{
  "bomFormat": "CycloneDX",
  "specVersion": "1.7",
  "serialNumber": "urn:uuid:6c442f07-eeda-426c-bfe1-d92bae3bf4c7",
  "version": 1,
  "metadata": {
    "timestamp": "2026-07-29T20:29:30Z",
    "tools": {
      "components": [
        {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      ]
    },
    "authors": [
      {
        "name": "OWASP Foundation"
      }
    ],
    "lifecycles": [
      {
        "phase": "pre-build"
      }
    ],
    "component": {
      "name": "domain-browser",
      "group": "",
      "version": "4.22.0",
      "description": "Node's domain module for the web browser. This is merely an evented try...catch with the same API as node, nothing more.",
      "purl": "pkg:npm/domain-browser@4.22.0",
      "bom-ref": "pkg:npm/domain-browser@4.22.0",
      "author": "2013+ Bevry Pty Ltd <us@bevry.me> (http://bevry.me)",
      "properties": [
        {
          "name": "cdx:npm:scripts",
          "value": "our:clean, our:compile, our:deploy, our:meta, our:meta:contributors, our:meta:projectz, our:release, our:release:check-changelog, our:release:check-dirty, our:release:prepare, our:release:push, our:release:tag, our:setup, our:setup:install, our:test, our:verify, our:verify:directory, test"
        }
      ],
      "type": "application",
      "licenses": [
        {
          "license": {
            "id": "MIT",
            "url": "https://opensource.org/licenses/MIT"
          }
        }
      ],
      "externalReferences": [
        {
          "type": "vcs",
          "url": "https://github.com/bevry/domain-browser"
        },
        {
          "type": "vcs",
          "url": "https://github.com/bevry/domain-browser.git"
        }
      ]
    },
    "properties": [
      {
        "name": "cdx:bom:componentTypes",
        "value": "npm"
      },
      {
        "name": "cdx:bom:componentNamespaces",
        "value": "@bevry"
      },
      {
        "name": "cdx:bom:componentSrcFiles",
        "value": "package-lock.json"
      }
    ]
  },
  "components": [
    {
      "group": "@bevry",
      "name": "update-contributors",
      "version": "1.19.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76cb662c3a8d2215490137e9c45171280ebd7dcf7f06369ff0f86d308973004fa41584e73004afd2eb633df80d913aad6ca505216ecdc665d28b3bedac4bbf6a"
        }
      ],
      "purl": "pkg:npm/%40bevry/update-contributors@1.19.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@bevry/update-contributors/-/update-contributors-1.19.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bevry/update-contributors@1.19.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@bevry/update-contributors/-/update-contributors-1.19.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "getcontributors",
      "version": "2.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "519af1fe10baca003ec363416597c6067ea7c65ea1ec8de474934420f4c7207a2bfadee70a5d44ac0aae1a760bad1035726d721d7ffb8ba04983d2e33f95a840"
        }
      ],
      "purl": "pkg:npm/getcontributors@2.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/getcontributors/-/getcontributors-2.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/getcontributors@2.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/getcontributors/-/getcontributors-2.23.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "cross-fetch",
      "version": "3.1.4",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d5e02d156748b9b8ba4f85cfcba7a2f62505a0aa5490817def540b37c948befbf0b9e23ae7e370e6168c34a5307c9c5a6ea94820338324a1ab43aea0c42d0f6d"
        }
      ],
      "purl": "pkg:npm/cross-fetch@3.1.4",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/cross-fetch/-/cross-fetch-3.1.4.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/cross-fetch@3.1.4",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/cross-fetch/-/cross-fetch-3.1.4.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "node-fetch",
      "version": "2.6.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "57869883cf63128551c516f67c974083c147bc8edc13261d54087de071f45082bca09c547e48e50d037d45b331f9b1233fbfa080c885469ad2b62d37d8e8a9c7"
        }
      ],
      "purl": "pkg:npm/node-fetch@2.6.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/node-fetch@2.6.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/node-fetch/-/node-fetch-2.6.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "fellow",
      "version": "6.23.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b30e3e916e929a3bb7b7a70b7940c1a233fa3f7ba35f6675e55b969a307d54350dca389de9c0944885d2ace15494c50141d1c645bfb30fcafbabaeb9e96cdfb9"
        }
      ],
      "purl": "pkg:npm/fellow@6.23.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/fellow/-/fellow-6.23.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/fellow@6.23.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/fellow/-/fellow-6.23.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "getrepos",
      "version": "5.17.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "64143e3aa3f401120bf980d878ba9188b496c23b4ff4c2bad1e4d126376c361895fcfc9f7ef95f684376c34f7f0270248e3707595e0f856f5d7a4e601dc65ee1"
        }
      ],
      "purl": "pkg:npm/getrepos@5.17.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/getrepos/-/getrepos-5.17.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/getrepos@5.17.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/getrepos/-/getrepos-5.17.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "githubauthreq",
      "version": "5.19.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e240a65ea733ef63144aa38c65fbe614acce1a4269a1d8d13787d1e270cf97f813bf90c4c3c296c6bcc9ab034a9b74c936a379be46c91d85aad02c8397036538"
        }
      ],
      "purl": "pkg:npm/githubauthreq@5.19.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/githubauthreq/-/githubauthreq-5.19.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/githubauthreq@5.19.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/githubauthreq/-/githubauthreq-5.19.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "editions",
      "version": "6.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "5271eaddd9298ae299559c0c42709d378cad2f69dd7a1c9cb6070cdedb6d98285fd41c9ad1b586cacf7a156c334fab645dde44bbce18b8b4e8aa0b5c92b00700"
        }
      ],
      "purl": "pkg:npm/editions@6.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/editions/-/editions-6.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/editions@6.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/editions/-/editions-6.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "version-range",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "76da46b37cb289074f2ca2c6ba76df6cd0ccd7883bac7e6ed53fbffaeca77723ee14146b14a8cc8e42f0743e0fb146656b0cfd8b50d61493c4c366c228524085"
        }
      ],
      "purl": "pkg:npm/version-range@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/version-range/-/version-range-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/version-range@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/version-range/-/version-range-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "version-compare",
      "version": "1.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "85f73bea8c86a82bb2a1f4fce6e0cd6e3b789211e28c912653ed27e55a7a4c33e0e56ce8ad5ee8f01b46c8526324737ee521c9338815a72bdc758f71fd7e7049"
        }
      ],
      "purl": "pkg:npm/version-compare@1.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/version-compare/-/version-compare-1.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/version-compare@1.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/version-compare/-/version-compare-1.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "simplytyped",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9b3e1168d74a4d989a297822e8fd64fdc76cc55de0cfecb55a1d8d5c7583e34744c64b4b8785f1fe1e8c15a9264163836478ffdab29ee7d69c69ca4bef866140"
        }
      ],
      "purl": "pkg:npm/simplytyped@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/simplytyped/-/simplytyped-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/simplytyped@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/simplytyped/-/simplytyped-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typescript",
      "version": "4.3.5",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0ea4208a1690f5c52bb24268f642325bffa0d15c6c93c703b59e766b734687460d4dfa54480ad74a88725069ef6cf6b310f2eedfdf02d14c662923ab3ee994cc"
        }
      ],
      "purl": "pkg:npm/typescript@4.3.5",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typescript/-/typescript-4.3.5.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typescript@4.3.5",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typescript/-/typescript-4.3.5.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "native-promise-pool",
      "version": "3.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa77eb8f27e3c2d8615e25fb968b8824f8af4cfc241408c8801e730606e5f026456353ab597fbc85ab96f588f305d447d061524a15cffa90d51b91fc56c9c874"
        }
      ],
      "purl": "pkg:npm/native-promise-pool@3.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/native-promise-pool/-/native-promise-pool-3.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/native-promise-pool@3.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/native-promise-pool/-/native-promise-pool-3.18.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      },
      "tags": [
        "native"
      ]
    },
    {
      "group": "",
      "name": "assert-helpers",
      "version": "8.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7523ce42bf90b003e995790cca653163ea102671dc8319bda0a349da30bca4fc74d07100987aaf0689359d37c62d44a2b83fd18538d5cb688d97b5a3dd81410a"
        }
      ],
      "purl": "pkg:npm/assert-helpers@8.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/assert-helpers/-/assert-helpers-8.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/assert-helpers@8.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/assert-helpers/-/assert-helpers-8.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@bevry",
      "name": "ansi",
      "version": "3.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c412d02962939df1b29e5ad18f5cbfb2fe907b46a1365b3dfaf0134db844717bd187d0ab0fafc0a90541de909dbf8edc9bdc1a59d237cc0ae9b5c684b297e054"
        }
      ],
      "purl": "pkg:npm/%40bevry/ansi@3.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@bevry/ansi/-/ansi-3.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bevry/ansi@3.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@bevry/ansi/-/ansi-3.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "errlop",
      "version": "4.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a05e2d255ac512cdcd9c1c22e47bb15a1069eae6f035ffaf3c6e0c8678013e72bddc1a49a8fb8c9df0410320728ace08ce79c4ab5d6871e095a0e0991708ea5a"
        }
      ],
      "purl": "pkg:npm/errlop@4.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/errlop/-/errlop-4.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/errlop@4.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/errlop/-/errlop-4.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "kava",
      "version": "5.14.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e3975bfab42ad1119b06e20b57bdf089c959a9d6d73d0f29e21628ebd15f923b4c6dc28cfea65cb0d6c20449bcac28c7d4b864136f16f50fbea881e5f1b280c4"
        }
      ],
      "purl": "pkg:npm/kava@5.14.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/kava/-/kava-5.14.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/kava@5.14.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/kava/-/kava-5.14.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "event-emitter-grouped",
      "version": "4.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "59554142c1819a4dfe3722960e66a2c607e4fde5b0ff846333ba4718cfe669125ee82e4c445d7f9b863826e43610f0bb4d45c1733c66121347a3aa1f3fac9d0d"
        }
      ],
      "purl": "pkg:npm/event-emitter-grouped@4.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/event-emitter-grouped/-/event-emitter-grouped-4.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/event-emitter-grouped@4.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/event-emitter-grouped/-/event-emitter-grouped-4.18.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "taskgroup",
      "version": "7.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0170a94c918b5df33619a47a6b8aaccccce6142596c8f8c503060a3500b87c95258b3545809bd31f2e157d663d916ccd90c40de464c06c9237318d6ddaf0bd34"
        }
      ],
      "purl": "pkg:npm/taskgroup@7.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/taskgroup/-/taskgroup-7.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/taskgroup@7.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/taskgroup/-/taskgroup-7.18.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "ambi",
      "version": "3.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9e3e6c1cb3c577bbb638b987745b380c7b7780ae9e769370df98534482b223f55dd938797b88a8e74af0d6586609d50d3b6326e3fe059079afeac84400d01673"
        }
      ],
      "purl": "pkg:npm/ambi@3.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/ambi/-/ambi-3.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/ambi@3.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/ambi/-/ambi-3.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "editions",
      "version": "2.3.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "a6d1af9304ef19d19f0b485f84a834313f9344b44a1ad5225860489f13a6e69cfbb2c0037b36a18c251a62e67c0ebf82d39156d001022083ede1607154834484"
        }
      ],
      "purl": "pkg:npm/editions@2.3.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/editions/-/editions-2.3.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/editions@2.3.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/editions/-/editions-2.3.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "errlop",
      "version": "2.2.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7bae108fdfb8699ce3cf3169642ee9e649a6fdc702adb2e1009a6586c0d7405b3ced74ec5f03a91f8b35228dacf744dabbff2bda3f5fe25fed8610debd18f3c7"
        }
      ],
      "purl": "pkg:npm/errlop@2.2.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/errlop/-/errlop-2.2.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/errlop@2.2.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/errlop/-/errlop-2.2.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "semver",
      "version": "6.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6f7f5305a4d27d5eb206b6a953cf69e5f29e904da6fcdc270e870e56bb90152d7fbde320773b8f72738cdf833a0b0c56f231ff97111ae6b0680de530bb91c74f"
        }
      ],
      "purl": "pkg:npm/semver@6.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/semver@6.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/semver/-/semver-6.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typechecker",
      "version": "4.11.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "973dfd31cfddd5405c17fb9014be4ff0bfa859d227fecb6f9148077f4b4f456e1a13018612b7b0357a3635be967b65ac95689f9f4d2b85c1db6d15917131a1bb"
        }
      ],
      "purl": "pkg:npm/typechecker@4.11.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typechecker/-/typechecker-4.11.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typechecker@4.11.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typechecker/-/typechecker-4.11.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "eachr",
      "version": "4.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "f48ebae115a9ea9f23bdc1d9230a3b6d66a249a526035c0d48b2b03591226988ea893011ab77068f246222e9eca2966fe103265f74f91ecd7b4283c0cdd6317e"
        }
      ],
      "purl": "pkg:npm/eachr@4.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/eachr/-/eachr-4.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/eachr@4.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/eachr/-/eachr-4.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typechecker",
      "version": "6.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "11b3aefbdb33635de6865d04b2f2d79d1fa94c26b78131d040f2dd71eef6ba3702f5f4475e554504d5ed1de4618332f12e5294878cc0f42d2d7b32c382c85ff8"
        }
      ],
      "purl": "pkg:npm/typechecker@6.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typechecker/-/typechecker-6.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typechecker@6.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typechecker/-/typechecker-6.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "extendr",
      "version": "5.18.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "28e5a49a5b3934ddd5d907750264869b6a12ef199f229dc002177d2df8240e9f5d59ad8d9ff037d3ccbd4e81c1f7f7092550016d4e65316281af4dd5666d14dd"
        }
      ],
      "purl": "pkg:npm/extendr@5.18.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/extendr/-/extendr-5.18.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/extendr@5.18.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/extendr/-/extendr-5.18.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "typechecker",
      "version": "7.17.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "58ba15243faf43912d16da9a526cf4631d5cc9b4a03fb9dcb84ae17d158886bfee455e2eb1fae2f2b003d594c65f295518e7d4788c39b37202b2a23a140c14e9"
        }
      ],
      "purl": "pkg:npm/typechecker@7.17.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/typechecker/-/typechecker-7.17.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/typechecker@7.17.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/typechecker/-/typechecker-7.17.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "unbounded",
      "version": "3.14.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "7b4171aa5a9ff8e67994b321a19ff81cf3f70f61fc917021274e0de2e8b8c19e77c0143df7d417c23d6e86b0aa90a316278388c6a66754820d25405ae795c7ea"
        }
      ],
      "purl": "pkg:npm/unbounded@3.14.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/unbounded/-/unbounded-3.14.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/unbounded@3.14.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/unbounded/-/unbounded-3.14.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "projectz",
      "version": "2.21.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "0b6bac9ebda52920252040750a60c7649e780bdb1b95eef1d1798413dea569aaa025709b3de9e0189b2518910c4bbb7ec392e6f0712da63333de1f12d21a6685"
        }
      ],
      "purl": "pkg:npm/projectz@2.21.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/projectz/-/projectz-2.21.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/projectz@2.21.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/projectz/-/projectz-2.21.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@bevry",
      "name": "file",
      "version": "1.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "9837e7c63e0f9113a58d4ac4996bdc2315cbd4a07f923816ba635c1438da82119b2675da2d8ca9d741981c36ca82f3ac8ca4254692dd3bbcede642dd74d188dd"
        }
      ],
      "purl": "pkg:npm/%40bevry/file@1.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@bevry/file/-/file-1.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bevry/file@1.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@bevry/file/-/file-1.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "@bevry",
      "name": "json",
      "version": "1.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "d19e66ec88974ee0351a210196ca1fbc42c82f2710b6251f59ee1aad03239a25c73c02e0be0fb75314d13c12a8889c8e1c0122a3ef24e97edee81199cf6f0e95"
        }
      ],
      "purl": "pkg:npm/%40bevry/json@1.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/@bevry/json/-/json-1.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/@bevry/json@1.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/@bevry/json/-/json-1.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "badges",
      "version": "4.27.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "ce1bbdfd180588bc5b34faa0a1ef5ee8ec074ba97a0c0b3e361b24d59069425fa0dc1279bc5ab5399bbc0d5db3f0f87570b5f99d8468fc21b617c7e4ea886407"
        }
      ],
      "purl": "pkg:npm/badges@4.27.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/badges/-/badges-4.27.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/badges@4.27.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/badges/-/badges-4.27.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "caterpillar",
      "version": "6.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "b2256a296c00d7211fe5fdc9f9f8758ee929ec446fef67a3a3b1ea01de0b7e2410154e0bef4267dba4af54392f1d47b237be18931e5d17181856888485ea7e9f"
        }
      ],
      "purl": "pkg:npm/caterpillar@6.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/caterpillar/-/caterpillar-6.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/caterpillar@6.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/caterpillar/-/caterpillar-6.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-current-line",
      "version": "6.5.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2dea0a5b6f7aeca484aad21b9547781a9f1fc431de40ec60c60f7982bde225cfb6a3308e6f5139649f36944ab702bd65e90967047a03a528353a0b36c89ecb97"
        }
      ],
      "purl": "pkg:npm/get-current-line@6.5.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-current-line/-/get-current-line-6.5.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-current-line@6.5.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-current-line/-/get-current-line-6.5.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "rfc-log-levels",
      "version": "3.16.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e0c135fa73ea69575a0408ad66fa7d636dd2df6ac0671466a487cbd5f3976bc2881bc91a67edeeec7dbf2f2cd0945e50e55bb2083c6b37a63894993eb8719df6"
        }
      ],
      "purl": "pkg:npm/rfc-log-levels@3.16.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/rfc-log-levels/-/rfc-log-levels-3.16.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/rfc-log-levels@3.16.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/rfc-log-levels/-/rfc-log-levels-3.16.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "get-cli-arg",
      "version": "7.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "781c2f17820b5e95db765e05a2fcdfff23a776a4f50c62c67a4702adadc1cb324355dcc455e027cfca08613ce5be7d87d4da8389ffdd0a4ac9bbb98b06fb7ecb"
        }
      ],
      "purl": "pkg:npm/get-cli-arg@7.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/get-cli-arg/-/get-cli-arg-7.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/get-cli-arg@7.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/get-cli-arg/-/get-cli-arg-7.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "normalify",
      "version": "2.22.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "6c0470f87888f56c5a6fd25251cc40284d765143d967f62071819dbf2caa3bd928122261de544cddf55b8ad940dc2e4380a94019ff975031d3e61d1d5e0d3533"
        }
      ],
      "purl": "pkg:npm/normalify@2.22.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/normalify/-/normalify-2.22.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/normalify@2.22.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/normalify/-/normalify-2.22.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-expression-parse",
      "version": "3.0.1",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "71ba87ba7b105a724d13a2a155232c31e1f91ff2fd129ca66f3a93437b8bc0d08b675438f35a166a87ea1fb9cee95d3bc655f063a3e141d43621e756c7f64ae1"
        }
      ],
      "purl": "pkg:npm/spdx-expression-parse@3.0.1",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-expression-parse@3.0.1",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-exceptions",
      "version": "2.3.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fed4eb60e0bb3cf2359d4020c77e21529a97bb2246f834c72539c850b1b8ac3ca08b8c6efed7e09aad5ed5c211c11cf0660a3834bc928beae270b919930e22e4"
        }
      ],
      "purl": "pkg:npm/spdx-exceptions@2.3.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.3.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-exceptions@2.3.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.3.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-ids",
      "version": "3.0.9",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "2a2db5d9d28ae28817fb10e8e02b4e641548c21b0a0447ec1047309897cb4338ab81cda3216773838d149f1cff1f3114a8cd56173565412305f64659d876e82d"
        }
      ],
      "purl": "pkg:npm/spdx-license-ids@3.0.9",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.9.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-ids@3.0.9",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.9.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "spdx-license-list",
      "version": "6.4.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "e01c60275219c5326e5f5631306bb671160ae3a064f7324d4cadbf474c0d651d1c9bee92565dbafee1bb150990b71a09417d6e6741294e2d8bef3bcc2dba1a04"
        }
      ],
      "purl": "pkg:npm/spdx-license-list@6.4.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/spdx-license-list/-/spdx-license-list-6.4.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/spdx-license-list@6.4.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/spdx-license-list/-/spdx-license-list-6.4.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "valid-directory",
      "version": "3.7.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "fa78d9c3621a761944a0279f102181171b2e447f60d64dcd17d6e1f24935f9f205dbca8bfb1152f4c89651e76d25d3fa2a829228cc8271dc881060b4e94d5eca"
        }
      ],
      "purl": "pkg:npm/valid-directory@3.7.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/valid-directory/-/valid-directory-3.7.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/valid-directory@3.7.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/valid-directory/-/valid-directory-3.7.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "readdir-cluster",
      "version": "3.16.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "c4108cdae5e873bd98ce34cc551e90c28a9f1e15d725d023503607bd49c1d377c0aeec9f3cf95b89800d5857a657fb457aa790f6cebee530772e978b79e4e1a6"
        }
      ],
      "purl": "pkg:npm/readdir-cluster@3.16.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/readdir-cluster/-/readdir-cluster-3.16.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/readdir-cluster@3.16.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/readdir-cluster/-/readdir-cluster-3.16.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "valid-filename",
      "version": "3.1.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-512",
          "content": "3bdf6c75f85d182896a0de1cbfa527ab8789d84b97c11b0e2c2792c3e209c8c620c152b404f99a527ce1590c3913caa49cb4d5ad51310abeb1c53067441bedb1"
        }
      ],
      "purl": "pkg:npm/valid-filename@3.1.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/valid-filename/-/valid-filename-3.1.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/valid-filename@3.1.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/valid-filename/-/valid-filename-3.1.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    },
    {
      "group": "",
      "name": "filename-reserved-regex",
      "version": "2.0.0",
      "scope": "optional",
      "hashes": [
        {
          "alg": "SHA-1",
          "content": "abf73dfab735d045440abfea2d91f389ebbfa229"
        }
      ],
      "purl": "pkg:npm/filename-reserved-regex@2.0.0",
      "externalReferences": [
        {
          "type": "distribution",
          "url": "https://registry.npmjs.org/filename-reserved-regex/-/filename-reserved-regex-2.0.0.tgz"
        }
      ],
      "type": "library",
      "bom-ref": "pkg:npm/filename-reserved-regex@2.0.0",
      "properties": [
        {
          "name": "SrcFile",
          "value": "package-lock.json"
        },
        {
          "name": "cdx:npm:package:development",
          "value": "true"
        },
        {
          "name": "ResolvedUrl",
          "value": "https://registry.npmjs.org/filename-reserved-regex/-/filename-reserved-regex-2.0.0.tgz"
        }
      ],
      "evidence": {
        "identity": [
          {
            "field": "purl",
            "confidence": 1,
            "methods": [
              {
                "technique": "manifest-analysis",
                "confidence": 1,
                "value": "package-lock.json"
              }
            ],
            "concludedValue": "package-lock.json"
          }
        ]
      }
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:npm/node-fetch@2.6.1",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/cross-fetch@3.1.4",
      "dependsOn": [
        "pkg:npm/node-fetch@2.6.1"
      ]
    },
    {
      "ref": "pkg:npm/fellow@6.23.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/version-compare@1.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/version-range@1.2.0",
      "dependsOn": [
        "pkg:npm/version-compare@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/editions@6.5.0",
      "dependsOn": [
        "pkg:npm/version-range@1.2.0"
      ]
    },
    {
      "ref": "pkg:npm/typescript@4.3.5",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/simplytyped@3.3.0",
      "dependsOn": [
        "pkg:npm/typescript@4.3.5"
      ]
    },
    {
      "ref": "pkg:npm/githubauthreq@5.19.0",
      "dependsOn": [
        "pkg:npm/editions@6.5.0",
        "pkg:npm/simplytyped@3.3.0"
      ]
    },
    {
      "ref": "pkg:npm/native-promise-pool@3.18.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/getrepos@5.17.0",
      "dependsOn": [
        "pkg:npm/cross-fetch@3.1.4",
        "pkg:npm/githubauthreq@5.19.0",
        "pkg:npm/native-promise-pool@3.18.0",
        "pkg:npm/simplytyped@3.3.0"
      ]
    },
    {
      "ref": "pkg:npm/getcontributors@2.23.0",
      "dependsOn": [
        "pkg:npm/cross-fetch@3.1.4",
        "pkg:npm/fellow@6.23.0",
        "pkg:npm/getrepos@5.17.0",
        "pkg:npm/githubauthreq@5.19.0",
        "pkg:npm/simplytyped@3.3.0"
      ]
    },
    {
      "ref": "pkg:npm/@bevry/update-contributors@1.19.0",
      "dependsOn": [
        "pkg:npm/getcontributors@2.23.0"
      ]
    },
    {
      "ref": "pkg:npm/@bevry/ansi@3.3.0",
      "dependsOn": [
        "pkg:npm/editions@6.5.0"
      ]
    },
    {
      "ref": "pkg:npm/errlop@4.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/assert-helpers@8.4.0",
      "dependsOn": [
        "pkg:npm/@bevry/ansi@3.3.0",
        "pkg:npm/editions@6.5.0",
        "pkg:npm/errlop@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/errlop@2.2.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/semver@6.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/editions@2.3.1",
      "dependsOn": [
        "pkg:npm/errlop@2.2.0",
        "pkg:npm/semver@6.3.0"
      ]
    },
    {
      "ref": "pkg:npm/typechecker@4.11.0",
      "dependsOn": [
        "pkg:npm/editions@2.3.1"
      ]
    },
    {
      "ref": "pkg:npm/ambi@3.2.0",
      "dependsOn": [
        "pkg:npm/editions@2.3.1",
        "pkg:npm/typechecker@4.11.0"
      ]
    },
    {
      "ref": "pkg:npm/typechecker@6.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/eachr@4.5.0",
      "dependsOn": [
        "pkg:npm/typechecker@6.4.0"
      ]
    },
    {
      "ref": "pkg:npm/typechecker@7.17.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/extendr@5.18.0",
      "dependsOn": [
        "pkg:npm/typechecker@7.17.0"
      ]
    },
    {
      "ref": "pkg:npm/unbounded@3.14.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/taskgroup@7.18.0",
      "dependsOn": [
        "pkg:npm/ambi@3.2.0",
        "pkg:npm/eachr@4.5.0",
        "pkg:npm/extendr@5.18.0",
        "pkg:npm/unbounded@3.14.0"
      ]
    },
    {
      "ref": "pkg:npm/event-emitter-grouped@4.18.0",
      "dependsOn": [
        "pkg:npm/taskgroup@7.18.0",
        "pkg:npm/unbounded@3.14.0"
      ]
    },
    {
      "ref": "pkg:npm/kava@5.14.0",
      "dependsOn": [
        "pkg:npm/event-emitter-grouped@4.18.0",
        "pkg:npm/taskgroup@7.18.0"
      ]
    },
    {
      "ref": "pkg:npm/@bevry/file@1.1.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/@bevry/json@1.4.0",
      "dependsOn": [
        "pkg:npm/@bevry/file@1.1.0",
        "pkg:npm/errlop@4.2.0"
      ]
    },
    {
      "ref": "pkg:npm/badges@4.27.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-current-line@6.5.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/rfc-log-levels@3.16.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/caterpillar@6.7.0",
      "dependsOn": [
        "pkg:npm/@bevry/ansi@3.3.0",
        "pkg:npm/get-current-line@6.5.0",
        "pkg:npm/rfc-log-levels@3.16.0"
      ]
    },
    {
      "ref": "pkg:npm/normalify@2.22.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/get-cli-arg@7.1.0",
      "dependsOn": [
        "pkg:npm/normalify@2.22.0"
      ]
    },
    {
      "ref": "pkg:npm/spdx-exceptions@2.3.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-license-ids@3.0.9",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/spdx-expression-parse@3.0.1",
      "dependsOn": [
        "pkg:npm/spdx-exceptions@2.3.0",
        "pkg:npm/spdx-license-ids@3.0.9"
      ]
    },
    {
      "ref": "pkg:npm/spdx-license-list@6.4.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/projectz@2.21.0",
      "dependsOn": [
        "pkg:npm/@bevry/file@1.1.0",
        "pkg:npm/@bevry/json@1.4.0",
        "pkg:npm/badges@4.27.0",
        "pkg:npm/caterpillar@6.7.0",
        "pkg:npm/fellow@6.23.0",
        "pkg:npm/get-cli-arg@7.1.0",
        "pkg:npm/spdx-expression-parse@3.0.1",
        "pkg:npm/spdx-license-list@6.4.0",
        "pkg:npm/typechecker@7.17.0"
      ]
    },
    {
      "ref": "pkg:npm/readdir-cluster@3.16.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/filename-reserved-regex@2.0.0",
      "dependsOn": []
    },
    {
      "ref": "pkg:npm/valid-filename@3.1.0",
      "dependsOn": [
        "pkg:npm/filename-reserved-regex@2.0.0"
      ]
    },
    {
      "ref": "pkg:npm/valid-directory@3.7.0",
      "dependsOn": [
        "pkg:npm/readdir-cluster@3.16.0",
        "pkg:npm/valid-filename@3.1.0"
      ]
    },
    {
      "ref": "pkg:npm/domain-browser@4.22.0",
      "dependsOn": [
        "pkg:npm/@bevry/update-contributors@1.19.0",
        "pkg:npm/assert-helpers@8.4.0",
        "pkg:npm/kava@5.14.0",
        "pkg:npm/projectz@2.21.0",
        "pkg:npm/valid-directory@3.7.0"
      ]
    }
  ],
  "annotations": [
    {
      "bom-ref": "metadata-annotations",
      "subjects": [
        "pkg:npm/domain-browser@4.22.0"
      ],
      "annotator": {
        "component": {
          "group": "@cyclonedx",
          "name": "cdxgen",
          "version": "12.3.3",
          "purl": "pkg:npm/%40cyclonedx/cdxgen@12.3.3",
          "type": "application",
          "bom-ref": "pkg:npm/@cyclonedx/cdxgen@12.3.3",
          "publisher": "OWASP Foundation",
          "authors": [
            {
              "name": "OWASP Foundation"
            }
          ]
        }
      },
      "timestamp": "2026-07-29T20:29:30Z",
      "text": "This Software Bill-of-Materials (SBOM) document was created on Wednesday, July 29, 2026 with cdxgen. The data was captured during the pre-build lifecycle phase without building the application. The document describes an application named 'domain-browser' with version '4.22.0'. The package type in this SBOM is npm with a single purl namespace '@bevry' described under components. The components were identified from the source files: package-lock.json."
    }
  ]
}