ab141eb9d79b009a789ab356907964"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-hrtime@2.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-hrtime/-/bare-hrtime-2.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-hrtime@2.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-hrtime/-/bare-hrtime-2.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-signals",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7cd1cc39d408958b93bcc0773a1f40a64f7d84b2a7df9d7e22bf2fcfe92188f4dc3aa232186e2e5968dd2d3cf159d606b00d1e4fe59edf2d0aef88638f69eaec"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-signals@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-signals/-/bare-signals-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-signals@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-signals/-/bare-signals-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-tty",
      "version": "5.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "8d6db844159164e307b921160bd9a1f3050a3b9594365d145944cd3e7df267caa43aac1af2f695d9d4776be06f6e538d3e4ed5df9c2ebcaf4ff39d3cfa3b9d02"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-tty@5.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-tty/-/bare-tty-5.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-tty@5.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-tty/-/bare-tty-5.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-v8-to-istanbul",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "08cd303e0c90b574d0ee1e2af0d8db4d9fc51f985ed09922c20a6ad25159640e6d915673990ffdba5e11ec4f9c365199248665419f6fe02c1b8156851b7cce00"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-v8-to-istanbul@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-v8-to-istanbul/-/bare-v8-to-istanbul-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-v8-to-istanbul@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-v8-to-istanbul/-/bare-v8-to-istanbul-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "bare-module",
      "version": "6.1.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e575ac547b2fb56307e2d2b80d05a0a4d4d5d2dfec83766b01a40b231af08eb4b9faef10f6f12073fcd0e106833d60ec7bfcbfe61f9df981b543425f48cb74cc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-module@6.1.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-module/-/bare-module-6.1.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-module@6.1.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-module/-/bare-module-6.1.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-bundle",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e0b5659c9007af4d0787a56ee995094b7f2b704b494f76f7bc28574ac06c2769a4d53374950fa0cddf83c392f4695eeea8366ff38b26bb05be3b4d97ecf7c397"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-bundle@1.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-bundle/-/bare-bundle-1.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-bundle@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-bundle/-/bare-bundle-1.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-module-lexer",
      "version": "1.4.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d24954e1e32c8e1ff07318bc15d1e63689b68f61789269173a1c8914bf6a4da485a76944de6e81b5b2a030763c4799a2a82f6bf3f21f03cc335e70b93acd7858"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-module-lexer@1.4.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-module-lexer/-/bare-module-lexer-1.4.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-module-lexer@1.4.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-module-lexer/-/bare-module-lexer-1.4.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "require-addon",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54d3c36656202184305a9f63313ce58f1fa4d19b5ab4a95cbce864b59fda9cd3c8ddd43d35793b72ad94e22275c1df48af2b519d887212870559b91d3dbf8c60"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/require-addon@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/require-addon/-/require-addon-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/require-addon@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/require-addon/-/require-addon-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-addon-resolve",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b127748e27912650da3833b38f4a1ed118c5542d502346488c621d3e46eb4d7b1d555b44360d7873e9471c0847c265826769d094c872f230376392d83dcfe2b0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-addon-resolve@1.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-addon-resolve/-/bare-addon-resolve-1.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-addon-resolve@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-addon-resolve/-/bare-addon-resolve-1.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-utils",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b10a416f9835379a50ff99bfa94fae242973acc7628cb162d06e780dd4b07e34e5df85f9d19f2be9cb755973a9bb8334317b9ec1b22f9a4c206a038fd2dde95"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-utils@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-utils/-/bare-utils-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-utils@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-utils/-/bare-utils-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-debug-log",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "562e363e4310b0d57d3d4a71d8697586292c871e4ef45ccc27aa3d367a29b1e83ba8b0412bb365df577444771fc0b1007e670f029cada5cd1915fabaf2edb615"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-debug-log@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-debug-log/-/bare-debug-log-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-debug-log@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-debug-log/-/bare-debug-log-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-encoding",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f53e424826b2b5a216669156c7d2d02c9ebfcff9b64a59da9fdb5004a98ebe8abf52d3c16ce293fc1d9fa36f57862e17d4516d371f0315db6b160aa6db2b1efd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-encoding@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-encoding/-/bare-encoding-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-encoding@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-encoding/-/bare-encoding-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-format",
      "version": "1.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d684be2d9ad62bab67627bcd4870c696373630fba7471c21a45ae2b82833345fa8925ae7c2604a0fdd6d4b4cadfa3a65da3dd481c483cc120c8954ef2ecf40f3"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-format@1.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-format/-/bare-format-1.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-format@1.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-format/-/bare-format-1.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "v8-to-istanbul",
      "version": "9.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9221946a558dfab80127fd4e1d9b01b54e2b5d939f8ffeeb290c542ca948cf0cd04af3095143603f0244121ee053ac445710b46a1a0e06f376608f061fa14d80"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/v8-to-istanbul@9.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/v8-to-istanbul/-/v8-to-istanbul-9.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/v8-to-istanbul@9.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/v8-to-istanbul/-/v8-to-istanbul-9.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "@jridgewell",
      "name": "trace-mapping",
      "version": "0.3.31",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cf3351f9275048327373c8e869e3fc410a0242bf0db98c76748232b65d507811191c9f6e5ba85e6ecad881bcfc849c1441aa374d608cb667d5f0dbb5b7038b03"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/trace-mapping@0.3.31",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@jridgewell/trace-mapping/-/trace-mapping-0.3.31.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "resolve-uri",
      "version": "3.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6d12128022233f6d3fb5b5923d63048b9e1054f45913192e0fd9492fe508c542adc15240f305b54eb6f58ccb354455e8d42053359ff98690bd42f98a59da292b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/resolve-uri@3.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@jridgewell",
      "name": "sourcemap-codec",
      "version": "1.5.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71843ddf5d20aeac6e7966e5f96b885086a251a0dc8fb58eab97d58449633558117ce52163d7f2db34ef7e8a96b2779b87c4a5ef45527056c80af2672ca0743a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40jridgewell/sourcemap-codec@1.5.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@types",
      "name": "istanbul-lib-coverage",
      "version": "2.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d9017fb7f6ae5a6d25b32f17b4a54f1b5f6fdec48e42525efd81d981f8dbfca0411ce19257e276abf4baef5adcabdb9306b2c05e6669a8989a41b313fb3354d7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/%40types/istanbul-lib-coverage@2.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "test"
      ]
    },
    {
      "group": "",
      "name": "convert-source-map",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2afa78e7d1eb576144275080b22d4abbe318de46ac1f5f53172913cf6c5698c7aae9b936354dd75ef7c9f90eb59b4c64b56c2dfb51d261fdc966c4e6b3769126"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/convert-source-map@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/convert-source-map/-/convert-source-map-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/convert-source-map@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/convert-source-map/-/convert-source-map-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "which-runtime",
      "version": "1.3.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e64c027d69a5efe6f634eecaacb321622863471d2d78a91ddf21a9d5793955a7f624675287eae05611002c00fd73fe7d74ff98c091d7a043bb7bc40fcbb80e93"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/which-runtime@1.3.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/which-runtime/-/which-runtime-1.3.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/which-runtime@1.3.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/which-runtime/-/which-runtime-1.3.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "picomatch",
      "version": "4.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e604e680463fb2a2ba8055cb22c40d1f5f6559be1e6cf0cb03849d2cfeddb169085c75a51baea83ee56f5d21853e9a58673f190d9ab475862b6c77c109551bd5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/picomatch@4.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/picomatch/-/picomatch-4.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/picomatch@4.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/picomatch/-/picomatch-4.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bare-subprocess",
      "version": "5.2.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2faa17810d5a5acdb946d1b92b2d1b0c3d3aa7744071556b0c33166f50df5e91edc845b16a673221651b4b29313135aba4b9664a3eb2b5b6faca829e84615f9b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/bare-subprocess@5.2.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-subprocess/-/bare-subprocess-5.2.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bare-subprocess@5.2.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/bare-subprocess/-/bare-subprocess-5.2.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "error-stack-parser",
      "version": "2.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4a4e55eb055accf86ae4c8693be014c499f9c7b5d25c697547ddd59fb8becd2d792835714228de8cd0abcfcdf8d3fd9b80b06347d1ad106f1954a38d0e372a19"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/error-stack-parser@2.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/error-stack-parser/-/error-stack-parser-2.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/error-stack-parser@2.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/error-stack-parser/-/error-stack-parser-2.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "parse"
      ]
    },
    {
      "group": "",
      "name": "stackframe",
      "version": "1.3.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a1e56db7b796412f8d6ba17ffd2e242762b655b4654bd0f8de6025332569556a2fcbda3e8df807f0ef5a83300dcda88b8dc940d2863351710ce0fbab85250287"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/stackframe@1.3.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stackframe/-/stackframe-1.3.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/stackframe@1.3.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/stackframe/-/stackframe-1.3.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "globbie",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85caf226629c7ed7fcdb17c15935b1b9421358822860edde735d38575ed230718597a54b6e6d5dd49bbd2d7f4bfa3c894f0202a5e997fdd98f23f1c66282abd4"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/globbie@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/globbie/-/globbie-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/globbie@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/globbie/-/globbie-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "paparam",
      "version": "1.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a77e9042bc14dd7e9f8f977624ddb407895c648fceddfc4c5541dcd710fb30d7b96dc39fde32201340882b966ffece580141a5a1b4c9fe4297ae1d45255aecdf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/paparam@1.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/paparam/-/paparam-1.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/paparam@1.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/paparam/-/paparam-1.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "same-object",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "72c1d686f52c2db20e1c333f9cff8a1d633e04b3ec2335a415af076f3688d06ec1a8a5e0c7eec52692931a02d7cb3e5a99f758d8e5417265d3a9838c124d38a2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/same-object@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/same-object/-/same-object-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/same-object@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/same-object/-/same-object-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "test-tmp",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "195820c4683e8d7a8fd966e3bb9d0954ba3ef44fa720e3cfc96aa0afadc46ce9cd22d20abb57046c9a5358025e7e59f21aa5ceb5c308ee28c7469f3c19491f0c"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/test-tmp@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/test-tmp/-/test-tmp-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/test-tmp@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/test-tmp/-/test-tmp-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tmatch",
      "version": "5.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "21bf4eb419291e7d3bb573f4e1294dd52611c4581393ac123361019a38f1ba0e2ee515cf4552e47452524b53e6ad089d69207c2ebbbd9d1b5589006c6f1cc4e5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "ISC",
            "url": "https://opensource.org/licenses/ISC"
          }
        }
      ],
      "purl": "pkg:npm/tmatch@5.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tmatch/-/tmatch-5.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tmatch@5.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/tmatch/-/tmatch-5.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prettier",
      "version": "3.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "50e9c6e8b7edcdb75a1d970aa0f16d39c08acedad0e7b5a41c37910fdb7f3d342d993d0d1d279659ea63ea94b4cff37bfb4f011c50d0554adf99f311719c1b32"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "purl": "pkg:npm/prettier@3.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/prettier/-/prettier-3.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier@3.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/prettier/-/prettier-3.8.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "prettier-config-holepunch",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "caeb2471d3d17d060b14f90e1afc52e1316609bed0bc0a308cef9868d2cf2c15917affaabba1d7a0a90f587f657cdb0bf60513855ec8799eadfc1d504aefe39e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0"
          }
        }
      ],
      "purl": "pkg:npm/prettier-config-holepunch@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/prettier-config-holepunch/-/prettier-config-holepunch-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/prettier-config-holepunch@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/prettier-config-holepunch/-/prettier-config-holepunch-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/bare-os@3.6.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-path@3.0.0",
      "dependsOn": [
        "pkg:npm/bare-os@3.6.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-url@2.3.2",
      "dependsOn": [
        "pkg:npm/bare-path@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-semver@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-module-resolve@1.12.1",
      "dependsOn": [
        "pkg:npm/bare-semver@1.0.2",
        "pkg:npm/bare-url@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/b4a@1.7.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-events@2.8.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/events-universal@1.0.1",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2"
      ]
    },
    {
      "ref": "pkg:npm/fast-fifo@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/text-decoder@1.2.3",
      "dependsOn": [
        "pkg:npm/b4a@1.7.3"
      ]
    },
    {
      "ref": "pkg:npm/streamx@2.23.0",
      "dependsOn": [
        "pkg:npm/events-universal@1.0.1",
        "pkg:npm/fast-fifo@1.3.2",
        "pkg:npm/text-decoder@1.2.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-stream@2.7.0",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/streamx@2.23.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-ansi-escapes@2.2.3",
      "dependsOn": [
        "pkg:npm/bare-stream@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-type@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-inspect@3.1.4",
      "dependsOn": [
        "pkg:npm/bare-ansi-escapes@2.2.3",
        "pkg:npm/bare-type@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-assert@1.2.0",
      "dependsOn": [
        "pkg:npm/bare-inspect@3.1.4"
      ]
    },
    {
      "ref": "pkg:npm/bare-fs@4.5.3",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-stream@2.7.0",
        "pkg:npm/bare-url@2.3.2",
        "pkg:npm/fast-fifo@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-dns@2.1.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-tcp@2.2.4",
      "dependsOn": [
        "pkg:npm/bare-dns@2.1.4",
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-stream@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-http-parser@1.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-http1@4.2.3",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-http-parser@1.0.1",
        "pkg:npm/bare-stream@2.7.0",
        "pkg:npm/bare-tcp@2.2.4",
        "pkg:npm/bare-url@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-crypto@1.13.0",
      "dependsOn": [
        "pkg:npm/bare-stream@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-pipe@4.1.3",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-stream@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-net@2.2.0",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-pipe@4.1.3",
        "pkg:npm/bare-stream@2.7.0",
        "pkg:npm/bare-tcp@2.2.4"
      ]
    },
    {
      "ref": "pkg:npm/bare-tls@2.1.7",
      "dependsOn": [
        "pkg:npm/bare-net@2.2.0",
        "pkg:npm/bare-stream@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-https@2.1.2",
      "dependsOn": [
        "pkg:npm/bare-http1@4.2.3",
        "pkg:npm/bare-tcp@2.2.4",
        "pkg:npm/bare-tls@2.1.7"
      ]
    },
    {
      "ref": "pkg:npm/bare-ws@2.0.4",
      "dependsOn": [
        "pkg:npm/bare-crypto@1.13.0",
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-http1@4.2.3",
        "pkg:npm/bare-https@2.1.2",
        "pkg:npm/bare-stream@2.7.0",
        "pkg:npm/bare-url@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-inspector@4.0.3",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-http1@4.2.3",
        "pkg:npm/bare-stream@2.7.0",
        "pkg:npm/bare-tcp@2.2.4",
        "pkg:npm/bare-url@2.3.2",
        "pkg:npm/bare-ws@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/bare-env@3.0.0",
      "dependsOn": [
        "pkg:npm/bare-os@3.6.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-hrtime@2.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-signals@4.2.0",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-os@3.6.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-tty@5.0.3",
      "dependsOn": [
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-signals@4.2.0",
        "pkg:npm/bare-stream@2.7.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-process@4.2.2",
      "dependsOn": [
        "pkg:npm/bare-env@3.0.0",
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-hrtime@2.1.1",
        "pkg:npm/bare-os@3.6.2",
        "pkg:npm/bare-pipe@4.1.3",
        "pkg:npm/bare-signals@4.2.0",
        "pkg:npm/bare-tty@5.0.3"
      ]
    },
    {
      "ref": "pkg:npm/bare-bundle@1.10.0",
      "dependsOn": [
        "pkg:npm/bare-url@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-addon-resolve@1.10.0",
      "dependsOn": [
        "pkg:npm/bare-module-resolve@1.12.1",
        "pkg:npm/bare-semver@1.0.2",
        "pkg:npm/bare-url@2.3.2",
        "pkg:npm/brittle@3.19.1",
        "pkg:npm/prettier-config-holepunch@2.0.0",
        "pkg:npm/prettier@3.8.1"
      ]
    },
    {
      "ref": "pkg:npm/require-addon@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-module-lexer@1.4.7",
      "dependsOn": [
        "pkg:npm/require-addon@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/bare-module@6.1.3",
      "dependsOn": [
        "pkg:npm/bare-bundle@1.10.0",
        "pkg:npm/bare-module-lexer@1.4.7",
        "pkg:npm/bare-module-resolve@1.12.1",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-url@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-debug-log@2.0.0",
      "dependsOn": [
        "pkg:npm/bare-os@3.6.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-encoding@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-format@1.0.1",
      "dependsOn": [
        "pkg:npm/bare-inspect@3.1.4"
      ]
    },
    {
      "ref": "pkg:npm/bare-utils@1.5.1",
      "dependsOn": [
        "pkg:npm/bare-debug-log@2.0.0",
        "pkg:npm/bare-encoding@1.0.0",
        "pkg:npm/bare-format@1.0.1",
        "pkg:npm/bare-inspect@3.1.4",
        "pkg:npm/bare-type@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@jridgewell/resolve-uri@3.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/sourcemap-codec@1.5.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@jridgewell/trace-mapping@0.3.31",
      "dependsOn": [
        "pkg:npm/@jridgewell/resolve-uri@3.1.2",
        "pkg:npm/@jridgewell/sourcemap-codec@1.5.5"
      ]
    },
    {
      "ref": "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/convert-source-map@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/v8-to-istanbul@9.3.0",
      "dependsOn": [
        "pkg:npm/@jridgewell/trace-mapping@0.3.31",
        "pkg:npm/@types/istanbul-lib-coverage@2.0.6",
        "pkg:npm/convert-source-map@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/which-runtime@1.3.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-v8-to-istanbul@1.0.2",
      "dependsOn": [
        "pkg:npm/bare-assert@1.2.0",
        "pkg:npm/bare-fs@4.5.3",
        "pkg:npm/bare-module@6.1.3",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-process@4.2.2",
        "pkg:npm/bare-url@2.3.2",
        "pkg:npm/bare-utils@1.5.1",
        "pkg:npm/v8-to-istanbul@9.3.0",
        "pkg:npm/which-runtime@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/picomatch@4.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bare-cov@1.2.1",
      "dependsOn": [
        "pkg:npm/bare-fs@4.5.3",
        "pkg:npm/bare-inspector@4.0.3",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-process@4.2.2",
        "pkg:npm/bare-url@2.3.2",
        "pkg:npm/bare-v8-to-istanbul@1.0.2",
        "pkg:npm/picomatch@4.0.3",
        "pkg:npm/which-runtime@1.3.2"
      ]
    },
    {
      "ref": "pkg:npm/bare-subprocess@5.2.2",
      "dependsOn": [
        "pkg:npm/bare-env@3.0.0",
        "pkg:npm/bare-events@2.8.2",
        "pkg:npm/bare-os@3.6.2",
        "pkg:npm/bare-pipe@4.1.3",
        "pkg:npm/bare-url@2.3.2"
      ]
    },
    {
      "ref": "pkg:npm/stackframe@1.3.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/error-stack-parser@2.1.4",
      "dependsOn": [
        "pkg:npm/stackframe@1.3.4"
      ]
    },
    {
      "ref": "pkg:npm/globbie@1.0.3",
      "dependsOn": [
        "pkg:npm/bare-fs@4.5.3",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-process@4.2.2",
        "pkg:npm/picomatch@4.0.3"
      ]
    },
    {
      "ref": "pkg:npm/paparam@1.10.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/same-object@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/test-tmp@1.4.0",
      "dependsOn": [
        "pkg:npm/bare-fs@4.5.3",
        "pkg:npm/bare-os@3.6.2",
        "pkg:npm/bare-path@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/tmatch@5.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/brittle@3.19.1",
      "dependsOn": [
        "pkg:npm/b4a@1.7.3",
        "pkg:npm/bare-assert@1.2.0",
        "pkg:npm/bare-cov@1.2.1",
        "pkg:npm/bare-fs@4.5.3",
        "pkg:npm/bare-os@3.6.2",
        "pkg:npm/bare-path@3.0.0",
        "pkg:npm/bare-process@4.2.2",
        "pkg:npm/bare-subprocess@5.2.2",
        "pkg:npm/bare-url@2.3.2",
        "pkg:npm/error-stack-parser@2.1.4",
        "pkg:npm/globbie@1.0.3",
        "pkg:npm/paparam@1.10.0",
        "pkg:npm/same-object@1.0.2",
        "pkg:npm/test-tmp@1.4.0",
        "pkg:npm/tmatch@5.0.0"
      ]
    },
    {
      "ref": "pkg:npm/prettier@3.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/prettier-config-holepunch@2.0.0",
      "dependsOn": [
        "pkg:npm/prettier@3.8.1"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/bare-addon-resolve@1.10.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-30T11:51:28Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Thursday, July 30, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'bare-addon-resolve' with version '1.10.0'. The package type in this SBOM is npm with 2 purl namespaces described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}