{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:7e002d68-705f-4fd1-914c-4a42c2eb6007",
  "version": 1,
  "metadata": {
    "timestamp": "2026-08-05T13:32:37Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.2",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "wizer",
      "group": "@bytecodealliance",
      "version": "11.0.3",
      "description": "The WebAssembly Pre-Initializer",
      "purl": "pkg:npm/%40bytecodealliance/wizer@11.0.3",
      "bom-ref": "pkg:npm/@bytecodealliance/wizer@11.0.3",
      "properties": [
        {
          "name": "cdx:npm:bin",
          "value": "wizer"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/bytecodealliance/wizer#readme"
        },
        {
          "type": "vcs",
          "url": "git+https://github.com/bytecodealliance/wizer.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@bytecodealliance\\n@emnapi\\n@napi-rs\\n@tybys"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@bytecodealliance",
      "name": "wizer-darwin-arm64",
      "version": "11.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "40a539b0b2d8332cfe5ce379c88a8fa1f7d06fca8b507fea59f9d7b95cfd19f33d2b7b074a70de9e43d498b6eacfa2feabecef5e78e11affaed30afe0d5751f0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40bytecodealliance/wizer-darwin-arm64@11.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@bytecodealliance/wizer-darwin-arm64/-/wizer-darwin-arm64-11.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bytecodealliance/wizer-darwin-arm64@11.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@bytecodealliance/wizer-darwin-arm64/-/wizer-darwin-arm64-11.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/npm/wizer/node_modules/.bin/wizer-darwin-arm64"
        },
        {
          "name": "cdx:npm:bin",
          "value": "wizer-darwin-arm64"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@bytecodealliance",
      "name": "wizer-darwin-x64",
      "version": "11.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de901c02d064a531c34c92f7f46f7124c66306c26b0814b5be8e495d5e54465cfca6eae4b2fef696c626f73a78bf01738f011240fbdeed9a07e2c668f5014a1a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40bytecodealliance/wizer-darwin-x64@11.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@bytecodealliance/wizer-darwin-x64/-/wizer-darwin-x64-11.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bytecodealliance/wizer-darwin-x64@11.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@bytecodealliance/wizer-darwin-x64/-/wizer-darwin-x64-11.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/npm/wizer/node_modules/.bin/wizer-darwin-x64"
        },
        {
          "name": "cdx:npm:bin",
          "value": "wizer-darwin-x64"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@bytecodealliance",
      "name": "wizer-linux-arm64",
      "version": "11.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3473bd71c789ec5e1beec3721d3fc645bcbe7e99bce60939edcedf39eae7665452829abafc051a7b56f8f0fd14ac95f08e86fb337a039c25bfb91bba6baaf557"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40bytecodealliance/wizer-linux-arm64@11.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@bytecodealliance/wizer-linux-arm64/-/wizer-linux-arm64-11.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bytecodealliance/wizer-linux-arm64@11.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@bytecodealliance/wizer-linux-arm64/-/wizer-linux-arm64-11.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/npm/wizer/node_modules/.bin/wizer-linux-arm64"
        },
        {
          "name": "cdx:npm:bin",
          "value": "wizer-linux-arm64"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@bytecodealliance",
      "name": "wizer-linux-s390x",
      "version": "11.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1bb5527064fc2bf1f68ef4da4335d345d7def368e2903c42551d63e23e2309e926645d23cd5dfdd166ae645fd0683074157658d1a00ea1bee0b7be8719b4b56b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40bytecodealliance/wizer-linux-s390x@11.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@bytecodealliance/wizer-linux-s390x/-/wizer-linux-s390x-11.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bytecodealliance/wizer-linux-s390x@11.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@bytecodealliance/wizer-linux-s390x/-/wizer-linux-s390x-11.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/npm/wizer/node_modules/.bin/wizer-linux-s390x"
        },
        {
          "name": "cdx:npm:bin",
          "value": "wizer-linux-s390x"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@bytecodealliance",
      "name": "wizer-linux-x64",
      "version": "11.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1efaa221c9d275a35e43f0ff43ad773978325b86d6b776d7ae5eb692ff8cbdc09e88cb2460b725463bef0c7f0cbeb8efb63b71d06c2eca1c8fe206056a2210c6"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40bytecodealliance/wizer-linux-x64@11.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@bytecodealliance/wizer-linux-x64/-/wizer-linux-x64-11.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bytecodealliance/wizer-linux-x64@11.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@bytecodealliance/wizer-linux-x64/-/wizer-linux-x64-11.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/npm/wizer/node_modules/.bin/wizer-linux-x64"
        },
        {
          "name": "cdx:npm:bin",
          "value": "wizer-linux-x64"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@bytecodealliance",
      "name": "wizer-win32-x64",
      "version": "11.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e4c310c137e91001e141a6c54fb619b43f972c1f6aa75952962c03a850a22c990c931bacfba84720968c40e8856fa2dbdab3f6300eb0e7ba7b4fb498665f6e72"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "Apache-2.0",
            "url": "https://opensource.org/licenses/Apache-2.0",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40bytecodealliance/wizer-win32-x64@11.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@bytecodealliance/wizer-win32-x64/-/wizer-win32-x64-11.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bytecodealliance/wizer-win32-x64@11.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://proxy.nexus.atm.svcs.io/repository/npmjs/@bytecodealliance/wizer-win32-x64/-/wizer-win32-x64-11.0.3.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/npm/wizer/node_modules/.bin/wizer-win32-x64"
        },
        {
          "name": "cdx:npm:bin",
          "value": "wizer-win32-x64"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cd2e4bb8dd4e04f03266975ad9966060e1030bec5e7147401a7aef6d8ce39cb5e4aeafce042dc1f6a711be5c5b0d1de4e47fe055fbde7f5fe3c94a8f927aa36e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma/-/lzma-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma/-/lzma-1.4.5.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "@napi-rs/lzma/xz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "update.js",
            "line": 11
          },
          {
            "location": "update.js",
            "line": 111
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-android-arm-eabi",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "529e20a72c3649a726c8a5961226f4e868620dd17e1fe0825342c057ca67338689203a8a29de4b1d294186df3726eb7a7eb901d2fc043e6024bf8363439bbffd"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-android-arm-eabi@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-android-arm-eabi/-/lzma-android-arm-eabi-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-android-arm-eabi@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-android-arm-eabi/-/lzma-android-arm-eabi-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-android-arm64",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bb06bcb0b956133900334316ca86498342530f70643e49ef7a30051b669c500d6b69733c8cbaeaba358274e4ad8ac5e1a908d9da70cca77155e9cb3fff38dfb9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-android-arm64@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-android-arm64/-/lzma-android-arm64-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-android-arm64@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-android-arm64/-/lzma-android-arm64-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-darwin-arm64",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d18d1340b436c408d569bacc0de9b536122cb0e67317fcbf76a7ad73a393f260f7c4c4c3b45f2ee41a99a17dccc8f73d173a6c670e24b2897ec3b0ecc47ae930"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-darwin-arm64@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-darwin-arm64/-/lzma-darwin-arm64-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-darwin-arm64@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-darwin-arm64/-/lzma-darwin-arm64-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-darwin-x64",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "bd1d88532258dc49fe575c0993099b196718893f291e5a13016756e291b6e3ee75188abe8a7b6cb7a51fe83febe3a722b4e6c666b957d10bcc6ab3a441e1d6a7"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-darwin-x64@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-darwin-x64/-/lzma-darwin-x64-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-darwin-x64@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-darwin-x64/-/lzma-darwin-x64-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-freebsd-x64",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5e99d8402e52568bcedf9b45d311a46c7623b12ea4ab23428ee68b43675b11b94546be5c01956fb09ffd87bce3ff9165b893c9443a2354dc46c91853a78cf697"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-freebsd-x64@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-freebsd-x64/-/lzma-freebsd-x64-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-freebsd-x64@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-freebsd-x64/-/lzma-freebsd-x64-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-linux-arm-gnueabihf",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "89cd5964ca117d1330b52c31932c38cc895b0d9182e9d6af0bdafeda85fac7d422176e3b051aaa4fde2a19e2f964fe15b73d07cb2ed3115896871e63e81a73bf"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-linux-arm-gnueabihf@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-linux-arm-gnueabihf/-/lzma-linux-arm-gnueabihf-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-linux-arm-gnueabihf@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-linux-arm-gnueabihf/-/lzma-linux-arm-gnueabihf-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-linux-arm64-gnu",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6ac129ec53ddec2d588ba0d06f8e5adca3c728e14149f1ae2565dc01de3f6cbd858deb5bda7fca2b6cf5e327d6f180bf16feb1deb04cd150192a626ecf8b72b2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-linux-arm64-gnu@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-linux-arm64-gnu/-/lzma-linux-arm64-gnu-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-linux-arm64-gnu@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-linux-arm64-gnu/-/lzma-linux-arm64-gnu-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-linux-arm64-musl",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c968dc3c3809da720bdca36f8b8e77e9d953fc270258ed0353210e941b3f49a706ec1783e888c687ac98cdddff5f5637248b426d9a03a0b507f220759535e8df"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-linux-arm64-musl@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-linux-arm64-musl/-/lzma-linux-arm64-musl-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-linux-arm64-musl@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-linux-arm64-musl/-/lzma-linux-arm64-musl-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-linux-ppc64-gnu",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d174612ae214ffd6634f8583206fea9d7ed7cfb992407619a3d19bdcc3f681cbc182be81038cf2c10f64de099068f9fd10213e09983657b0d5ee44fec76a5431"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-linux-ppc64-gnu@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-linux-ppc64-gnu/-/lzma-linux-ppc64-gnu-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-linux-ppc64-gnu@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-linux-ppc64-gnu/-/lzma-linux-ppc64-gnu-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-linux-riscv64-gnu",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "42ba8320f114501db7182a72423fd0172325afc486c71c84c5e673f4e5859c77dbef49177532d6ac74bf84423546efa549b43feb146a7a81b243802a760fbf44"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-linux-riscv64-gnu@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-linux-riscv64-gnu/-/lzma-linux-riscv64-gnu-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-linux-riscv64-gnu@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-linux-riscv64-gnu/-/lzma-linux-riscv64-gnu-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-linux-s390x-gnu",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93c45533968c856f3a13d1f441776abb0a237b0e07dd2c0fc5b4556e5e3dfc23894160948c68bbf57ea662bb8c9cc3c4ce76629d4893d6380a6c5a36034d0d74"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-linux-s390x-gnu@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-linux-s390x-gnu/-/lzma-linux-s390x-gnu-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-linux-s390x-gnu@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-linux-s390x-gnu/-/lzma-linux-s390x-gnu-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-linux-x64-gnu",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "eab32d0609c8ab659c975ad0759b2733eaed09c5426f0b359c5f12d8dcda52c55a66ff1b8eb3e201ad25c20e04aa79f577d960c2a4fe719826e66fbffcad3c2b"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-linux-x64-gnu@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-linux-x64-gnu/-/lzma-linux-x64-gnu-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-linux-x64-gnu@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-linux-x64-gnu/-/lzma-linux-x64-gnu-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-linux-x64-musl",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7a269d1812a2ed57746c202b05438efeaa9160f1edfd5415bc6c98bc316de82d994888e50fe1ee3a5fb6a12d6c8dfe021632b878322883a11d5e72f4344ea2c9"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-linux-x64-musl@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-linux-x64-musl/-/lzma-linux-x64-musl-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-linux-x64-musl@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-linux-x64-musl/-/lzma-linux-x64-musl-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-wasm32-wasi",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f95c871e5afaf1dbdecba7d773685e870f601d51485b74ed185d5791c6c0bbae6a557b00f43fd3faeba8455aa113e242c851c5aced22c516d90d12b55c9b75b0"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-wasm32-wasi@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-wasm32-wasi/-/lzma-wasm32-wasi-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-wasm32-wasi@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-wasm32-wasi/-/lzma-wasm32-wasi-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "wasm-runtime",
      "version": "1.1.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a7ae1a87533595df318d6bf7a9bbc5c07885556aead7216f5787fbc3e9b36aa891e08952824aa1711747c2c1a0a26c33047e75b11638344a302f19da063716fc"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/wasm-runtime@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/wasm-runtime@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.1.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@emnapi",
      "name": "core",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "02f4fd405a712b465df09d23a2979d366fb0ff67c8cefb4f28f8eacb0f63c2f05a45e4d3a8f064f478b16b3eca6e38a63fe40dcfad39fd79e315c0c02f6a6a06"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40emnapi/core@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@emnapi/core/-/core-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@emnapi/core@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@emnapi/core/-/core-1.8.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@emnapi",
      "name": "wasi-threads",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "588d03759f311526e0323475b05b0a00127f0b93a746b8d3d3a2576d929ec491ab0ee3d3cd974361f165b207025c2c9ffacb86e505367bfcb55a8d95fce6a92d"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40emnapi/wasi-threads@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@emnapi/wasi-threads@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.1.0.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tslib",
      "version": "2.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a0916ef781d06fe29576e49440bef09e99aa9df98bb0e03f9c087a6fa107d30084a0ad3f98f79753a737c0a0d5f373243ae1cf447b525ca294f7d2016b34bfdb"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "0BSD",
            "url": "https://opensource.org/licenses/0BSD",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "false"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/tslib@2.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tslib@2.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@emnapi",
      "name": "runtime",
      "version": "1.8.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "99e85f2923168e336897ceb9f59f0ac4432b7522430e8b7949732ad3474cf01378a3e08b357434c47d95ec47213475784666d92e698f74469765ce47d855e60e"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40emnapi/runtime@1.8.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.8.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@emnapi/runtime@1.8.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.8.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@tybys",
      "name": "wasm-util",
      "version": "0.10.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f6d4da3c92d289e8d92b1f819a8838b92b9bb5ea93bc5ad5ad44709261e2c41a341b8b1e0f4cd4c69f7c1350f35012712d0dcd3f05eb18a0e2563c31fc3a4fb2"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40tybys/wasm-util@0.10.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@tybys/wasm-util@0.10.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.1.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-win32-arm64-msvc",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "79ec27aaf232ca11e2dca699b413895e884bbf0c0ddbb81f4b61bf60359d7c795bcf58eb99f787026cccb0fe6abfcbc607e4fcd13307364ae8e246237a1e837a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-win32-arm64-msvc@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-win32-arm64-msvc/-/lzma-win32-arm64-msvc-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-win32-arm64-msvc@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-win32-arm64-msvc/-/lzma-win32-arm64-msvc-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-win32-ia32-msvc",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "39e69c15544224e28d53f6b47a98547d867662df8dbda1f37bfe1380ec09d09d0fe0fed7d661f337e8a0f48c9def86900d762a73b91a09703676900e707f3b0a"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-win32-ia32-msvc@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-win32-ia32-msvc/-/lzma-win32-ia32-msvc-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-win32-ia32-msvc@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-win32-ia32-msvc/-/lzma-win32-ia32-msvc-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@napi-rs",
      "name": "lzma-win32-x64-msvc",
      "version": "1.4.5",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4f823549a99d4a6b726600d718018ffb2e4b10ae6fc47505c1ef26cfa0f847b49ae7f582c537022203c9f410fb464a4ed7b97386568cdaf995bcccbde8bbe4f5"
        }
      ],
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT",
            "properties": [
              {
                "name": "cdx:license:category",
                "value": "Permissive"
              },
              {
                "name": "cdx:license:foss",
                "value": "true"
              },
              {
                "name": "cdx:license:osiApproved",
                "value": "true"
              },
              {
                "name": "cdx:license:fsfLibre",
                "value": "true"
              },
              {
                "name": "cdx:license:deprecated",
                "value": "false"
              }
            ]
          }
        }
      ],
      "purl": "pkg:npm/%40napi-rs/lzma-win32-x64-msvc@1.4.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@napi-rs/lzma-win32-x64-msvc/-/lzma-win32-x64-msvc-1.4.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@napi-rs/lzma-win32-x64-msvc@1.4.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "cdx:npm:package:optional",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@napi-rs/lzma-win32-x64-msvc/-/lzma-win32-x64-msvc-1.4.5.tgz"
        },
        {
          "name": "cdx:license:category",
          "value": "Permissive"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decompress",
      "version": "4.2.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b8f2473622353ed99c3c7136fa55970943796055b4b8bae0754df0876e26483ff85a3579be495ca1bbef3b8edb39ff744ea5df36192542a0db3fcfc97864e69"
        }
      ],
      "purl": "pkg:npm/decompress@4.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decompress/-/decompress-4.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decompress@4.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decompress/-/decompress-4.2.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "decompress"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "update.js",
            "line": 8
          },
          {
            "location": "update.js",
            "line": 114
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decompress-tar",
      "version": "4.1.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "25d24c682ac6a41e5f112572c70a42c7825d8f601a80b9afdf2e7c432e0613a1cc5635b3d45795424d42b782b27bb3dfb5c74ea3fed4ed42b3601260aa719e51"
        }
      ],
      "purl": "pkg:npm/decompress-tar@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decompress-tar/-/decompress-tar-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decompress-tar@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decompress-tar/-/decompress-tar-4.1.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "decompress-tar"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "update.js",
            "line": 10
          },
          {
            "location": "update.js",
            "line": 122
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-type",
      "version": "5.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "22ad6727a0f6fb220ee1cf071e0e1fc956fc9802627a8d4e968cb598b2da0763ef7b335e7610559be414ee0d2a338d9a88c6d15d3c4a2b0183d7bae328d25855"
        }
      ],
      "purl": "pkg:npm/file-type@5.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/file-type/-/file-type-5.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/file-type@5.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/file-type/-/file-type-5.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-stream",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b903e6f2472ce3b8f1dfc6ad01c593571ca5b506283d3ebccbd69661d57ac965d2c96f26cd26add132fa0a259d65e09d1772ab02fa55b671db4efe1137eaea75"
        }
      ],
      "purl": "pkg:npm/is-stream@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-stream@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "tar-stream",
      "version": "1.6.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "af34b485e88d7fc5e7eff9a975255548c016028cbd6df6f558e4d80bbf19d1440a78a6bf0964bc14eab494a18d6bc0d62809fd8318c2bcc2d87393c65d894ad8"
        }
      ],
      "purl": "pkg:npm/tar-stream@1.6.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/tar-stream/-/tar-stream-1.6.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/tar-stream@1.6.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/tar-stream/-/tar-stream-1.6.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "bl",
      "version": "1.2.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6f70da5ad1453af544f7e35acee80632e05540224507b995d12166eafb31e7b15711cc30e3200846bae6288b477ffdcc08c2db78a64a4ac9c5847e3755fafc3"
        }
      ],
      "purl": "pkg:npm/bl@1.2.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/bl/-/bl-1.2.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/bl@1.2.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/bl/-/bl-1.2.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readable-stream",
      "version": "2.3.7",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11b868f0ae2321b1c0c67bb18bba38d8ead9805fd94cd72c663ea744ac949a484b16af021c8b69fdfcba85066e6663ff9f7c99f550546e9e33cff997f219983f"
        }
      ],
      "purl": "pkg:npm/readable-stream@2.3.7",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.7.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readable-stream@2.3.7",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.7.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "core-util-is",
      "version": "1.0.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "65006f8b50dca49e060ea6a78ee719d878f7c043b9a590d2f3d0566e472bbddc64b09a2bc140c365a997f65745929f5ac369660432e090e6c40380d6349f4561"
        }
      ],
      "purl": "pkg:npm/core-util-is@1.0.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/core-util-is@1.0.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "inherits",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "93fbc6697e3f6256b75b3c8c0af4d039761e207bea38ab67a8176ecd31e9ce9419cc0b2428c859d8af849c189233dcc64a820578ca572b16b8758799210a9ec1"
        }
      ],
      "purl": "pkg:npm/inherits@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/inherits@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "isarray",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54b82121634ce842d0ce8ef3c26720d0d99357258a623bc878cf37ca3a74c110d39949eb33aefc7d06dc281a3a9f6089105d2cce81bfff2b60f932a56bcf402d"
        }
      ],
      "purl": "pkg:npm/isarray@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/isarray@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "process-nextick-args",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "de8b943a9421b60adb39ad7b27bfaec4e4e92136166863fbfc0868477f80fbfd5ef6c92bcde9468bf757cc4632bdbc6e6c417a5a7db2a6c7132a22891459f56a"
        }
      ],
      "purl": "pkg:npm/process-nextick-args@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/process-nextick-args@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.1.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "19dd94641243917958ec66c9c5fb04f3f9ef2a45045351b7f1cd6c88de903fa6bd3d3f4c98707c1a7a6c71298c252a05f0b388aedf2e77fc0fb688f2b381bafa"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.1.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.1.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "string_decoder",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9ff4a19ef0e2e851db6d57ef8aba3e5a88e2173bfeb3c30f30705ccd578f7d4a4324bc282d3d21b759786300426e2f29240bde104767907c8fc933ff9b345fc2"
        }
      ],
      "purl": "pkg:npm/string_decoder@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/string_decoder@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "util-deprecate",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "10f0f9ab5b97c85c49a42acb9c27359c79eade039ae83641a1c008888d93692080ed5089d5424331a802cc891736c5187c3d5d68afff2d3110f318886eb1ed73"
        }
      ],
      "purl": "pkg:npm/util-deprecate@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/util-deprecate@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "safe-buffer",
      "version": "5.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ae9dd2a34eca71d9a629b1af81a37141226bedb1954959394bd12ad45fa9a5b468ef4f9879a0f1930e4377c34f37e183e9b8e7626d95b8fb825e6a6e62f9825d"
        }
      ],
      "purl": "pkg:npm/safe-buffer@5.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/safe-buffer@5.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-alloc",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "085b074208ed5b550285d5e06f2246b679be3bfb8b41e65db5b0e8f267d48185c21d2335c20ad5c579ba6d2cab52e12b11bfb8b185460b3012051a2def3caba3"
        }
      ],
      "purl": "pkg:npm/buffer-alloc@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-alloc/-/buffer-alloc-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-alloc@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-alloc/-/buffer-alloc-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-alloc-unsafe",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4c433688c20441d276ca33c9a1222c95d9e5795680935a16dc305553293238bb04b0598473d927f921453f3fa0979e0a40dc650e7030097a2c392f4e931db102"
        }
      ],
      "purl": "pkg:npm/buffer-alloc-unsafe@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-alloc-unsafe/-/buffer-alloc-unsafe-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-alloc-unsafe@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-alloc-unsafe/-/buffer-alloc-unsafe-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-fill",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "4fbcdec4d0708a26823860e0f71357f4f0668ebb9b6e546410dba9b6bcae23ae144645c316e9bd8a5fc918bf0b9bcc187c05e9ade7555d7673ede3078a58a689"
        }
      ],
      "purl": "pkg:npm/buffer-fill@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-fill/-/buffer-fill-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-fill@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-fill/-/buffer-fill-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "end-of-stream",
      "version": "1.4.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "faec358a720754f428695b87cd1c97776d6270cf9c9ede02cc3e6b5be342d708ce5124ceb3e4deec53afec084deef4bdc7fa08ca12cfe4f4751fea614001eee5"
        }
      ],
      "purl": "pkg:npm/end-of-stream@1.4.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/end-of-stream@1.4.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "once",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "94d689808fb643951140191c7042874d038f697754c67659125413658d0c15402e684a9ed44f8dcaf81dcff688c8d8ba67d3333b976fd47f27e7cfc610ba77fb"
        }
      ],
      "purl": "pkg:npm/once@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/once@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "wrappy",
      "version": "1.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9784a9fc346c7a8afdc0be84bd5dbe4ee427eb774c90f8d9feca7d5e48214c46d5f4a94f4b5c54b19deeeff2103b8c31b5c141e1b82940f45c477402bdeccf71"
        }
      ],
      "purl": "pkg:npm/wrappy@1.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/wrappy@1.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fs-constants",
      "version": "1.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "cba380c284887fb1728cc22ff78bbe6f9add85e6448f347adc64f26499b9aa1e018bed988302c2708fdf3c56642f93d28b13ade9934a9bec3e1dfa7f05c8b0a3"
        }
      ],
      "purl": "pkg:npm/fs-constants@1.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fs-constants@1.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "to-buffer",
      "version": "1.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "971f41e62bfb9acb85604dddcad4fe284e6d6a9fab358c3e2b88d591bf51fdab006fea5b052335ee3b6e9c7a658417ba45125d671dcf9f6269876e0edf698e56"
        }
      ],
      "purl": "pkg:npm/to-buffer@1.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/to-buffer/-/to-buffer-1.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/to-buffer@1.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/to-buffer/-/to-buffer-1.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "xtend",
      "version": "4.0.2",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2ca614d620172575200179fd5118e2bbe3168725171ecbdfa7b99cb989bd75250a2b4fc28edad4c050310fcdbf98259bb4bb068c521a774c08b28778ceb4c011"
        }
      ],
      "purl": "pkg:npm/xtend@4.0.2",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/xtend@4.0.2",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/xtend/-/xtend-4.0.2.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decompress-tarbz2",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b3cf312f37f5afcd480972c055057368de99997e00e94e33da731b3b0a1bc642e82087e354c060ed37a0b9351790a7979e2efde41eb2e6b9ef0f0eebc6102af4"
        }
      ],
      "purl": "pkg:npm/decompress-tarbz2@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decompress-tarbz2/-/decompress-tarbz2-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decompress-tarbz2@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decompress-tarbz2/-/decompress-tarbz2-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-type",
      "version": "6.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "60f71304357ed939b456a8f26d5777d8c1dd944180b6ec52dd5018b2e985a240d2306f91393e706b01a59c70e8cfb6df31c303b7d871b97bd7c28294c767e43a"
        }
      ],
      "purl": "pkg:npm/file-type@6.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/file-type/-/file-type-6.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/file-type@6.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/file-type/-/file-type-6.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "seek-bzip",
      "version": "1.0.6",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b542d3f760be6d5b0c3cb8a68e090d7c531213da568d0571e357f4b65980a22b8b9d8aff25906f3d2912280a351a827026081bab8c5e331155f607205b9c28d"
        }
      ],
      "purl": "pkg:npm/seek-bzip@1.0.6",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/seek-bzip/-/seek-bzip-1.0.6.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/seek-bzip@1.0.6",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/seek-bzip/-/seek-bzip-1.0.6.tgz"
        },
        {
          "name": "cdx:npm:binPaths",
          "value": "/app/npm/wizer/node_modules/.bin/seek-bunzip, /app/npm/wizer/node_modules/.bin/seek-table"
        },
        {
          "name": "cdx:npm:bin",
          "value": "seek-bunzip, seek-table"
        },
        {
          "name": "cdx:npm:has_binary",
          "value": "true"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "commander",
      "version": "2.20.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1a956498cf2f176bd05248f62ef6660f7e49c5e24e2c2c09f5c524ba0ca4da7ba16efdfe989be92d862dfb4f9448cc44fa88fe7b2fe52449e1670ef9c7f38c71"
        }
      ],
      "purl": "pkg:npm/commander@2.20.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/commander@2.20.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unbzip2-stream",
      "version": "1.4.3",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9a5131196e30ef579b0c9be21f5ea540bb594b7d952aab127e4f341827d49704ffe3f84d445b28b1cac5fdcfbef718a790ccc408bd6e2fd0c3c17a855a4aee3e"
        }
      ],
      "purl": "pkg:npm/unbzip2-stream@1.4.3",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unbzip2-stream/-/unbzip2-stream-1.4.3.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unbzip2-stream@1.4.3",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unbzip2-stream/-/unbzip2-stream-1.4.3.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer",
      "version": "5.7.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "10773220f050e0148696f8c1d7a9392a0009dbb088b0763fd8906609145ea38f32f6b43731a533597dca56505ae14eccc97d361dd563d0aec2dd6681de3bbb15"
        }
      ],
      "purl": "pkg:npm/buffer@5.7.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer@5.7.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer/-/buffer-5.7.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "base64-js",
      "version": "1.5.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "00aa5a6251e7f2de1255b3870b2f9be7e28a82f478bebb03f2f6efadb890269b3b7ca0d3923903af2ea38b4ad42630b49336cd78f2f0cf1abc8b2a68e35a9e58"
        }
      ],
      "purl": "pkg:npm/base64-js@1.5.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/base64-js@1.5.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/base64-js/-/base64-js-1.5.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ieee754",
      "version": "1.2.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "75ccaa843bd7d42e3a95765c56a0a92be16d31141574830debf0dfe63b36ce8b94b2a1bb23ab05c62b480beeca60adbd29d5ce2c776ef732f8b059e85509ea68"
        }
      ],
      "purl": "pkg:npm/ieee754@1.2.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ieee754@1.2.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ieee754/-/ieee754-1.2.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "through",
      "version": "2.3.8",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c3cf6a83b3c8f3001dbd7eb46cc0cff9b1680f90ef866f682e1785a793b86b6405d1c4811ac057e2a66669d3ccbd5aa52c9041722f96a8618e00fbdc0de35256"
        }
      ],
      "purl": "pkg:npm/through@2.3.8",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/through/-/through-2.3.8.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/through@2.3.8",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/through/-/through-2.3.8.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decompress-targz",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e33f356677ebe9c8569d10cd7c536a2f03ef9b875bdd6b9992a57e5205d0cd29e01b708429d064c398ebbf76b18e32fdea09728a22a3b31246dd7e96059c17df"
        }
      ],
      "purl": "pkg:npm/decompress-targz@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decompress-targz/-/decompress-targz-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decompress-targz@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decompress-targz/-/decompress-targz-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "decompress-unzip",
      "version": "4.0.1",
      "scope": "required",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5fa9e96ebf18279fce8c3a1ebabbc1636ed269005bf9c20093f48c3cadc06a41c0a8e6d3bc7a2270ecd353aefb7d9f8091055abb0acb624bddb6a0f83218baf"
        }
      ],
      "purl": "pkg:npm/decompress-unzip@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/decompress-unzip/-/decompress-unzip-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/decompress-unzip@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/decompress-unzip/-/decompress-unzip-4.0.1.tgz"
        },
        {
          "name": "ImportedModules",
          "value": "decompress-unzip"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ],
        "occurrences": [
          {
            "location": "update.js",
            "line": 9
          },
          {
            "location": "update.js",
            "line": 121
          }
        ]
      }
    },
    {
      "group": "",
      "name": "file-type",
      "version": "3.9.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "44ba2a4d713cfef3e632e4c8f3c0c0ce13180bdf48f015afef360fe00d69ba8e47223109e445f8f22821cb867228c1bd1035f10605ba7bef9c9fb775c6e16084"
        }
      ],
      "purl": "pkg:npm/file-type@3.9.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/file-type/-/file-type-3.9.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/file-type@3.9.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/file-type/-/file-type-3.9.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-stream",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0141a16db7a65f1ad92510f9703bcab50c4bb986886cdb434caf18aaea42237f774362924eb784b0b50ddd9c405851a2293ccbea72aecdf708be279f9545fda8"
        }
      ],
      "purl": "pkg:npm/get-stream@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-stream/-/get-stream-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-stream@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-stream/-/get-stream-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "object-assign",
      "version": "4.1.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ac98134279149c7d6c170f324fa552537cc3dec5a6bbab19848b1e63c557f8646edcfe85ec5bbe24d0e85df9251256cb2529dcdc55101d57b8714e618fe05c52"
        }
      ],
      "purl": "pkg:npm/object-assign@4.1.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/object-assign@4.1.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie-promise",
      "version": "2.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d069e2e83e1470b4dbbfd739ec37f10c676be355df8148ea599bb8f767f47081abd7acc3534e8158ffd1004bceba8ec243408d8c768b94ce7d6092459b735697"
        }
      ],
      "purl": "pkg:npm/pinkie-promise@2.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pinkie-promise@2.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pinkie",
      "version": "2.0.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "32752e1327007a6b5269e1528d7296fdaae857b6a405b63e4aff91932a858e001eef717e311d130562814439267d6abf1e216675abdf6751bb87848f6576824a"
        }
      ],
      "purl": "pkg:npm/pinkie@2.0.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pinkie@2.0.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b9d82c018f9f4e7befee423b69ac5bab058d6f4007881d2a04ef3d3d928f9284e618e81d6eb1c3283fb40765f8b937c9fc54f5474f6bf604ec8d48cd268b6ea2"
        }
      ],
      "purl": "pkg:npm/pify@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "yauzl",
      "version": "2.10.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a786bd23a5fa9eee888681a606a01c6c9cb59a50b88f6eef10f657f45e0be3fbd94f72f2ab5564147c3f57f3d4701f41ba8f831b7887913d31dd0c9ae7ccdcde"
        }
      ],
      "purl": "pkg:npm/yauzl@2.10.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/yauzl/-/yauzl-2.10.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/yauzl@2.10.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/yauzl/-/yauzl-2.10.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "buffer-crc32",
      "version": "0.2.13",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "54ef47b7ffa9dd237b48a5aa72b804ce319b4522584f1f90d694d00b4c2b5aa1f1d2fa49ada43a1ad1f1f2dbdc835ae52b56f2854e6071cc603a08fb0744c391"
        }
      ],
      "purl": "pkg:npm/buffer-crc32@0.2.13",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/buffer-crc32@0.2.13",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fd-slicer",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "704d6ab01fd5c32428cd9faad5d1b147c2c160d65ea1f84475434648c6d00f71b0da50335fd65bdee214e846dcfc59b28e8f405967e79f4014087aad7afb3ff2"
        }
      ],
      "purl": "pkg:npm/fd-slicer@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fd-slicer/-/fd-slicer-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fd-slicer@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fd-slicer/-/fd-slicer-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pend",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "1776acbf8d94b97721773b7ec57a9f5b538695505efa6c5ada6a88d29839c801d93ef16663763a76b49ffc643503ce9681610df4ace1fd6ae029aea219c1d72e"
        }
      ],
      "purl": "pkg:npm/pend@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pend/-/pend-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pend@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pend/-/pend-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "graceful-fs",
      "version": "4.2.10",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f41ca1b2c4767cf56c3598f8efca9451b29f98bd3eb790435728d286dc9964b88aed90c002b1457e8a723938f4334e70136b493e2b00e224e79d79766283ef38"
        }
      ],
      "purl": "pkg:npm/graceful-fs@4.2.10",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.10.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/graceful-fs@4.2.10",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.10.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "make-dir",
      "version": "1.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "db0df547b489b6278926742d19ced154bd92b4cdaf19855fa943af503c47e9b0ba6894f13f14c5d069c8802caeeed8e872489458061045bc5aeef2a7df8b39b1"
        }
      ],
      "purl": "pkg:npm/make-dir@1.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/make-dir/-/make-dir-1.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/make-dir@1.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/make-dir/-/make-dir-1.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "pify",
      "version": "3.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0b716c54d1f5b9d4845f8f20197d717efc1359fb185a3e54fbcfee2b5e411b3206acaa14a60857f21599c1afce1676a406289536606f7a64c947999ccbb88f72"
        }
      ],
      "purl": "pkg:npm/pify@3.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/pify/-/pify-3.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/pify@3.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/pify/-/pify-3.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "strip-dirs",
      "version": "2.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "24e0b139e28b9b60804bbdf2fd4e197993d3904fa03550b32adec4a31f3821e8f52d3ff6a53598a59289bb1c10a6f5f52e265bd71a24351ed12dfb8101aed3de"
        }
      ],
      "purl": "pkg:npm/strip-dirs@2.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/strip-dirs/-/strip-dirs-2.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/strip-dirs@2.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/strip-dirs/-/strip-dirs-2.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "is-natural-number",
      "version": "4.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6382d36a631ed030d020802569eafd78a79b0250d257a86ecbe4d684954f973661da8e2d44fe524161652e7e4dd13a389830f6dbfa9d3aafaf7a8d5c48848b81"
        }
      ],
      "purl": "pkg:npm/is-natural-number@4.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/is-natural-number/-/is-natural-number-4.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/is-natural-number@4.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/is-natural-number/-/is-natural-number-4.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/@bytecodealliance/wizer-darwin-arm64@11.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@bytecodealliance/wizer-darwin-x64@11.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@bytecodealliance/wizer-linux-arm64@11.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@bytecodealliance/wizer-linux-s390x@11.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@bytecodealliance/wizer-linux-x64@11.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@bytecodealliance/wizer-win32-x64@11.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-android-arm-eabi@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-android-arm64@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-darwin-arm64@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-darwin-x64@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-freebsd-x64@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-linux-arm-gnueabihf@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-linux-arm64-gnu@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-linux-arm64-musl@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-linux-ppc64-gnu@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-linux-riscv64-gnu@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-linux-s390x-gnu@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-linux-x64-gnu@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-linux-x64-musl@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tslib@2.8.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@emnapi/wasi-threads@1.1.0",
      "dependsOn": [
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@emnapi/core@1.8.1",
      "dependsOn": [
        "pkg:npm/@emnapi/wasi-threads@1.1.0",
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@emnapi/runtime@1.8.1",
      "dependsOn": [
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@tybys/wasm-util@0.10.1",
      "dependsOn": [
        "pkg:npm/tslib@2.8.1"
      ]
    },
    {
      "ref": "pkg:npm/@napi-rs/wasm-runtime@1.1.1",
      "dependsOn": [
        "pkg:npm/@emnapi/core@1.8.1",
        "pkg:npm/@emnapi/runtime@1.8.1",
        "pkg:npm/@tybys/wasm-util@0.10.1"
      ]
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-wasm32-wasi@1.4.5",
      "dependsOn": [
        "pkg:npm/@napi-rs/wasm-runtime@1.1.1"
      ]
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-win32-arm64-msvc@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-win32-ia32-msvc@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma-win32-x64-msvc@1.4.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@napi-rs/lzma@1.4.5",
      "dependsOn": [
        "pkg:npm/@napi-rs/lzma-android-arm-eabi@1.4.5",
        "pkg:npm/@napi-rs/lzma-android-arm64@1.4.5",
        "pkg:npm/@napi-rs/lzma-darwin-arm64@1.4.5",
        "pkg:npm/@napi-rs/lzma-darwin-x64@1.4.5",
        "pkg:npm/@napi-rs/lzma-freebsd-x64@1.4.5",
        "pkg:npm/@napi-rs/lzma-linux-arm-gnueabihf@1.4.5",
        "pkg:npm/@napi-rs/lzma-linux-arm64-gnu@1.4.5",
        "pkg:npm/@napi-rs/lzma-linux-arm64-musl@1.4.5",
        "pkg:npm/@napi-rs/lzma-linux-ppc64-gnu@1.4.5",
        "pkg:npm/@napi-rs/lzma-linux-riscv64-gnu@1.4.5",
        "pkg:npm/@napi-rs/lzma-linux-s390x-gnu@1.4.5",
        "pkg:npm/@napi-rs/lzma-linux-x64-gnu@1.4.5",
        "pkg:npm/@napi-rs/lzma-linux-x64-musl@1.4.5",
        "pkg:npm/@napi-rs/lzma-wasm32-wasi@1.4.5",
        "pkg:npm/@napi-rs/lzma-win32-arm64-msvc@1.4.5",
        "pkg:npm/@napi-rs/lzma-win32-ia32-msvc@1.4.5",
        "pkg:npm/@napi-rs/lzma-win32-x64-msvc@1.4.5"
      ]
    },
    {
      "ref": "pkg:npm/file-type@5.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/is-stream@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/core-util-is@1.0.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/inherits@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/isarray@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/process-nextick-args@2.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/safe-buffer@5.1.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/string_decoder@1.1.1",
      "dependsOn": [
        "pkg:npm/safe-buffer@5.1.2"
      ]
    },
    {
      "ref": "pkg:npm/util-deprecate@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/readable-stream@2.3.7",
      "dependsOn": [
        "pkg:npm/core-util-is@1.0.3",
        "pkg:npm/inherits@2.0.4",
        "pkg:npm/isarray@1.0.0",
        "pkg:npm/process-nextick-args@2.0.1",
        "pkg:npm/safe-buffer@5.1.2",
        "pkg:npm/string_decoder@1.1.1",
        "pkg:npm/util-deprecate@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/safe-buffer@5.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/bl@1.2.3",
      "dependsOn": [
        "pkg:npm/readable-stream@2.3.7",
        "pkg:npm/safe-buffer@5.2.1"
      ]
    },
    {
      "ref": "pkg:npm/buffer-alloc-unsafe@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-fill@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-alloc@1.2.0",
      "dependsOn": [
        "pkg:npm/buffer-alloc-unsafe@1.1.0",
        "pkg:npm/buffer-fill@1.0.0"
      ]
    },
    {
      "ref": "pkg:npm/wrappy@1.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/once@1.4.0",
      "dependsOn": [
        "pkg:npm/wrappy@1.0.2"
      ]
    },
    {
      "ref": "pkg:npm/end-of-stream@1.4.4",
      "dependsOn": [
        "pkg:npm/once@1.4.0"
      ]
    },
    {
      "ref": "pkg:npm/fs-constants@1.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/to-buffer@1.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/xtend@4.0.2",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/tar-stream@1.6.2",
      "dependsOn": [
        "pkg:npm/bl@1.2.3",
        "pkg:npm/buffer-alloc@1.2.0",
        "pkg:npm/end-of-stream@1.4.4",
        "pkg:npm/fs-constants@1.0.0",
        "pkg:npm/readable-stream@2.3.7",
        "pkg:npm/to-buffer@1.1.1",
        "pkg:npm/xtend@4.0.2"
      ]
    },
    {
      "ref": "pkg:npm/decompress-tar@4.1.1",
      "dependsOn": [
        "pkg:npm/file-type@5.2.0",
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/tar-stream@1.6.2"
      ]
    },
    {
      "ref": "pkg:npm/file-type@6.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/commander@2.20.3",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/seek-bzip@1.0.6",
      "dependsOn": [
        "pkg:npm/commander@2.20.3"
      ]
    },
    {
      "ref": "pkg:npm/base64-js@1.5.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/ieee754@1.2.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer@5.7.1",
      "dependsOn": [
        "pkg:npm/base64-js@1.5.1",
        "pkg:npm/ieee754@1.2.1"
      ]
    },
    {
      "ref": "pkg:npm/through@2.3.8",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/unbzip2-stream@1.4.3",
      "dependsOn": [
        "pkg:npm/buffer@5.7.1",
        "pkg:npm/through@2.3.8"
      ]
    },
    {
      "ref": "pkg:npm/decompress-tarbz2@4.1.1",
      "dependsOn": [
        "pkg:npm/decompress-tar@4.1.1",
        "pkg:npm/file-type@6.2.0",
        "pkg:npm/is-stream@1.1.0",
        "pkg:npm/seek-bzip@1.0.6",
        "pkg:npm/unbzip2-stream@1.4.3"
      ]
    },
    {
      "ref": "pkg:npm/decompress-targz@4.1.1",
      "dependsOn": [
        "pkg:npm/decompress-tar@4.1.1",
        "pkg:npm/file-type@5.2.0",
        "pkg:npm/is-stream@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/file-type@3.9.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/object-assign@4.1.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie@2.0.4",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pinkie-promise@2.0.1",
      "dependsOn": [
        "pkg:npm/pinkie@2.0.4"
      ]
    },
    {
      "ref": "pkg:npm/get-stream@2.3.1",
      "dependsOn": [
        "pkg:npm/object-assign@4.1.1",
        "pkg:npm/pinkie-promise@2.0.1"
      ]
    },
    {
      "ref": "pkg:npm/pify@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/buffer-crc32@0.2.13",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pend@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/fd-slicer@1.1.0",
      "dependsOn": [
        "pkg:npm/pend@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/yauzl@2.10.0",
      "dependsOn": [
        "pkg:npm/buffer-crc32@0.2.13",
        "pkg:npm/fd-slicer@1.1.0"
      ]
    },
    {
      "ref": "pkg:npm/decompress-unzip@4.0.1",
      "dependsOn": [
        "pkg:npm/file-type@3.9.0",
        "pkg:npm/get-stream@2.3.1",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/yauzl@2.10.0"
      ]
    },
    {
      "ref": "pkg:npm/graceful-fs@4.2.10",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/pify@3.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/make-dir@1.3.0",
      "dependsOn": [
        "pkg:npm/pify@3.0.0"
      ]
    },
    {
      "ref": "pkg:npm/is-natural-number@4.0.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/strip-dirs@2.1.0",
      "dependsOn": [
        "pkg:npm/is-natural-number@4.0.1"
      ]
    },
    {
      "ref": "pkg:npm/decompress@4.2.1",
      "dependsOn": [
        "pkg:npm/decompress-tar@4.1.1",
        "pkg:npm/decompress-tarbz2@4.1.1",
        "pkg:npm/decompress-targz@4.1.1",
        "pkg:npm/decompress-unzip@4.0.1",
        "pkg:npm/graceful-fs@4.2.10",
        "pkg:npm/make-dir@1.3.0",
        "pkg:npm/pify@2.3.0",
        "pkg:npm/strip-dirs@2.1.0"
      ]
    },
    {
      "ref": "pkg:npm/@bytecodealliance/wizer@11.0.3",
      "dependsOn": [
        "pkg:npm/@bytecodealliance/wizer-darwin-arm64@11.0.3",
        "pkg:npm/@bytecodealliance/wizer-darwin-x64@11.0.3",
        "pkg:npm/@bytecodealliance/wizer-linux-arm64@11.0.3",
        "pkg:npm/@bytecodealliance/wizer-linux-s390x@11.0.3",
        "pkg:npm/@bytecodealliance/wizer-linux-x64@11.0.3",
        "pkg:npm/@bytecodealliance/wizer-win32-x64@11.0.3",
        "pkg:npm/@napi-rs/lzma@1.4.5",
        "pkg:npm/decompress-tar@4.1.1",
        "pkg:npm/decompress-unzip@4.0.1",
        "pkg:npm/decompress@4.2.1"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/@bytecodealliance/wizer@11.0.3"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.8.2",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.8.2",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.8.2",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-08-05T13:32:37Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, August 5, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'wizer' with version '11.0.3'. The package type in this SBOM is npm with 4 purl namespaces described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}